Method and system for secure password storage

1. A password storage arrangement, comprising:

a computer memory;

a hardware element implemented as a physical unclonable function (PUF);

a fuzzy extractor; and

processing circuitry arranged in communication with and to control the computer memory and the PUF,

wherein the processing circuitry is configured to:

receive a user password through an interface comprised with the processing circuitry;

provide the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;

provide the PUF output to the fuzzy extractor; and

store an output from the fuzzy extractor as a representation of the user password within the computer memory.

2. The password storage arrangement according to claim 1 , wherein the processing circuitry is further configured to:

format the user password in accordance to a predetermined input specification for the PUF.

3. The password storage arrangement according to claim 1 , wherein the computer memory, the PUF and the processing circuitry are comprised with a password server connected to an electronic device using a network connection.

4. The password storage arrangement according to claim 3 , wherein the electronic device is provided with a user interface (UI) for receiving the password from a user and configured to transmit the user password to the password server using the network connection.

5. The password storage arrangement according to claim 4 , wherein the electronic device is arranged to encrypt the user password prior to transmitting the password to the password server.

6. The password storage arrangement according to claim 1 , wherein the computer memory, the PUF and the processing circuitry are comprised with an electronic device, and the electronic device further comprises a user interface (UI) for receiving the password from a user.

7. The password storage arrangement according to claim 1 , wherein the processing circuitry is further configured to:

receive an authentication request for a user, including a password to be authenticated;

provide the password to be authenticated to the PUF, wherein the PUF generates an output being a representation of the password to be authenticated;

retrieve the previously stored representation of the password from the computer memory, and

determine a matching level between the representation of the password to be authenticated and the previously stored representation of the password.

8. The password storage arrangement according to claim 7 , wherein the representation of the password to be authenticated is defined as corresponding to the previously stored representation of the password if the matching level is above a predetermined threshold, thereby authenticating the user.

9. The password storage arrangement according to claim 1 , wherein the processing circuitry is further configured to:

store user profile information within the computer memory.

10. The password storage arrangement according to claim 9 , wherein the processing circuitry is further configured to:

encrypt the user profile information based on the user password.

11. The password storage arrangement according to claim 1 , wherein the user password comprises biometric information of a user.

12. The password storage arrangement according to claim 11 , wherein the biometric information comprises at least one of information relating to a fingerprint or an iris of the user.

13. The password storage arrangement according to claim 1 , wherein the processing circuitry is configured to:

perform fusion of the PUF output and biometric information for a user.

14. The password storage arrangement according to claim 13 , wherein the processing circuitry is configured to:

perform the fusion before storing the PUF output within the computer memory.

15. A computer implemented method for operating a password storage arrangement, wherein the password storage arrangement comprises:

a computer memory;

a hardware element implemented as a physical unclonable function (PUF);

a fuzzy extractor; and

processing circuitry arranged in communication with and to control the computer memory and the PUF,

wherein the method comprises the steps of:

receiving, using the processing circuitry, a user password through an interface comprised with the processing circuitry;

providing, using the processing circuitry, the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;

providing, using the processing circuitry, the PUF output to the fuzzy extractor; and

storing, using the processing circuitry, an output from the fuzzy extractor as a representation of the user password within the computer memory.

16. The method according to claim 15 , further comprising the steps of:

receiving, using the processing circuitry, an authentication request for the user, including a password to be authenticated;

providing, using the processing circuitry, the password to be authenticated to the PUF, wherein the PUF generates an output being a representation of the password to be authenticated;

retrieving, using the processing circuitry, the previously stored representation of the password from the computer memory, and

determining, using the processing circuitry, a matching level between the representation of the password to be authenticated and the previously stored representation of the password.

17. The method according to claim 16 , further comprising the step of:

authenticating, using the processing circuitry, the user if the matching level is above a predetermined threshold.

18. A computer program product comprising a non-transitory computer readable medium having stored thereon computer program means for operating a password storage arrangement, wherein the password storage arrangement comprises a computer memory, a hardware element implemented as a physical unclonable function (PUF), a fuzzy extractor, and processing circuitry arranged in communication with and to control the computer memory and the PUF, wherein the computer program product comprises:

code for receiving a user password through an interface comprised with the processing circuitry;

code for providing the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;

code for providing the PUF output to the fuzzy extractor; and

code for storing an output from the fuzzy extractor as a representation of the user password within the computer memory.

19. The computer program product according to claim 18 , further comprising:

code for receiving an authentication request for the user, including a password to be authenticated;

code for providing the password to be authenticated to the PUF, wherein the PUF generates an output being a representation of the password to be authenticated;

code for retrieving the previously stored representation of the password from the computer memory, and

code for determining a matching level between the representation of the password to be authenticated and the previously stored representation of the password.