Password requirement conformity check
AssigneeRapid7, Inc.
InventorsRoy Hodgman, Vasudha Shivamoggi
Life of this patent
Estimating the term…
Abstract
Various embodiments include systems and methods to implement a password requirement conformity check. During a password reset process, a proposed password is received. A homomorphic encryption operation may be performed on the proposed password to generate a first character string. The first character string may be compared to a previous character string associated with a previous password to determine a password similarity metric. The password similarity metric may or may not satisfy at least a distance threshold. Responsive to determining that the password similarity metric does not satisfy the distance threshold, there may be a rejection of the proposed password and a prompt to receive an alternative proposed password during the password reset process.
Claims21
-20. (canceled)
A system, comprising:
- a password management system implemented by a one or more computer systems, configured to:
- perform a password conformity check on a first password, including to:
- perform a homomorphic encryption operation on the first password to obtain a first character string, wherein the homomorphic encryption operation when performed on two given strings produces two encrypted strings that preserve a distance between the two given strings;
- compare the first character string to a previous character string generated by the homomorphic encryption operation on a previous password to determine a first password similarity value between the first password and the previous password;
- and
- based on the first password similarity value, reject the first password and request an alternative password;
- perform the password conformity check on the alterative password, including to:
- perform the homomorphic encryption operation on the alternative password to generate a second character string;
- compare the second character string to the previous character string to determine a second password similarity value;
- accept the alternative password based on the second password similarity value;
- and
- store the second character string as an encrypted version of the alternative password in a password data repository.
A method, comprising:
- performing, by a password management system implemented by a one or more computer systems:
- performing a password conformity check on a first password, including:
- performing a homomorphic encryption operation on the first password to obtain a first character string, wherein the homomorphic encryption operation when performed on two given strings produces two encrypted strings that preserve a distance between the two given strings;
- comparing the first character string to a previous character string generated by the homomorphic encryption operation on a previous password to determine a first password similarity value between the first password and the previous password;
- and
- based on the first password similarity value, rejecting the first password and requesting an alternative password;
- performing the password conformity check on the alterative password, including:
- performing the homomorphic encryption operation on the alternative password to generate a second character string;
- comparing the second character string to the previous character string to determine a second password similarity value;
- accepting the alternative password based on the second password similarity value;
- and
- storing the second character string as an encrypted version of the alternative password in a password data repository.
Dependencies are inferred from the claim text.