Password protection
View Patent ↗An authentication system, including a pattern module to provide a pattern, a function module to provide a one-way function having a plurality of input and output values, a function processor to find one of the input values for the one-way function such that a corresponding one of the output values has the pattern, a password module to provide the one input value as a password for use in password authentication against the one output value, the one output value being a check value having a length, a compression module to determine a storage value such that: the check value can be reconstructed from the storage value and the pattern, and the storage value has a length which is shorter than the length of the check value, and a storage module to store the storage value in a storage medium for later retrieval. Related apparatus and methods are also included.
1. An authentication system to generate a useable password for use in secured systems, comprising processing machinery to:
(A) automatically generate a sample password; then
(B) input the sample password into a one-way function yielding an output value; and then
(C) compare the output value to a predetermined pattern wherein:
(i) if the output value does not have the predetermined pattern, repeat (A) to (C); and
(ii) if the output value has the predetermined pattern, then:
(a) issue the sample password as the useable password;
(b) issue the output value as a check value for use in authenticating the useable password when used in secured system;
(c) determine a storage value from the check value based on the pattern so that: the storage value is shorter than the check value; and the check value can be reconstructed based on the storage value and the predetermined pattern; and
(d) store the storage value in a storage medium.
2. The system according to claim 1 , wherein the storage value includes an indicator of the predetermined pattern.
3. The system according to claim 1 , wherein the predetermined pattern includes a string of predefined values in a predefined order.
4. The system according to claim 3 , wherein the storage value is void of the complete string.
5. The system according to claim 2 , wherein the string has a non-password use.
6. The system according to claim 5 , wherein the non-password use is for identification.
7. The system according to claim 1 , wherein at least part of the storage value has a non-password use.
8. The system according to claim 7 , wherein the non-password use is for identification.
9. The system according to claim 1 , wherein the one-way function is a cryptographic hash function and wherein the output value is a hash value.
10. A password generation method to generate a useable password for use in secured systems, comprising performing the following with processing machinery:
(A) automatically generating a sample password; then
(B) inputting the sample password into a one-way function yielding an output value; and then
(C) comparing the output value to a predetermined pattern wherein:
(i) if the output value does not have the predetermined pattern, repeating (A) to (C); and
(ii) if the output value has the predetermined pattern, then:
(a) issuing the sample password as the useable password;
(b) issuing the output value as a check value for use in authenticating the useable password when used in secured system;
(c) determining a storage value from the check value based on the pattern so that: the storage value is shorter than the check value; and the check value can be reconstructed based on the storage value and the predetermined pattern; and
(d) storing the storage value in a storage medium.