US 2018/0323970 A1 · MASTER PASSWORD RESET IN A ZERO-KNOWLEDGE ARCHITECTURE

Abstract

Examples of the present disclosure describe systems and methods relating to master password reset in a zero-knowledge architecture. A master password reset may be used to regain access to encrypted user data despite not having access to the master password associated with decrypting the user data. As an example, the user data may be encrypted using a local ciphering key, wherein the key may be encrypted using a master password and stored. A second copy of the key may be stored, wherein the second copy may be encrypted using a recovery key. The recovery key may then be stored by a third party. In a reset scenario in which the master password is forgotten, the recovery key may be retrieved from the third party and used to decrypt the second copy of the local ciphering key, thereby providing access to the encrypted user data without use of the master password.

Claims20

Dependent claims

A system comprising:

at least one processor;
and
memory storing instructions that, when executed by the at least one processor, causes the system to perform a set of operations, the set of operations comprising:
obtaining a local ciphering key for encrypting user data;
encrypting, using a recovery key, the local ciphering key to generate an encrypted local ciphering key;
storing the encrypted local ciphering key on a user device;
encrypting, using a server recovery key, the recovery key to generate an encrypted recovery key;
transmitting the encrypted recovery key to a third party;
receiving, at the user device, a reset indication;
decrypting the encrypted local ciphering key using the recovery key;
and
decrypting encrypted user data using the decrypted local ciphering key.

9 more elements

Dependencies are inferred from the claim text.

Master password reset in a zero-knowledge architecture

Life of this patent

Master password reset in a zero-knowledge architecture

Life of this patent

Abstract

Claims20