System and method for temporary password management

1. A computer-implemented method of passwords management, the method comprising:

obtaining, by a password management entity, a request to login into a local device;

sending, by the password management entity, a notification to a user device;

obtaining, by the password management entity, a notification approval from the user device;

upon, obtaining the notification approval, generating, by the password management entity, a temporary password;

sending, by the password management entity, the temporary password to the authentication authority;

sending, by the password management entity, the temporary password to the local device;

sending, by the local device, the temporary password obtained from the password management entity to the authentication authority;

obtaining, at the authentication authority, the temporary password from the local device;

comparing, by the authentication authority, the temporary password obtained from the local device with the temporary password obtained from the password management entity; and

authorizing, by the authentication authority, the login if a match is found.

2. The method of claim 1 , wherein sending the notification comprises:

encrypting the notification using an encryption key;

creating, by the password management entity, at least two shares based on the encryption key;

sending the at least two shares of the encryption key over two different channels to the user device; and

sending the encrypted notification to the user device,

wherein sending the temporary password comprises:

upon obtaining the notification approval, encrypting the temporary password using the encryption key and sending the encrypted temporary password to the user device.

3. The method of claim 2 , wherein:

each of the at least two shares includes a pair of input and output values of a polynomial of a first degree, and

wherein the method includes:

using the pairs to identify the polynomial; and

generating the encryption key based on a function applied to at least one coefficient of the polynomial.

4. The method of claim 2 , further comprising:

generating a set of at least K+1 pairs of input and output values of a polynomial of degree K, wherein each of the at least two shares includes a portion of pairs of input and output values of the polynomial;

using the at least two shares to identify the polynomial; and

after identifying the polynomial from the at least K+1 pairs, applying a function to at least one of the coefficients of the polynomial to generate the encryption key.

5. The method of claim 1 , comprising sending the temporary password to the user device, wherein sending the temporary password to the user device comprises:

generating, by the password management entity, a first and a second shares, based on the temporary password, wherein the temporary password can be determined based on the first share and the second share;

sending, by the password management entity, the first share to the user device over a first secured communication channel; and

sending, by the password management entity, the second share to the user device over a second secured communication channel.

6. The method of claim 1 , further comprising:

sending the temporary password to the user device;

storing the temporary password at the user device; and

using the temporary password from the user device to login to the local device when the local device is offline or when a local login is needed.

7. The method of claim 1 , further comprising:

upon obtaining the notification approval:

generating, by the password management entity, a first and a second shares based on the temporary password, wherein the temporary password can be determined based on the first and the second shares;

sending, by the password management entity the first share to the user device over a first secured communication channel; and

sending, by the password management entity the second share to the local device over a second secured communication channel.

8. The method of claim 7 , further comprising:

storing the temporary password and the second share at the local device; and

when the local device is offline or when a local login is needed:

obtaining the first share from the user device;

combining the first and the second shares to calculate a calculated temporary password;

comparing the calculated temporary password with the stored temporary password; and

authorizing the login request if the calculated temporary password and the stored temporary password are identical.

9. The method of claim 1 , further comprising:

deleting the temporary password from the authentication authority after comparing.

10. A system for passwords management, the system comprising:

a local device;

a first processor; and

a second processor configured to:

obtain a request to login into the local device;

send a notification to a user device;

obtain a notification approval from the user device;

upon obtaining the notification approval, generate a temporary password;

send the temporary password to the first processor;

send the temporary password to the local device:

wherein the local device is configured to send the temporary password obtained from the second processor to the first processor;

wherein the first processor is configured to:

obtain the temporary password from the local device;

compare the temporary password obtained from the local device with the temporary password obtained from second processor; and

authorize the login if a match is found.

11. The system of claim 10 , wherein the second processor is configured to send the notification by:

encrypting the notification using an encryption key;

creating at least two shares based on the encryption key;

sending the at least two shares of the encryption key over two different channels to the user device; and

sending the encrypted notification to the user device,

wherein the second processor is configured to send the temporary password by:

upon obtaining the notification approval, encrypting the temporary password using the encryption key and sending the encrypted temporary password to the user device.

12. The system of claim 11 , wherein:

each of the at least two shares includes a pair of input and output values of a polynomial of a first degree, and

wherein the second processor is configured to:

use the pairs to identify the polynomial; and

generate the encryption key based on a function applied to at least one coefficient of the polynomial.

13. The system of claim 11 , wherein the second processor is configured to:

generate a set of at least K+1 pairs of input and output values of a polynomial of degree K, wherein each of the at least two shares includes a portion of pairs of input and output values of the polynomial;

use the at least two shares to identify the polynomial; and

after identifying the polynomial from the at least K+1 pairs, apply a function to at least one of the coefficients of the polynomial to generate the encryption key.

14. The system of claim 10 , wherein the second processor is configured to send the temporary password to the user device by:

generating a first and a second shares, based on the temporary password, wherein the temporary password can be determined based on the first share and the second share;

sending the first share to the user device over a first secured communication channel; and

sending the second share to the user device over a second secured communication channel.

15. The system of 10 , wherein:

the second processor is configured to send the temporary password to the user device;

the user device is configured to store the temporary password; and

wherein the user device is configured to use the temporary password from the user device to login to the local device when the local device is offline or when a local login is needed.

16. The system of claim 10 , wherein the second processor is configured to:

upon receiving the request to login into the local device, send a notification to a user device;

obtaining a notification approval from the user device; and

upon obtaining the notification approval:

generate a first and a second shares based on the temporary password, wherein the temporary password can be determined based on the first and the second shares;

send the first share to the user device over a first secured communication channel; and

send the second share to the local device over a second secured communication channel.

17. The system of claim 16 , wherein the local device is configured to:

store the temporary password and the second share; and

when the local device is offline or when a local login is needed:

obtain the first share from the user device;

combine the first and the second shares to calculate a calculated temporary password;

compare the calculated temporary password with the stored temporary password; and

authorize the login request if the calculated temporary password and the stored temporary password are identical.

18. The system of claim 10 , wherein the first processor is configured to:

deleting the temporary password after comparing.