Method and system for secure password storage
AssigneeAuthentico Technologies AB
InventorsAysajan Abidin, Philip Lundin
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to a method and system for secure password storage. In particular, the present disclosure relates to a computer implemented method making use of a hardware element in the form of a physical unclonable function (PUF) and forming a fuzzy version of the password, thus making remote password storage less risky for an end user. The disclosure also relates to a corresponding password storage system and to a computer program product.
Claims19
A password storage arrangement, comprising:
- a computer memory;
- a hardware element implemented as a physical unclonable function (PUF);
- a fuzzy extractor;
- and
- processing circuitry arranged in communication with and to control the computer memory and the PUF,
- wherein the processing circuitry is configured to:
- receive a user password through an interface comprised with the processing circuitry;
- provide the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;
- provide the PUF output to the fuzzy extractor;
- and
- store an output from the fuzzy extractor as a representation of the user password within the computer memory.
A computer implemented method for operating a password storage arrangement, wherein the password storage arrangement comprises:
- a computer memory;
- a hardware element implemented as a physical unclonable function (PUF);
- a fuzzy extractor;
- and
- processing circuitry arranged in communication with and to control the computer memory and the PUF,
- wherein the method comprises the steps of:
- receiving, using the processing circuitry, a user password through an interface comprised with the processing circuitry;
- providing, using the processing circuitry, the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;
- providing, using the processing circuitry, the PUF output to the fuzzy extractor;
- and
- storing, using the processing circuitry, an output from the fuzzy extractor as a representation of the user password within the computer memory.
A computer program product comprising a non-transitory computer readable medium having stored thereon computer program means for operating a password storage arrangement, wherein the password storage arrangement comprises a computer memory, a hardware element implemented as a physical unclonable function (PUF), a fuzzy extractor, and processing circuitry arranged in communication with and to control the computer memory and the PUF, wherein the computer program product comprises:
- code for receiving a user password through an interface comprised with the processing circuitry;
- code for providing the user password as a direct input to the PUF, wherein the PUF generates an output different from the user password;
- code for providing the PUF output to the fuzzy extractor;
- and
- code for storing an output from the fuzzy extractor as a representation of the user password within the computer memory.
Dependencies are inferred from the claim text.