APPARATUS AND METHOD FOR MANAGING PASSWORDS

摘要

A method for managing passwords for a user. A processor of an apparatus storing at least one received, incorrect password proposal receives via a user interface a further password proposal from a user; generates a hash value for the further password proposal; sends the hash value to the authentication server; receives from the authentication server a message indicative of whether the hash value corresponds to a correct password or to an incorrect password. In case the message indicates that the hash value corresponds to a correct password, the processor uses a distance function on each incorrect password proposal to obtain a distance value representative of a distance between the incorrect password proposal and the correct password; and sending to the authentication server hash values for password proposals for which the distance value is lower than or equal to a threshold value. Also provided are the apparatus and a computer program support. The disclosure can provide resistance to typing errors in the password proposals.

主权项

1. An apparatus for managing passwords comprising:
a user interface configured to receive a password proposal from a user; and a processor configured to:
generate a hash value for the password proposal;send the hash value to an authentication server;receive from the authentication server a message indicative of whether the hash value corresponds to a correct password or to an incorrect password;store password proposals corresponding to incorrect passwords; andin case the message indicates that the hash value corresponds to a correct password:
use a distance function on each password proposal corresponding to incorrect passwords to obtain a distance value representative of a distance between the password proposal and the correct password; and send to the authentication server hash values only for password proposals for which the distance value satisfy a distance criterion.