Access control using passwords derived from phrases provided by users

1. A method of controlling access to a resource, the method comprising:

deriving, by processing circuitry, a password based on a phrase provided by a user;

by the processing circuitry, confirming with the user that the password is to control access to the resource; and

after confirming with the user that the password is to control access to the resource, imposing, by the processing circuitry, a requirement that the user provide the password before obtaining access to the resource;

wherein deriving the password based on the phrase provided by the user includes:

prompting the user to type in the phrase,

extracting a first group of words from the phrase,

modifying at least some of the words in the first group of words extracted from the phrase to generate a second group of words, and

providing the second group of words to the user; and

wherein providing the second group of words to the user for password use includes:

displaying, as a proposal for the password, each word of the second group of words on an electronic display to the user, the proposal for the password including at least 16 letters.

2. The method as in claim 1 wherein prompting the user to type in the phrase includes:

instructing the user to write, as the phrase, an expression regarding a particular subject.

3. The method as in claim 2 wherein prompting the user to type in the phrase further includes:

prior to instructing the user to write the expression, randomly selecting the particular subject from multiple subjects in a subject database, and

presenting the particular subject on the electronic display to the user.

4. The method as in claim 1 wherein extracting the first group of words from the phrase includes:

parsing the phrase into individual words, and

selecting, as the first group of words, less than all of the individual words parsed from the phrase.

5. The method as in claim 4 wherein selecting less that all of the individual words includes:

identifying, as the first group of words, a predefined number of uncommon words from the individual words parsed from the phrase.

6. The method as in claim 5 wherein identifying the predefined number of uncommon words from the individual words parsed from the phrase includes:

scoring each individual word parsed from the phrase based on a word preference database, and

selecting, as the first group of words, four words from the individual words parsed from the phrase based on scoring each individual word.

7. The method as in claim 1 wherein modifying at least some of the words in the first group of words includes:

adjusting letters in words of the first group of words to form the second group of words.

8. The method as in claim 7 wherein adjusting the letters in the words of the first group of words includes:

for each word of the first group of words, making an adjustment to exactly one letter in that word to form a new word that is different from that word, the new word being included in the second group of words.

9. The method as in claim 7 wherein adjusting the letters in the words of the first group of words includes:

replacing exactly one letter with another letter in a particular word of the first group of words to form a particular word of the second group of words.

10. The method as in claim 7 wherein adjusting the letters in the words of the first group of words includes:

deleting exactly one letter from a particular word of the first group of words to form a particular word of the second group of words.

11. The method as in claim 7 wherein adjusting the letters in the words of the first group of words includes:

adding exactly one letter to a particular word of the first group of words to form a particular word of the second group of words.

12. The method as in claim 1 wherein displaying each word of the second group of words includes:

presenting, on the electronic display to the user, a concatenated string of letters, the concatenated string including each word of the second group of words.

13. The method as in claim 1 wherein confirming with the user that the password is to control access to the resource includes:

prompting the user to approve the password as an authentication factor for authentication of the user and, in response, receiving an electronic signal approving the password as an authentication factor for authentication of the user.

14. The method as in claim 13 wherein imposing the requirement that the user provide the password before obtaining access to the resource includes:

querying the user for the password and, in response, receiving input from the user,

performing an authentication operation based on the input from the user,

granting resource access to the user when a result of the authentication operation indicates that the user is authentic, and

denying resource access to the user when the result of the authentication operation does not indicate that the user is authentic.

15. The method as in claim 1 wherein each word of the second group of words includes multiple letters; and

wherein displaying each word of the second group of words on the electronic display includes rendering the multiple letters of each word to the user.

16. Electronic circuitry that controls access to a resource, the electronic circuitry comprising:

memory; and

control circuitry coupled to the memory, the memory storing instructions which, when carried out by the control circuitry, cause the control circuitry to:

derive a password based on a phrase provided by a user,

confirm with the user that the password is to control access to the resource, and

after confirming with the user that the password is to control access to the resource, impose a requirement that the user provide the password before obtaining access to the resource;

wherein the control circuitry, when deriving the password based on the phrase provided by the user, is constructed and arranged to:

prompt the user to type in the phrase,

extract a first group of words from the phrase,

modify at least some of the words in the first group of words extracted from the phrase to generate a second group of words, and

provide the second group of words to the user; and

wherein the control circuitry, when providing the second group of words to the user for password use, is constructed and arranged to:

display, as a proposal for the password, each word of the second group of words on an electronic display to the user, the proposal for the password including at least 16 letters.

17. The electronic circuitry as in claim 16 wherein the control circuitry, when extracting the first group of words from the phrase, is constructed and arranged to:

parse the phrase into individual words, and

select, as the first group of words, less than all of the individual words parsed from the phrase; and

wherein the control circuitry, when modifying at least some of the words in the first group of words, is constructed and arranged to:

adjust letters in words of the first group of words to form the second group of words.

18. The electronic circuitry as in claim 17 wherein the control circuitry, when prompting the user to type in the phrase, is constructed and arranged to:

randomly select a particular subject from multiple subjects in a subject database,

present the particular subject on the electronic display to the user, and

instruct the user to write, as the phrase, an expression regarding a particular subject.

19. The electronic circuitry as in claim 16 wherein each word of the second group of words includes multiple letters; and

wherein the control circuitry, when displaying each word of the second group of words on the electronic display, is constructed and arranged to render the multiple letters of each word to the user.

20. A computer program product having a non-transitory computer readable medium which stores a set of instructions to control access to a resource; the set of instructions, when carried out by computerized circuitry, causing the computerized circuitry to perform a method of:

deriving a password based on a phrase provided by a user;

confirming with the user that the password is to control access to the resource; and

after confirming with the user that the password is to control access to the resource, imposing a requirement that the user provide the password before obtaining access to the resource;

wherein deriving the password based on the phrase provided by the user includes:

prompting the user to type in the phrase,

extracting a first group of words from the phrase,

modifying at least some of the words in the first group of words extracted from the phrase to generate a second group of words, and

providing the second group of words to the user;

wherein extracting the first group of words from the phrase includes:

parsing the phrase into individual words, and

selecting, as the first group of words, less than all of the individual words parsed from the phrase;

wherein modifying at least some of the words in the first group of words includes:

adjusting letters in words of the first group of words to form the second group of words;

wherein providing the second group of words to the user for password use includes:

displaying, as a proposal for the password, each word of the second group of words on an electronic display to the user, the proposal for the password including at least 16 letters;

wherein confirming with the user that the password is to control access to the resource includes:

prompting the user to approve the password as an authentication factor for authentication of the user and, in response, receiving an electronic signal approving the password as an authentication factor for authentication of the user; and

wherein imposing the requirement that the user provide the password before obtaining access to the resource includes:

querying the user for the password and, in response, receiving input from the user,

performing an authentication operation based on the input from the user,

granting resource access to the user when a result of the authentication operation indicates that the user is authentic, and

denying resource access to the user when the result of the authentication operation does not indicate that the user is authentic.