Managing passwords
A method is used in managing passwords. A proposed new password is received. The proposed new password is associated with contextual information indicating a context in which the proposed password is to be used. A machine learning model is dynamically selected from a set of machine learning models based on the contextual information. A quality metric is derived from the proposed new password based on the selected machine learning model.
1. A method for use in managing passwords, the method comprising:
receiving a proposed new password, the proposed new password being associated with contextual information indicating a context in which the proposed password is to be used;
based on the contextual information, dynamically selecting a machine learning model from a set of machine learning models;
based on the selected machine learning model, deriving a quality metric from the proposed new password;
establishing a set of contexts based on contextual information, each context of the set of contexts being associated with a set of passwords likely to be used by a user within the respective context, wherein the contextual information includes one or more of organizational information, user information, an application to which the user seeks access, or a service to which the user seeks access; and
generating the set of machine learning models by associating each context of the set of contexts with a respective password training set for generating a respective machine learning model.
2. The method of claim 1 , further comprising:
based on the quality metric, determining whether to approve the proposed new password.
3. The method of claim 1 , wherein the quality metric includes a password score.
4. The method of claim 1 , wherein a password training set further comprises a plurality of vulnerable passwords.
5. The method of claim 4 , wherein generating a machine learning model further comprising:
associating each vulnerable password of a password training set used for generating the machine learning model with a weight.
6. The method of claim 5 , wherein evaluating the quality metric of the proposed new password using the selected machine learning model includes computing a password score for the proposed new password.
7. The method of claim 1 , further comprising:
providing the proposed new password and contextual metadata to a password scorer module for dynamically selecting the machine learning model and evaluating the quality metric of the proposed new password using the selected machine learning model, wherein a user authentication module is further configured to determine whether to allow the user to establish the proposed new password based on the quality metric of the proposed new password.
8. The method of claim 7 , wherein the user authentication module gathers additional contextual metadata and provides the additional contextual metadata to the password scorer module for evaluating the quality metric of the proposed new password.
9. A system for managing passwords comprising a memory and a processor configured to:
receive a proposed new password, the proposed new password being associated with contextual information indicating a context in which the proposed password is to be used;
based on the contextual information, dynamically select a machine learning model from a set of machine learning models;
based on the selected machine learning model, derive a quality metric from the proposed new password;
establishing a set of contexts based on contextual information, each context of the set of contexts being associated with a set of passwords likely to be used by a user within the respective context, wherein the contextual information includes one or more of organizational information, user information, an application to which the user seeks access, or a service to which the user seeks access; and
generating the set of machine learning models by associating each context of the set of contexts with a respective password training set for generating a respective machine learning model.
10. The system of claim 9 , further comprising:
based on the quality metric, determining whether to approve the proposed new password.
11. The system of claim 9 , wherein the quality metric includes a password score.
12. The system of claim 9 , wherein a password training set further comprises a plurality of vulnerable passwords.
13. The system of claim 12 , wherein generating a machine learning model further comprising:
associating each vulnerable password of a password training set used for generating the machine learning model with a weight.
14. The system of claim 13 , wherein evaluating the quality metric of the proposed new password using the selected machine learning model includes computing a password score for the proposed new password.
15. The system of claim of claim 9 , the processor is further configured to: provide the proposed new password and contextual metadata to a password scorer module for dynamically selecting the machine learning model and evaluating the quality metric of the proposed new password using the selected machine learning model, wherein a user authentication module is further configured to determine whether to allow the user to establish the proposed new password based on the quality metric of the proposed new password.
16. The system of claim 15 , wherein the user authentication module gathers additional contextual metadata and provides the additional contextual metadata to the password scorer module for evaluating the quality metric of the proposed new password.