Password Management via Random Table Element Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password management systems for multiple server apparatuses are insecure, particularly when used in public environments like Internet Cafes, as they require users to remember and store multiple passwords, and if lost, the passwords cannot be easily recovered.
Innovation Solution
A communication apparatus that generates a random table associated with server names, allowing users to select and arrange elements to derive a unique password, which is then used to access server apparatuses securely, without directly storing the password, thus enhancing security by not recording the selection order.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If passwords for multiple server apparatuses are stored in a storage medium, then users can access multiple services, but security is lowered when used in public environments like Internet Cafes
Solution Approach 1:
The password is segmented into multiple elements arranged in a table structure with rows and columns. The actual password can be reconstructed by selecting and arranging specific elements in a predetermined order, but individual elements alone are meaningless. This segmentation prevents password leakage even if the storage medium is compromised.
Solution Approach 2:
A random table is introduced as an intermediary between the stored password elements and the actual password. The random table requires user interaction to select and arrange elements in a specific order, adding an intermediate step that prevents direct password extraction while enabling password generation.
2Ease of operation
If passwords are stored in a storage medium, then users can retrieve them, but if the storage medium is lost, the passwords cannot be remembered
Solution Approach 1:
The password elements are pre-arranged in a table structure with embedded selection orders. When the storage medium is lost, users can regenerate the password by重新 creating the random table and following the predetermined selection order, which is stored separately or memorized, enabling password recovery without the original storage medium.
3Reliability
If multiple passwords are memorized by users, then security for multiple services is enhanced, but it becomes troublesome for users
Solution Approach 1:
Multiple password elements are merged into a single table structure that can generate passwords for multiple server apparatuses. Instead of memorizing multiple separate passwords, users interact with one unified random table system that provides access to multiple services through element selection and arrangement.
4Device complexity
If the selection order is recorded in the communication apparatus, then password generation is simplified, but security is compromised as the actual password can be detected
Solution Approach 1:
The selection order information is extracted from the communication apparatus and stored separately or required to be input by the user during each password generation operation. The communication apparatus only stores the password elements in the table, not the selection order, preventing password detection even if the apparatus is compromised.
Data Source
AI summary
Provided is a communication apparatus (121) that securely manages passwords for utilizing a server apparatus. A generator (203) generates a random table having the same number of rows and the same number of columns as a password table associated with a server name specified in an authentication request received by a receiver (202). An acceptor (205) accepts a key from a user to whom the random table is presented by a presenter (204). An identification unit (206) identifies, from the key and the random table, the user's of selection order of elements in the table. An acquirer (207) selects and arranges elements in the password table in the identified selection order, thereby acquiring a password. An output unit (208) displays the acquired password on a display or transmits the acquired password to the server apparatus, thereby allowing the user to utilize the server apparatus.