METHOD AND SYSTEM FOR RECOVERING A SECURITY CREDENTIAL

• US 20110302406A1
• Filed: 04/07/2011
• Published: 12/08/2011
• Est. Priority Date: 04/19/2010
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: Diversinet Corporation
• Inventors: MACHANI, Salah
• Granted Patent: US 9,621,344 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G06F 2221/2131 Lost password, e.g. recovery of lost or forgotten passwords
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A system and method for recovering a security credential is provided. A security credential stored in the storage of a computing device is encrypted using a first encryption key generated by a server. A first decryption key for decrypting the security credential and a second encryption key for re-encrypting the security credential are received. The first decryption key and the second encryption key are generated by the server. The security credential is decrypted using the first decryption key. The security credential is communicated to a user of the computing device. The security credential is re-encrypted in the storage of the computing device using the second encryption key.

Claims

1. A method for recovering a security credential, comprising:

encrypting a security credential stored in storage of a computing device using a first encryption key generated by a server;

receiving a first decryption key for decrypting said security credential, and a second encryption key for re-encrypting said security credential, said first decryption key and said second encryption key being generated by said server;

decrypting said security credential using said first decryption key;

communicating said security credential to a user of said computing device; and

re-encrypting said security credential in said storage of said computing device using said second encryption key.

2. The method of claim 1, further comprising:

controlling access to sensitive data on said computing device by requiring entry of said security credential.

3. The method of claim 2, wherein said security credential is a password.

4. The method of claim 1, further comprising:

requiring a user of said computing device to change said security credential after said communicating; and

modifying said access to said sensitive data by requiring entry of said changed security credential, and

wherein said changed security credential is encrypted during said re-encrypting.

5. The method of claim 2, wherein said security credential is used to encrypt said sensitive data.

6. The method of claim 1, wherein said first encryption key and said first decryption key are asymmetric keys.

7. The method of claim 1, wherein said second encryption key differs from said first encryption key.

8. The method of claim 1, wherein said first decryption key and said second encryption key are communicated to said user, and said receiving comprises receiving said first decryption key and said second encryption key via user entry.

9. The method of claim 1, wherein said encrypting and decrypting are performed by an encryption module on said computing device, and wherein said receiving comprises automatically receiving, by said encryption module on said mobile device, said first decryption key and said second encryption key from said server.

13. The system of claim 1, wherein said encryption module requires that a user of said computing device change said security credential before encrypting said security credential using said second encryption key.

10. A system for recovering a security credential, comprising:

a computing device;

an application executing on a processor of said computing device and providing access, upon entry of a security credential, to one of sensitive information stored in storage of said computing device and sensitive functionality; and

an encryption module storing, in said memory, said security credential encrypted using a first encryption key, said encryption module decrypting said security credential using a first decryption key upon receipt of said first decryption key and a second encryption key, communicating said security credential to a user of said computing device, and encrypting said security credential stored in said storage of said computing device using said second encryption key.

11. The system of claim 10, wherein said application controls access to sensitive data on said computing device by requiring provision of said security credential.

12. The system of claim 11, wherein said security credential is a password.

14. The system of claim 11, wherein said encryption module encrypts said sensitive data using said security credential.

15. The system of claim 11, wherein said first encryption key and said first decryption key are asymmetric keys.

16. The system of claim 11, wherein said second encryption key differs from said first encryption key.

17. The system of claim 11, wherein said encryption module receives said first decryption key and said second encryption key from said user.

18. The system of claim 11, wherein said encryption module receives said first decryption key and said second encryption key from a server and automatically decrypts said security credential.

19. A method for recovering a security credential, comprising:

encrypting a security credential stored in storage of a computing device using a first encryption key;

receiving a first password for deriving a first decryption key for decrypting said security credential, and a second password for deriving a second encryption key for re-encrypting said security credential;

decrypting said security credential using said first decryption key;

communicating said security credential to a user of said computing device; and

re-encrypting said security credential in said storage of said computing device using said second encryption key.