Methods and systems for account recovery and device authentication
OwnerNir Haim Aradinventor
Life of this patent
Estimating the term…
Abstract
A technique is directed to methods and systems for QR-code based account recovery and device authentication. This system provides a secure method for managing user accounts and enabling recovery across multiple devices. The system combines trusted third-party authentication services with local key generation and encryption, ensuring that sensitive cryptographic material remains protected throughout the authentication and recovery processes. The system generates QR codes that encode critical recovery information, which can be stored offline as a physical backup for account recovery purposes.
Claims20
A method for account recovery using a machine-readable code, the method comprising:
- generating, by a user device, a recovery key pair comprising a recovery public key and a recovery private key;
- encrypting, by the user device, a user private key using the recovery public key to produce an encrypted user private key;
- transmitting, by the user device, the recovery public key, the encrypted user private key, and a recovery identifier to a server, wherein the server stores the encrypted user private key in association with the recovery identifier;
- generating, by the user device, the machine-readable code encoding the recovery identifier and the recovery private key;
- and
- storing the machine-readable code offline as a physical backup.
A system comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed by the one or more processors, cause the system to perform a process for account recovery using a machine-readable code, the process comprising:
- generating, by a user device, a recovery key pair comprising a recovery public key and a recovery private key;
- encrypting, by the user device, a user private key using the recovery public key to produce an encrypted user private key;
- transmitting, by the user device, the recovery public key, the encrypted user private key, and a recovery identifier to a server, wherein the server stores the encrypted user private key in association with the recovery identifier;
- generating, by the user device, the machine-readable code encoding the recovery identifier and the recovery private key;
- and
- storing the machine-readable code offline as a physical backup.
A non-transitory computer-readable medium storing instructions that, when executed by a computing system, cause the computing system to perform operations for account recovery using a machine-readable code, the operations comprising:
- generating, by a user device, a recovery key pair comprising a recovery public key and a recovery private key;
- encrypting, by the user device, a user private key using the recovery public key to produce an encrypted user private key;
- transmitting, by the user device, the recovery public key, the encrypted user private key, and a recovery identifier to a server, wherein the server stores the encrypted user private key in association with the recovery identifier;
- generating, by the user device, the machine-readable code encoding the recovery identifier and the recovery private key;
- and
- storing the machine-readable code offline as a physical backup.
Dependencies are inferred from the claim text.