# US 2025/0167992 A1 · Single-use password generation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0167992 A1
- Document ID: US20250167992A1
- Status: Published application
- Kind: A1
- Application number: 19/025,198
- Filed: 2025-01-16
- Published: 2025-05-22
- Earliest claimed: 2019-11-07
- Assignees: Micron Technology, Inc.
- Applicants: Micron Technology, Inc.
- Inventors: James Ruane; Robert W. Strong
- Web page: https://patentgrep.com/patent/US20250167992A1

## CPC

- H04L 9/0863: {involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067)}
- H04L 9/0822: {using key encryption key}
- H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A request for password generation is received from a host system. In response to receiving the request, a password derivation key is generated based on a key derivation seed. A password is derived from the password derivation key, and a wrapping key is derived from the password. The wrapping key is used to wrap an authorization state indication, which is stored in local memory. Encrypted data is generated based on an encryption of the key derivation seed using an asymmetric encryption key. The encrypted data is provided in response to the request.

## Claims

### Claim 1

A system comprising:
a memory component; and
a processing device, operatively coupled with the memory component, to perform operations comprising:
receiving, from a host system, a request for password generation;
generating a password object based on a key derivation seed for deriving a password, the password object comprising binary data and a hash of the binary data, the binary data comprising the key derivation seed; and
providing the password object in response to the request.

### Claim 2 (depends on 1)

The system of claim 1, wherein the operations comprise:
receiving supplemental text from a user;
generating a password derivation key by providing the key derivation seed and the supplemental text as a seed for a key derivation function; and
deriving the password from the password derivation key.

### Claim 3 (depends on 2)

The system of claim 2, wherein the operations comprise:
generating a wrapping key based on the password;
wrapping an authorization state indication using the wrapping key; and
storing the wrapped authorization state indication in the memory component.

### Claim 4 (depends on 3)

The system of claim 3, wherein the operations comprise:
receiving an authentication request comprising the password;
deriving an unwrapping key from the password;
unwrapping the wrapped authorization state indication using the unwrapping key; and
providing, in response to the authentication request, the authorization state indication based on the unwrapping.

### Claim 5 (depends on 1)

The system of claim 1, wherein the generating of the password object comprises encrypting the binary data.

### Claim 6 (depends on 1)

The system of claim 1, wherein the password object comprises an object header and encrypted data, the encrypted data being based on an encryption of the key derivation seed.

### Claim 7 (depends on 6)

The system of claim 6, wherein the generating of the password object comprises:
constructing the object header; and
concatenating the encrypted data and the object header to form the password object.

### Claim 8 (depends on 1)

The system of claim 1, wherein the binary data comprises at least one: a version, a wrap type, configuration information, a password length, a timestamp, device information, and a scramble key.

### Claim 9 (depends on 1)

The system of claim 1, wherein the operations further comprise scrambling one or more fields of the password object using a scramble key.

### Claim 10 (depends on 1)

The system of claim 1, wherein the operations further comprise encoding the password object using a binary-to-text encoding scheme.

### Claim 11

A method comprising:
receiving, from a host system, a request for password generation;
generating, by a processing device, a password object based on a key derivation seed for deriving a password, the password object comprising binary data and a hash of the binary data, the binary data comprising the key derivation seed; and
providing the password object in response to the request.

### Claim 12 (depends on 11)

The method of claim 11, comprising:
receiving supplemental text from a user;
generating a password derivation key by providing the key derivation seed and the supplemental text as a seed for a key derivation function; and
deriving the password from the password derivation key.

### Claim 13 (depends on 12)

The method of claim 12, comprising:
generating a wrapping key based on the password;
wrapping an authorization state indication using the wrapping key; and
storing the wrapped authorization state indication in a memory component.

### Claim 14 (depends on 13)

The method of claim 13, comprising:
receiving an authentication request comprising the password;
deriving an unwrapping key from the password;
unwrapping the wrapped authorization state indication using the unwrapping key; and
providing, in response to the authentication request, the authorization state indication based on the unwrapping.

### Claim 15 (depends on 11)

The method of claim 11, wherein the generating of the password object comprises encrypting the binary data.

### Claim 16 (depends on 11)

The method of claim 11, wherein the password object comprises an object header and encrypted data, the encrypted data being based on an encryption of the key derivation seed.

### Claim 17 (depends on 11)

The method of claim 11, wherein the password object comprises an object header and encrypted data, the encrypted data being based on an encryption of the key derivation seed.

### Claim 18 (depends on 17)

The method of claim 17, wherein the generating of the password object comprises:
constructing the object header; and
concatenating the encrypted data and the object header to form the password object.

### Claim 19 (depends on 11)

The method of claim 11, wherein the binary data comprises at least one: a version, a wrap type, configuration information, a password length, a timestamp, device information, and a scramble key.

### Claim 20

A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, configure the processing device to perform operations comprising:
receiving, from a host system, a request for password generation;
generating a password object based on a key derivation seed for deriving a password, the password object comprising binary data and a hash of the binary data, the binary data comprising the key derivation seed; and
providing the password object in response to the request.