Patent Application
20050177754
The present invention relates to computer system, and more particularly, to computer system access control.
Increase in usage of e-commerce or Internet raises questions regarding security of electronic accounts. Typically, access to each e-commerce or Internet account requires specific user identification and an associated password. Depending on levels of security desired, some accounts may even require more than one password for accessing different account information. Moreover, some accounts may require periodic change of user identification and password, with old user identification and passwords deemed obsolete and non-reusable, and thus new passwords have to be generated and ideally memorized. As a result, a typical user will have to handle a large number of user identifications and passwords. However, as the number of identifications and passwords increases, handling the number of user identifications and passwords becomes even more difficult.
The complexity of retrieving a password using brute force methods increases exponentially with the length of the password. On the other hand, longer passwords are generally more difficult to memorize, and thus less likely to be changed frequently. To ease the difficulty in memorizing a long password, users tend to choose longer passwords that are not a random combination of symbols. In such cases, non-random combination of symbols are generally more vulnerable to security threats. In many cases, users simply use the same user identification and password for all accounts, the same user identification and a set of correlated passwords for all accounts, or sometimes a set of shortest possible but correlated user identifications and passwords. In these cases, if one of the passwords is revealed, the security of other accounts is jeopardized as well. Use of weak passwords such as those related to personal information like birthdays and maiden name further increases the security threats. Furthermore, users may eventually forget either the user identification or the associated password, or both, associated with an account, if the account is accessed scarcely or after a long period of time.
Accordingly, the present invention provides a password management system and method. The system can include a host computing processor that encrypts a list of passwords, and a portable access device to store a list of encrypted passwords and to communicate the list of encrypted passwords with the host computing processor through a peripheral port. The invention may also provide a password management system that includes a portable access device to store a list of encrypted passwords, an encryption module to encrypt a new password, and a driver to read a master access code.
The method of managing a list of passwords includes encrypting a list of passwords at a host computing processor, storing the list of encrypted passwords at a portable access device selectively coupled to the host computing processor, and communicating the list of encrypted passwords between the host computing processor and the portable access device.
Other features and advantages of the invention will become apparent to those skilled in the art upon review of the following detailed description, claims, and drawings.
Before any embodiments of the invention are explained in detail, it is to be understood that the invention is not limited in its application to the details of construction and the arrangement of components set forth in the following description or illustrated in the following drawings. The invention is capable of other embodiments and of being practiced or of being carried out in various ways. Also, it is to be understood that the phraseology and terminology used herein is for the purpose of description and should not be regarded as limiting. The use of “including,” “comprising,” or “having” and variations thereof herein is meant to encompass the items listed thereafter and equivalents thereof as well as additional items. Unless limited otherwise, the terms “connected,” “coupled,” and “mounted” and variations thereof herein are used broadly and encompass direct and indirect connections, couplings, and mountings. In addition, the terms “connected” and “coupled” and variations thereof are not restricted to physical or mechanical connections or couplings.
The drive 108 is connected to the host computing processor 104 at the peripheral port 116. The drive 108 is thus an interface between the host computing processor 104 and the PAD 112. Furthermore, the drive 108 also has a PAD entry 118 into which the PAD 112 is inserted. The PAD entry 118 can be a key slot with internal contacts, a USB port, a PS/2, a magnetic swipe card, or the like. Although the drive 108 is shown as an external peripheral, the drive 108 can also be an internal interface device such as an internal expansion card or a riser card implemented inside the host computing processor 104 in some instances. If the drive 108 is an internal interface device, the internal drive 108 then has an option of having the PAD entry 118 on the internal interface device such that the PAD 112 can be coupled to the drive 108. The internal drive 108 can also be optionally configured to communicate with the peripheral port 116 of the host computing processor 104 and configure the existing peripheral port 116 on the host computing processor 104 as the PAD entry 118.
Specifically,
Referring again to
Similarly, the system 100 also includes a software driver 132 that resides on the host computing processor 104, as shown in
Initially, data is stored in the active bank 152. Along with the data stored in the first bank 152, a checksum field is also stored. In the embodiment shown, the checksum field is determined using a hash function. Furthermore, the flag register 148 also keeps track of, specifies and indicates which of the two banks 152 or 156 is being used or active, and therefore the other bank is inactive. For example, if the active bank is configured to store the current password list, to prevent accidental loss of data, the software driver 132 will write the new encrypted list together with its checksum data to the inactive memory bank. The software driver 132 will then verify the write operation by reading the contents of the inactive memory bank. If the verification is successful, the flag register 148 in the PAD 112 is updated to point to the inactive bank as the new active memory bank. However, if there has been any data transmission error, the software driver 132 will not change the contents of the flag register 148 in the PAD 112, thus the current password list will not be damaged as a result of transmission error. Optionally, the inactive bank may also serve as a backup in case the contents of the active bank get corrupted. In particular, only a few passwords are normally changed at a time in the active bank. When it is determined that there is a transmission error, or the data has been corrupted, the software driver 132 can repair the corrupted data in the active bank by replacing the corrupted data with the original uncorrupted data stored in the inactive bank.
The software driver 132 will also detect if the attached PAD 112 is blank, for example, in the case of storing data in the back up PAD. If the memory 120 of the connected PAD 112 is determined blank, the software driver 132 will prompt for the original PAD 112. The data in the memory 120 of the original PAD 112 is copied to a memory location on the host computing processor 104 after the original PAD 112 has been connected. The software driver 132 will prompt for the back up PAD. The data stored in the memory location on the host computing processor 104 is then copied to the back up PAD. The data in the memory is then optionally deleted or destroyed for security purpose.
To operate the system 100, a user will simply need to memorize a single password. As a result, the user may choose a very strong password consisting of a long concatenation of random symbols, dictionary words, or the like to protect the encrypted list of passwords. In this way, the user will be able to use much longer and different individual passwords for different accounts since they are stored in the memory 120 of the PAD 112. Furthermore, the master access password can also be changed occassionally depending on needs.
Specifically, the user will insert the PAD 112 into the PAD entry 118 of the drive 108 connected to the host computing processor 104, or directly into the peripheral port 116 or the PAD entry 118 as described when the drive 108 is installed as an internal device as described. When the software driver 132 has detected a PAD presence, the software driver 132 will prompt the user for a master password via the user interface 106. The software driver 132 compares the entry provided by the user to the master password in the memory of the PAD 112. Upon authenticating the master password entered, the software driver 132 permits the drive 108 to read data such as a list of passwords and associated information stored in the memory 120. The software driver 132 decodes and error corrects the data with the error correction module 144. The error-corrected data is then decrypted with the decryption module 140, and is thus available for use by the user.
Whenever the user visits an account, the software driver 132 will let the user choose the proper identification information from the decrypted password list. Alternatively, the software driver 132 may compare the address of the account being accessed with the additional account information stored along with the passwords in the list and automatically extract the required identification information from the PAD 112. If the account address does not match any of the entries in the list, the account is considered as new and the user will be prompted for the new identification information. After the user has entered a new password, the entered password is again entered or spoofed on the account or web page. Meanwhile, the software driver 132 will insert the new password along with its associated information into the existing list, thus creating a modified list of password.
When the user has finished working with the account or web page, the software driver 132 will prompt for user confirmation, encrypt the existing or the modified list of passwords along with its associated information at the host computing processor 104 using the master key provided by the user. Again, while the encryption is performed on the host computing processor 104, the encryption algorithm can be optionally retrieved from the PAD 112 for portability, or from a memory location on the host computing processor 104 specified by the software driver 132. The encrypted list is then transmitted through the drive 108 to the PAD 112 for storage. Writing to the memory 120 for storage will follow instructions described earlier regarding the memory banks, 152 and 156.
Various features and advantages of the invention are set forth in the following claims.
