US 2020/0028679 A1 · PUBLIC-PRIVATE KEY PAIR PROTECTED PASSWORD MANAGER

Abstract

Embodiments of the invention provide methods and systems for password management using public-private key cryptography. A user device generates a public-private key pair including a public key and a private key and registers the public key with a remote password management server. Account names and passwords can be stored at the password management server in association with the public key. To retrieve the passwords, the user device sends a request to the password management server including the public key. The password management server determines the password from the stored passwords and encrypts it using the public key. The encrypted password is sent to the user device, which can decrypt the encrypted password using the private key corresponding to the public key. The user device can then use the account name and password can to obtain account information from an account provider.

Claims25

Dependent claims

A method for password management, the method comprising:

sending, by a user device, a request message to a password management server, the request message including a public key of the user device, the public key and a private key forming a public-private key pair;
receiving, by the user device, a response message from the password management server, the response message including an encrypted password;
decrypting, by the user device, the encrypted password using the private key to obtain a decrypted password;
and
obtaining, by the user device, access to account information using the decrypted password.

2 more elements

A method for password management, the method comprising:

receiving, by a password management server, a request message from a user device, the request message including a public key;
determining, by the password management server, a stored password associated with the public key;
encrypting, by the password management server, the stored password using the public key to obtain an encrypted password;
and
sending, by the password management server, a response message to the user device, the response message including encrypted password.

2 more elements

A user device, comprising:

one or more processor circuits;
a communication interface;
and
a computer readable storage medium storing a plurality of instructions that, when executed by the one or more processor circuits, cause the one or more processor circuits to:
send, using the communication interface, a request message to a password management server, the request message including a public key of the user device, the public key and a private key forming a public-private key pair;
receive, using the communication interface, a response message from the password management server, the response message including an encrypted password;
decrypt the encrypted password using the private key to obtain a decrypted password;
and
obtain access to account information using the decrypted password.

6 more elements

A password management server comprising:

one or more processor circuits;
a communication interface;
and
a computer readable storage medium storing a plurality of instructions that, when executed by the one or more processor circuits, cause the one or more processor circuits to:
receive a request message from a user device, the request message including a public key;
determine a stored password associated with the public key;
encrypt the stored password using the public key to obtain an encrypted password;
and
send a response message to the user device, the response message including encrypted password.

6 more elements

Dependencies are inferred from the claim text.

Public-private key pair protected password manager

Life of this patent

Public-private key pair protected password manager

Life of this patent

Abstract

Claims25