Secure Device Access Recovery via Encrypted Password Containers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Internet's architecture at the network layer lacks anti-fraud protection and user identity protection, leading to severe security threats and data breaches, with existing security measures being insufficient to prevent malicious attacks and unauthorized access.
Innovation Solution
A secure peer-to-peer data network is established using a network operating system that encrypts user passwords, generates a secure recovery container with a one-time password seed, and authorizes new passwords through decryption, ensuring secure device access recovery without exposing initial passwords or requiring storage by network service providers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a strong password is established for secure device access, then security is improved, but device access recovery becomes difficult when the user cannot remember the password
Solution Approach 1:
The system performs preliminary action by creating a secure recovery container and storing an encrypted copy of the password before the user actually needs recovery. The recovery container is prepared in advance with the encrypted password and stored securely in a recovery device, so when password recovery becomes necessary, the pre-prepared container can be used immediately without compromising security or requiring the user to remember the original password.
2Reliability
If password encryption and secure storage are implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The system introduces a recovery container as an intermediary element that simplifies the overall system architecture. Instead of implementing complex key management systems or distributed storage solutions, the invention uses a single recoverable container that holds the encrypted password. This intermediary absorbs the complexity of secure storage and retrieval, while presenting a simple interface to both users and the system.
3Ease of operation
If centralized password storage by network service providers is used, then ease of recovery is improved, but security risks and data breach vulnerabilities increase
Solution Approach 1:
The system extracts the password recovery function from the network service provider's centralized storage system. Instead of relying on the provider to store and manage user passwords centrally, the invention extracts the encrypted password copy and stores it in a recovery container that is controlled by the user through their recovery device. This extraction removes the security vulnerability of centralized storage while maintaining the ability to recover passwords.
Data Source
AI summary
Secure access recovery to a network device includes encrypting a user password into an encrypted target password using a secret regenerative key, and adding a one-time password seed and the encrypted target password into a secure recovery container, which is stored securely in the network device and a trusted recovery device. In response to a recovery request, a one-time password can be generated using the one-time password seed to retrieve the encrypted target password from the recovery device. A decrypted recovery password is generated based on executing decryption on an input string based on the secret regenerative key. The encrypted target password, retrieved from the secure recovery container in the network device, is decrypted into a decrypted target password based on the secret regenerative key. Secure access is recovered in response to determining the decrypted recovery password matches at least a part of the decrypted target password.