Methods and systems for creating and recovering accounts using dynamic passwords
A method for recovering data. Identity factors are collected at a device, wherein hashes of the identity factors are configured to be stored at a server. A dynamic password is generated at the device based on the identity factors and a Salt generated by the server and configured to be delivered to the device. A selfie is captured of a user. The device generates a symmetric key used to encrypt the selfie. The symmetric key is encrypted using the dynamic password. The encrypted symmetric key and the encrypted selfie are stored on the server. One or more data items are stored on the server. The dynamic password is recoverable by presenting the plurality of identity factors that are hashed to the server. The symmetric key is recoverable using the recovered dynamic password. The data items are recoverable by presenting the symmetric key and a second selfie of the user.
1. A method for recovering data, comprising:
collecting a plurality of identity factors at a device, wherein hashes of the plurality of identity factors are configured to be stored at a server;
generating at the device a dynamic password based on one or more identity factors from the plurality of identity factors and a Salt configured to be generated by the server and configured to be delivered to the device;
capturing a first selfie of a user;
creating a symmetric key;
encrypting the first selfie using the symmetric key;
encrypting the symmetric key using the dynamic password;
storing the symmetric key that is encrypted on the server;
storing the first selfie that is encrypted on the server;
storing one or more data items on the server;
recovering the dynamic password by presenting the plurality of identity factors that are hashed to the server;
recovering the symmetric key using the dynamic password that is recovered; and
recovering the one or more data items by presenting the symmetric key and a second selfie of the user.
2. The method of claim 1 , wherein the device is a first device, the method further comprising:
presenting from a second device the plurality of identity factors that are hashed to the server;
receiving at the second device from the server the Salt associated with the plurality of identity factors;
generating at the second device the dynamic password using the salt and the plurality of identity factors;
retrieving on the second device the symmetric key that is encrypted from the server;
recovering the symmetric key by decrypting the symmetric key that is encrypted using the recovered dynamic password;
capturing a third selfie of the user;
sending the third selfie and the symmetric key that is recovered to the server; and
sending the one or more data items to the second device.
3. The method of claim 2 , wherein the third selfie is a live selfie.
4. The method of claim 1 , further comprising:
encrypting the one or more data items by the device, the storing the one or more data items on the server includes storing the one or more data items that are encrypted on the server.