Cryptographic passcode reset
AssigneeSAIFE, Inc.
InventorTy Brendan Lindteigen
Life of this patent
Estimating the term…
Abstract
This invention provides a novel method, system, and apparatus allowing an authorized user access to controlled assets when a passcode method malfunctions, such as when a user forgets a password, a token malfunction, or a biometric mismatch. The invention allows temporary access to an access control system without knowing the password and without sending the user the password or a new random password. The user is able to set a new password without knowing the previous password. Furthermore, stored encrypted data is preserved and made accessible once again via the new passcode. This invention works for many authentication methods such as restoring access when a password, token, access card, or biometric sample is used.
Claims16
A method for creating a passcode within an access control system allowing a user access to controlled assets comprising:
- obtaining a source and creating a passcode from the source, wherein the source is provided by a non-numeric input device yielding a non-numeric passcode that is converted to a numeric passcode;
- generating a random code that is at least the same order of magnitude as the passcode for use as a first cryptographic recovery split;
- using the passcode and the random code as inputs in a cryptographic derivation function to form a second cryptographic recovery split;
- storing the first cryptographic recovery split in a first repository within the access controlled system and storing the second cryptographic recovery split in a second repository outside of the access control system.
A method for creating a passcode within an access control system allowing a user access to controlled assets comprising:
- obtaining a source and creating a passcode from the source;
- generating a random code that is at least the same order of magnitude as the passcode for use as a first cryptographic recovery split;
- using the passcode and the random code as inputs in a cryptographic derivation function to form a second cryptographic recovery split;
- and
- storing the first cryptographic recovery split in a first repository within the access controlled system and storing the second cryptographic recovery split in a second repository outside of the access control system, wherein the second repository is under the control of a custodian that is a separate entity than the user.
A method for creating a passcode within an access control system allowing a user access to controlled assets comprising:
- obtaining a source and creatin a passcode from the source wherein the source is provided by a non-numeric input device yielding a non-numeric passcode that is converted to a numeric passcode;
- generating a random code that is at least the same order of magnitude as the passcode for use as a first cryptographic recovery split;
- using the passcode and the random code as inputs in a cryptographic derivation function to form a second cryptographic recovery split;
- and
- storing the first cryptographic recovery split in a first repository within the access controlled system and storing the second cryptographic recovery split in a second repository outside of the access control system, wherein the second repository is under the control of a custodian that is a separate entity than the user.
Dependencies are inferred from the claim text.