Server-Side Password Rotation for Unsecure Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face risks of password compromise when accessing accounts in unsecure public settings, such as public Wi-Fi networks or shared computers, due to vulnerabilities like keystroke loggers and visual interception, making it difficult to safely change passwords without exposing new information to hackers.
Innovation Solution
Implementing a system where an active and inactive password are stored on a server, allowing users to initiate an 'emergency mode' that disables the active password and activates the inactive one without needing to enter it, preventing exposure of the new password to hackers, even in untrusted environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users change passwords by typing in new passwords over unsecure network connections, then password updates can be performed, but the new passwords may be compromised by hackers through network interception or visual observation
Solution Approach 1:
The system pre-generates and stores backup passwords on the server before the user needs to change their password. When password change is initiated, the system automatically provides the pre-generated backup password without requiring the user to type or transmit a new password over the unsecure network, thus eliminating the exposure risk while maintaining password update capability
Solution Approach 2:
The system introduces an intermediary mechanism (automatic password generation and transmission system) that mediates between the user's password change request and the server's authentication requirements. The system automatically handles password generation, encryption, and transmission, preventing direct exposure of passwords to network interception or visual observation threats
2Adaptability or versatility
If users access accounts from public computers or unsecure networks, then account accessibility is improved, but vulnerability to keystroke loggers and network hackers increases
Solution Approach 1:
The system extracts the password input step from the authentication process by implementing automatic password generation and transmission. This removes the vulnerable element (user typing password on potentially compromised devices) while preserving the essential authentication function, allowing secure access from any device without exposing credentials to keystroke loggers
Solution Approach 2:
The system implements self-service authentication where the server automatically generates, transmits, and manages passwords without requiring user input. The authentication process becomes self-contained and automated, eliminating dependencies on user actions that could be intercepted by keystroke loggers or shoulder-surfing attackers
Data Source
AI summary
Systems and methods are provided for accessing a user account by a user with a first password, and then changing the first password to a second password in response to a request from the user without compromising the second password. The system may include a database in a server storing the first password and the second password. The server may provide the user access to the user account over a network connection in response to receiving the first password from the user. In response to the server receiving a request by the user, the server may disable the first password and activate the second password without requiring the user to provide the second password over the network connection at the time of the request.