System and method for temporary password management

1. A computer-implemented method of passwords management, the method comprising:

obtaining, by a password management entity, a request to login a local device into an authentication authority;

generating, by the password management entity, a temporary password;

generating, by the password management entity, two values, TP 1 and TP 2 , based on the temporary password, wherein the temporary password can be determined based on the values TP 1 and TP 2 ;

sending, by the password management entity, the temporary password to the authentication authority;

sending, by the password management entity, the temporary password to a user device by sending the values TP 1 and TP 2 over multiple channels;

combining, by the user device, the values TP 1 and TP 2 to arrive at the temporary password;

obtaining, at the local device, the temporary password from the user device;

obtaining, at the authentication authority the temporary password from the local device;

comparing, by the authentication authority, the temporary password obtained from the local device with the temporary password obtained from the password management entity; and

authorizing the login if a match is found.

2. The method of claim 1 , further comprising:

sending, by the password management entity, TP 1 to the user device over a first secured communication channel; and

sending, by the password management entity, TP 2 to the user device over a second secured communication channel.

3. The method of claim 1 , further comprising:

combining TP 1 and TP 2 by the user device to arrive at the temporary password; and

sending the temporary password from the user device to the local device using an out-of-band channel.

4. The method of claim 1 , further comprising:

sending, by password management entity, TP 1 to authentication authority over a first secured communication channel;

sending, by password management entity, TP 2 to the authentication authority over a second secured communication channel; and

combining TP 1 and TP 2 by the authentication authority to arrive at the temporary password.

5. The method of claim 1 , further comprising:

deleting the temporary password from the authentication authority after comparing.

6. The method of claim 1 , wherein:

TP 1 includes a first pair of input and output values of a polynomial of a first degree, and the TP 2 includes a second pair of input and output values of the polynomial, and

wherein the method includes:

using the first and second pairs to identify the polynomial; and

generating the temporary password based on a function applied to at least one coefficient of the polynomial.

7. The method of claim 1 , further comprising:

generating a set of at least K+1 pairs of input and output values of a polynomial of degree K, wherein TP 1 includes a portion of pairs of input and output values of the polynomial, and wherein the TP 2 includes the other pairs of input and output values of the polynomial;

using TP 1 and TP 2 to identify the polynomial; and

after identifying the polynomial from the at least K+1 pairs, applying a function to at least one of the coefficients of the polynomial to generate the temporary password.

8. The method of claim 1 , further comprising:

storing the temporary password on the local device.

9. The method of claim 1 , further comprising:

sending, by the password management entity, TP 1 to the user device over a first in-band communication channel; and

sending, by the password management entity, TP 2 to the user device over a second in-band communication channel.

10. A computer-implemented method of passwords management, the method comprising:

obtaining, by a password management entity, a request to login a local device into an authentication authority;

generating, by the password management entity, a temporary password;

generating, by the password management entity, two values, TP 1 and TP 2 , based on the temporary password, wherein the temporary password can be determined based on the values TP 1 and TP 2 ;

sending, by the password management entity, TP 1 to the user device over a first secured communication channel;

sending, by the password management entity, TP 2 to the local device over a second secured communication channel;

sending the TP 1 from the user device to the local device using out-of-band channel; and

combining TP 1 and TP 2 by the local device to arrive at the temporary password;

obtaining, at the authentication authority the temporary password from the local device;

comparing, by the authentication authority, the temporary password obtained from the local device with the temporary password obtained from the password management entity; and

authorizing the login if a match is found.

11. A system for temporary passwords management, the system comprising:

a memory;

a processor configured to:

obtain a request to login a local device into an authentication authority;

generate a temporary password;

generate two values, TP 1 and TP 2 , based on the temporary password, wherein the temporary password can be determined based on the values TP 1 and TP 2 ;

send the temporary password to the authentication authority;

send the temporary password to a user device by sending the values TP 1 and TP 2 over multiple channels;

combine, by the user device, the values TP 1 and TP 2 to arrive at the temporary password;

obtain the temporary password from the local device, wherein the local device is configured to receive the temporary password from the user device;

compare the temporary password obtained from the local device with the temporary password obtained from the password management entity; and

authorize the login if a match is found.

12. The system of claim 11 , wherein the processor is further configured to:

send TP 1 to the user device over a first secured communication channel; and

send TP 2 to the user device over a second secured communication channel.

13. The system of claim 11 , further comprising the user device:

wherein the user device is configured to:

send the temporary password to the local device using an out-of-band channel.

14. The system of claim 11 , further comprising the user device, wherein:

TP 1 includes a first pair of input and output values of a polynomial of a first degree and TP 2 includes a second pair of input and output values of the polynomial, and

wherein the user device is configured to:

use the first and second pairs to identify the polynomial; and

generate the temporary password based on a function applied to at least one coefficient of the polynomial.

15. The system of claim 11 , further comprising the user device, wherein the processor is further configured to:

generate a set of at least K+1 pairs of input and output values of a polynomial of degree K, wherein TP 1 includes a portion of pairs of input and output values of the polynomial, and wherein the TP 2 includes the other pairs of input and output values of the polynomial; and

wherein the user device is configured to:

use TP 1 and TP 2 to identify the polynomial; and

after identifying the polynomial from the at least K+1 pairs, apply a function to at least one of the coefficients of the polynomial to generate the temporary password.

16. The system of claim 11 , further comprising the authentication authority:

wherein the processor is further configured to:

send TP 1 to the authentication authority over a first secured communication channel;

send TP 2 to the authentication authority over a second secured communication channel; and

wherein the authentication authority is configured to:

combine TP 1 and TP 2 to arrive at the temporary password.

17. The system of claim 11 , further comprising the authentication authority, wherein the authentication authority is configured to delete the temporary password from the authentication authority after comparing.

18. The system of claim 11 , further comprising the local device, wherein the local device is configured to store the temporary password on the local device.

19. The system of claim 11 , wherein the processor is further configured to:

send TP 1 to the user device over a first in-band communication channel; and

send TP 2 to the user device over a second in-band communication channel.