DE202013002454U1 - Mechanical password generator - Google Patents

Abstract

Mechanical device for generating and / or storing passwords, characterized in that; that a plurality of generally disc-shaped elements (2) are arranged on a common axis (3), each element (2) being rotatable about the common axis (3) independently of the other elements, and; in that each element (2) has a multiplicity of code fields (4), each of which is provided with a predefined number of readable code symbols (7).

Description

Technical area

The present invention relates to a novel, handy device for generating and storing passwords. Passwords are required today in many applications of electronic devices such as computers, smartphones or bank and credit cards. A common problem is that the user has forgotten or confused a password associated with a particular application or device. The handiness and mobility of the device according to the invention and the preferably purely mechanical construction cause on the one hand an unconditional reliability even under unfavorable external conditions such as cold, wet, strong magnetic fields and the like., On the other hand results from so simple operation that a manual practically unnecessary.

Background and state of the art

Today, billions of passwords exist worldwide that enable secure and authenticated access to systems, accounts, databases, etc. In order to secure such valuable areas, established and generally accepted encryption and authentication technologies and algorithms are used, which are components of associated, mostly standardized processes. These measures have reached a very professional and effective level and are now fully integrated transparently to the end user. At the same time, efforts are being made to further develop the technically advanced security mechanisms in order to achieve further improvements in the security of such systems. There is a kind of arms race between manufacturers of access and security systems and sometimes dubious organizations or individuals who want to compromise those systems for their own benefit.

If one considers this fact and analyzes in detail each link in the process chain of such security mechanisms, one often arrives at the same, critical "point of failure": the weakest link is usually the user. This circumstance is generally given too little attention. As shown below, the tools offered to users are becoming more and more outlandish and technically more complex, often neglecting usability.

• – Verwendung komplexer Passwörter. Z. B. Gross- und Kleinbuch-staben kombiniert mit Zahlen;
• – Wortteile dürfen nicht in einem Wörterbuch vorkommen;
• – Zugänge zu verschiedenen Systemen mit derselben Benutzer-ID dürfen nicht mit dem gleichen Passwort geschützt werden;
• – Mindestanforderung an die Passwortlänge
• – Passwörter dürfen nie aufgeschrieben oder digital (plain text) gespeichert werden:
• – Passwörter müssen regelmässig geändert werden;
• – die letzten x Passwörter dürfen innerhalb von y Monaten nicht wiederverwendet werden.

Today, high demands are placed on the security of passwords in order to make sensitive electronic areas inaccessible to unauthorized persons. Here's a real example of a Swiss bank whose IT security officers make the following demands on the user passwords of their employees:

• - Use of complex passwords. For example, uppercase and lowercase letters combined with numbers;
• - Word parts may not occur in a dictionary;
• - Accesses to different systems with the same user ID must not be protected with the same password;
• - Minimum requirement for the password length
• - Passwords may never be written down or stored digitally (plain text):
• - Passwords must be changed regularly;
• - The last x passwords may not be reused within y months.

Below some known tools for the generation or storage of passwords are called and briefly described, these z. T. are technically quite complex and often need an energy source. If the latter fails, the aid is useless.

In the published US Patent Application 2003/0163738 A1 (identical EP 1 338 940 A1 ) describes a "Universal Password Generator" in which a password is automatically generated on a challenge. For this purpose, a secure memory, a secure processor and other secure components are provided in the generator, which cause the request processed safely and finally a response in readable form is displayed on a display.

The US Pat. No. 7,493,493 B2 describes a method and a device for generating multiple passwords using a single key. This is entered into the generator along with the desired application, resulting in a unique, unique password for each application.

The U.S. Patent 7,171,564 B2 discloses a method for generating a password for an application software residing on a computer. For this purpose, a universal password is entered and a parameter determined by the respective application, from which a password is generated for this application.

in the U.S. Patent 8,200,978 B2 a device and a method are described in which by means of two programs at least two passwords of different lengths and different time intervals are generated. The two programs are also stored in the password-protected computer so that identical passwords can be generated at the same time.

It is obvious that the devices and methods mentioned are quite complex and require considerable technical and financial effort. For this purpose, larger devices can only be installed stationary, making them useless for the intended use here. In addition, each device, whether portable or not, requires an energy source, for transportable z. B. a battery. As is known, the latter tend to fail when needed and no substitute is available.

The present invention has set itself the task of o. G. Disadvantages of the known devices and methods to avoid. This object is, as already briefly mentioned, achieved by a simple, mechanical construction of the device according to the invention, which preferably manages without electrical or electronic parts and thus in particular requires neither battery nor battery nor any other source of energy. In addition, the simplicity is so obvious that only a very brief instruction or explanation of the device according to the invention is sufficient for correct handling. Of course, the simple construction leads to a cost-effective production of the device according to the invention and thus to a low price.

Description of the function

In principle, the generator according to the invention works as follows. The user manually sets a desired combination of adjustable elements that have user-readable character combinations. After this setting, the elements are fixed and the user can now read character combinations as a password. Initially, the user defines a so-called "master password" that he needs to use the device and initially stops. Then he fixes the adjustable elements of the device and can read a variety of "slave passwords" directly.

In the following description of exemplary embodiments, the function of the device according to the invention will be explained in detail.

Description of exemplary embodiments

Hereinafter, the various aspects of the invention with reference to embodiments, which are also shown in the accompanying drawings, explained in detail. On the attached drawings and tables show:

1a a first embodiment of a password generator in a perspective overall view in the closed state;

1b this embodiment in a partially opened state;

2 the first embodiment in an X-ray / X-ray representation;

3a . 3b Individual parts of the first embodiment;

4a Top view of a second embodiment in basic position;

4b the second embodiment in working position; and

5a - 5d Items of the second embodiment.

Tab. 1 a list of usable character combinations by default, and

Tab. 2 the list of character combinations in work settings.

The basic principle of handling described below applies to all embodiments of the invention, regardless of the specific design. In principle, the password generator according to the invention consists of a number of mutually rotatable elements on a common axis, hereinafter referred to as code disks, each of which has a plurality of fields, the so-called character fields, with visible characters (combinations). These characters or character combinations can be both purely numeric and mixed, d. H. from numbers, letters, special characters, etc.

The 1a to 3b show a first, cylindrical embodiment of the invention. It puts in it 1a an outside view in the closed state, while 1b shows the same embodiment in a partially opened state. 2 illustrates some details in a kind of x-ray or x-ray representation. In the 3a and 3b Finally, some items are exemplified to better explain the function. The device consists of a holder 1 with a fixed cylindrical disk bearing the numbers 1 to 36 on its circumference, see 1a and 1b , On a rod or axle attached to this disc 3 are a total of eight identical cylindrical rollers as code discs 2 arranged, in 3 only a single one is shown. These code discs 2 are on the common axis 3 arranged rotatable or adjustable. Each code disc also has 36 character fields on its perimeter 4 each of which has three user-readable characters.

With the provided eight code discs 2 At least eight-digit password can be generated. But there may also be two, three or even more than eight discs, depending on the desired length of the password. The same applies to the number of character fields 4 , Number of characters 7 per code disc 2 and a possible distribution of the characters 7 within a character field 4 , As already mentioned, these details are exemplary and can be modified and combined as desired.

Each code disc 2 has a number of character fields on the outside 4 each of which is labeled with three characters. In the example described, a code table consisting of a plurality of characters is used. These are arranged over 36 lines so that each character field 4 three different characters 7 contains. Uppercase and lowercase letters are distributed so that the same letter type only appears once on the same line. The use of uppercase and lowercase passwords for the slave passwords also increases security. At the same time, care was taken to consider the frequency of the special characters used in the distribution in order to increase the integrity of the passwords.

The eight code slices 2 be on the axis 3 postponed. To fix them, be the first code disc 2 in the holder 1 and the remaining code slices 2 locked into each other. Last, ie in the "set" state, they are with the bracket 1 screwed. That's on the axis 3 a screw thread 5 and a fixing nut 6 provided as a counterpart. It appears advantageous if the code disks 2 rest well and are rotatable with little resistance and can be snapped into each other. The only purpose of the empty disc on axis 3 is to serve as a screw cap. As the only element this empty disc has no device for locking the code discs.

In addition, have the bracket 1 on one side and the code discs 2 on both sides of an arrangement that a snapping the code discs 2 in intended positions, z. B. with a toothing with here 36 teeth. This causes the code slices 2 when twisted or adjusted in certain positions, which are identical for all code discs, engage. This is the mutual position of the code slices 2 established. This has the advantage that the reading of the passwords is simplified and thus safer.

If the code discs 2 locked in the designated positions, they can be fixed. They then lie close together and are by the on the thread 5 the axis 3 screwed and tightened fixing nut 6 held. To release the code discs 2 so that they (individually) can be turned again, the fixing nut 6 loosened by approx. 5 mm.

The characters arranged in groups of three on each code disc in the character fields are shown in Table 1. Of course, the illustrations in the figures and the tables are examples.

Neither the number of code disks 2 (here 8), nor the number of character fields 4 on each code disc (here 36) nor the number of characters in each character field (here 3) are fixed; each of these sizes can be freely selected according to need and desired safety. It is also possible to provide different character sets on different code disks.

On tab. 1 listing the characters and character fields used in the present example, the first column shows the line numbers 1 to 36 that are on the circumference of the fixed disk of the holder 1 are arranged. The holder is held in the left hand when in use. The line numbers are used for orientation.

The following columns 2 to 9 represent those on the eight code slices 2 mapped fonts, which in this example are distributed in triplets to the character fields.

The device works as follows. In the first step, an eight-digit, secret master password is defined, in the example "Security" is used as the master password. This is done by appropriate rotation of the eight movable code discs 2 up to line 1, ie in the number "1" on the fixed disc of the holder 1 , the corresponding character combination "Security" - here letter combination - readable. Tab. 2 shows this state after setting the master password.

After this basic setting, which is defined by the master password, the code slices are fixed and the slave passwords can be read. You can choose from any drawing field 4 select a single character or two or all three. As in the example described each character field 4 contains three characters, each slave password can be increased from 8 to 16 or even 24 digits. It is up to the user which character per character field he wants to use in which order.

In Table 2, lines 2 through 36 show the 35 slave passwords available to the master password. Setting a single master password in one line will result in 35 unique slave Passwords with at least 8-digit, complex characters available.

The following example always uses the middle of the three values; this is the slave password in
Line 2: T|dvsj * H
Line 3: 'gWEBÜv:
Line 4: dZ| - *! Eö
Line 5: W ~ gyvm-K
etc.

If you extend the example from line 2 to 16 or 24 digits, the passwords can have the following values, whereby the sequence can also be used differently than specified:
6fVDAÖu2H * jsvd|TbX {+ (_ Cz
6XVDAÖCH (derived from the master password)
6T | XVdv + Asj_u * Hz
etc.

If certain special characters are not allowed for a certain login procedure, there are various alternatives. It can be checked whether free slave passwords of other lines are better suited for this user account, or it can be noted separately which alternate characters per cell are avoided in such a case.

Uniquely initialized and serialized outputs of the device according to the invention are provided. This includes an individually adjustable output as well as a printable or engravable output in a kind of blank. This individualization can affect both the entire device and only the individual code disks 2 be applied. In this way, the security of the device can be maximized because the end user can make their own custom initialization that is known only to him.

The assignment of a line number and thus a slave password to a user or a user account can be documented separately and / or manually.

In the example described, the master password is set to line 1 and lines 2 to 36 represent the 35 slave passwords. Also, the master password can be set to line number 36.

After use, the device can be de-initialized to prevent access to the detected passwords. It goes without saying that the device must be protected against unauthorized access during use and in the unsecured state.

In the 4a and 4b a second embodiment of the invention is shown in its basic structure. The basic form here is a flat disc. The entire device consists of a kind of very flat circular cone of four stacked, against each other rotatable code discs whose diameter decreases upward so that an outer annulus of each underlying code disc remains visible. The rotatability of the code discs is ensured by a central axis. The visible outer circular ring of each code disc is divided into character fields, which are labeled with one or more characters analogously to the example described above. In the example shown, the arrangement of the line numbers, here, of course, in a circular form, is located centrally and thus almost at the top of the cone. Of course, the line numbers can of course also be arranged on the largest code disk forming the base of the cone. The flat code discs can be made of cardboard or plastic and printed, which makes the production easy and inexpensive. The fixation of the code discs after adjustment can be done by means of a simple screw or clamping device, which is not shown in the figures.

The four discs of this second, flat embodiment are in the 5a to 5c shown.

The just described, in the 4a and 4b As shown, the flat embodiment of the invention apparently generates fewer slave passwords than those in FIG 1 shown cylindrical arrangement. However, it has the advantage of easier production. Their handling, so setting and reading is analogous to that described above, in the 1a to 3b illustrated embodiment, in which case the adjustment and reading is done from above. The above detailed functional description together with the tables Tab. 1 and 2 can also be used here for explanation.

Another, not shown embodiment of the invention also uses circular, flat code discs, but forms a double cone with z. B. four discs tapering upwards and four discs tapering down. This embodiment is then mutually usable, which increases the number of available slave passwords. Again, the fixation of the code discs can be done after their adjustment by means of a screw or clamping device.

The person skilled in the art will find no difficulty in developing further embodiments which use the inventive principle of the invention in a different manner.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• US 2003/0163738 A1 [0006]
• EP 1338940 A1 [0006]
• US 7493493 B2 [0007]
• US 7171564 B2 [0008]
• US 8200978 B2 [0009]

Claims (10)

Mechanical device for generating and / or storing passwords, characterized in that - on a common axis ( 3 ) a plurality of basically disc-shaped elements ( 2 ), each element ( 2 ) independent of the other elements about the common axis ( 3 ), and - that each element ( 2 ) a plurality of code fields ( 4 ) each having a predetermined number of readable code characters ( 7 ) is provided. Apparatus according to claim 1, characterized - a disc-shaped elements ( 2 ), ie rotationally fixed with the axis ( 3 ) connected is. Apparatus according to claim 1, characterized in that - a locking device is provided, which is a blocking of the elements ( 2 ) against rotation allows. Device according to one of claims 1 to 3, characterized in that - the elements ( 2 ) of a device have substantially the same diameter. Device according to one of claims 1 to 3, characterized in that - the elements ( 2 ) of a device have different diameters. Device according to one of claims 1 to 4, characterized in that - each element ( 2 ) is formed as a cylindrical ring or hollow cylinder, wherein the code fields ( 4 ) with the code characters ( 7 ) are arranged on the outside of the ring. Device according to at least one of the preceding claims, characterized in that - each element ( 2 ) a gearing ( 5 ), by which a locking of the element takes place in predetermined positions, wherein the number of teeth of the teeth of the number of code fields ( 4 ) on the element ( 2 ) corresponds. Device according to at least one of the preceding claims, characterized in that - the number of code fields ( 4 ) and the teeth is greater than ten and in each code field ( 4 ) at least three code characters ( 7 ) are arranged. Device according to one of claims 1, 2, 3 or 5, characterized in that - each element is formed as a flat disc, wherein the discs ( 5a to 5d ) have different diameters and thus with decreasing diameter arranged on each other a flat circular cone ( 4a . 4b ) form that in the plan view each outer circular rings of the discs are visible, and - that the code fields are arranged with the code characters on the outer annulus at the edge of a disc. Apparatus according to claim 3, characterized in that - the locking device on the axis ( 3 ) arranged thread ( 5 ) and a fixing nut ( 6 ), which in the angezognen state the code slices ( 2 ) pressed against each other and thus fixed.

Images