Robust restoration of passphrases from partial information
View Patent ↗Non-transitory computer readable medium that may store instructions that once executed by a computer may cause a computer to receive or generate multiple security questions, receive multiple security answers that were provided by an entity in response to the multiple security questions, receive or generate redundant information and calculate the passphrase by applying an error correction process on the redundant information and the multiple security answers; wherein the error correction process is configured to correct up to a predefined number of erroneous security answers.
1. A computer implemented method for generating a passphrase, the method comprises:
receiving, by a computer, multiple security questions;
receiving, by the computer, multiple security answers that were provided by an entity in response to the multiple security questions;
receiving, by the computer, redundant information;
calculating the passphrase by applying, by the computer, an error correction process on the redundant information and the multiple security answers; wherein the error correction process is configured to correct up to a predefined number of erroneous security answers;
receiving or calculating a signature of the passphrase;
evaluating different hypotheses about erroneous security answers to provide multiple suggested passphrases;
calculating, for each suggested passphrase of the multiple suggested passphrases, a suggested signature thereby providing multiple suggested signatures; and
searching for a matching suggested signature, out of the multiple suggested signatures, that matches the signature of the passphrase;
selecting a hypothesis associated with the matching suggested signature; and
correcting erroneous security answers within the selected hypothesis to provide the passphrase.
2. The computer implemented method according to claim 1 , comprising determining access credentials of the entity based on the passphrase.
3. The computer implemented method according to claim 1 , comprising calculating, by the computer, the redundant information in response to correct security answers.
4. The computer implemented method according to claim 1 , wherein the calculating of the passphrase comprises:
applying a cryptographic one way hash on the multiple security answers to provide multiple calculated hash values; and
comparing the multiple calculated hash values to multiple hash values associated with the correct security answers to determine which security answers are correct.
5. The computer implemented method according to claim 1 , wherein the calculating of the passphrase comprises detecting unanswered security questions and reconstructing, during the calculating the passphrase, security answers to the unanswered security questions.
6. The computer implemented method according to claim 1 comprising retrieving at least one security answer from another computer.
7. The computer implemented method according to claim 1 comprising retrieving a plurality of security answers, out of the multiple security answers, from a plurality of other computers.
8. The computer implemented method according to claim 1 comprising retrieving at least a portion of the redundant information from another computer.
9. The computer implemented method according to claim 1 comprising retrieving plurality of portions of the redundant information from a plurality of other computers.
10. The computer implemented method according to claim 1 comprising storing only some of the security answers in the computer.
11. The computer implemented method according to claim 1 comprising storing only a portion of the redundant information in the computer.
12. A non-transitory computer readable medium that stores instructions that once executed by a computer causes a computer to:
receive multiple security questions;
receive multiple security answers that were provided by an entity in response to the multiple security questions;
receive redundant information;
calculate the passphrase by applying an error correction process on the redundant information and the multiple security answers; wherein the error correction process is configured to correct up to a predefined number of erroneous security answers;
receive or calculate a signature of the passphrase;
evaluate different hypotheses about erroneous security answers to provide multiple suggested passphrases;
calculate, for each suggested passphrase of the multiple suggested passphrases, a suggested signature thereby providing multiple suggested signatures; and
search for a matching suggested signature, out of the multiple suggested signatures, that matches the signature of the passphrase;
select a hypothesis associated with the matching suggested signature; and
correct erroneous security answers within the selected hypothesis to provide the passphrase.