Stateless Password Manager Using Phonetic Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in managing multiple passwords securely due to the need for unique, complex passwords across various applications, leading to password reuse, simple passwords, and forgotten passwords, which compromise computer network security.
Innovation Solution
A stateless password management system that generates unique application passwords using a global password, application name, and optional username or version, converted to a phonetic password and processed through a key derivation function, ensuring security without storing actual passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users create unique complex passwords for each application, then security is improved, but ease of operation deteriorates due to difficulty in remembering multiple passwords
Solution Approach 1:
The system segments the password management problem by separating the master password (stored by user) from individual application passwords (generated on-demand). The master password is divided into components through phonetic conversion and key derivation, creating unique passwords for each application without the user needing to remember them all.
Solution Approach 2:
The patent introduces an intermediary system (password generation system) that acts as a mediator between the user's single master password and the multiple application passwords. This intermediary performs phonetic conversion, trimming, and key derivation to transform the master password into application-specific passwords, eliminating the need for users to directly manage multiple complex passwords.
2Ease of operation
If passwords are written down for easy access, then ease of operation is improved, but security deteriorates due to risk of physical breach
Solution Approach 1:
The system enables self-service password generation where the user's master password automatically generates application passwords through phonetic conversion and key derivation functions. The system serves itself by generating passwords on-demand without requiring physical storage or external assistance, eliminating the need to write down passwords while maintaining security.
3Ease of operation
If a centralized password storage system is used, then ease of operation is improved, but security deteriorates due to single point of failure
Solution Approach 1:
The patent extracts the actual password data from the system architecture entirely. Instead of storing passwords in a centralized database, the system only stores the user's master password locally and generates application passwords on-demand through cryptographic key derivation. This extraction of password storage eliminates the single point of failure while maintaining ease of operation through automated generation.
Solution Approach 2:
The system changes the fundamental parameter of password storage from centralized database storage to distributed on-demand generation. By transforming the master password through phonetic conversion and key derivation functions with different parameters (application name, version, username), the system generates unique passwords without centralized storage, eliminating security vulnerabilities associated with centralized databases.
4Reliability
If passwords are frequently reset due to forgetting, then security is improved through rotation, but loss of time increases due to constant password management
Solution Approach 1:
The system performs preliminary action by establishing a single master password that inherently generates all application passwords through phonetic conversion and key derivation. This preliminary setup eliminates the need for frequent password resets, as the master password automatically maintains security through on-demand generation of unique application passwords without requiring user intervention or time investment.
Data Source
AI summary
A first application name is received. For example, the first application name may be the name of the application, a Universal Resource Locator (URL) of a web site (e.g., microfocus.com), and/or the like. The first application name represents a computer application of a plurality of computer applications that the user logs into. A global password is received from the user. The global password is used as a seed to login to the plurality of computer applications. The global password is converted to a phonetic password. A first application password is generated for the first computer application based on the first application name and the phonetic password. For example, the first application name and the phonetic password are used as an input to a key deviation function. The first application password is then displayed to the user. The user can then use the displayed password to login to the first application.