Managing passwords using steganography

Patent metadata

Field	Value
Publication number	US-10366222-B2
Application number	US-201615368391-A
Country	US
Kind code	B2
Filing date	Dec 2, 2016
Priority date	Dec 2, 2016
Publication date	Jul 30, 2019
Grant date	Jul 30, 2019

Abstract

A computer system, method, and computer readable product are provided for managing passwords using steganography. In various embodiments, a computing system provides a password manager that a user provides a password to. The user then selects a service for which credentials will be generated or stored, and an image on the user's device that will be used to steganographically store the credentials. The computing system then generates a steganographic image that includes the credentials and stores that image with the other images on the user's device.

First claim

What is claimed is:

1. A computer-implemented method for managing passwords using steganography, the method comprising:
receiving a master password for a password manager;
determining whether the master password is valid;
upon determining that the master password is valid, displaying a plurality of images that are stored in a computer memory, and displaying a list of computer services;
receiving user input indicative of selecting a first image of the plurality of images;

receiving the user input indicative of selecting a first computer service of the list of the computer services, for which a first password is to be stored;
receiving an indication of the first password;
generating a steganographic image based on the first image and the indication of the first password; and
replacing the first image with the steganographic image in the plurality of images stored in the computer memory, wherein the replacement is performed to prevent a malicious user from using the two images to determine how the steganographic image has changed relative to the first image.

2. The computer-implemented method of claim 1 , further comprising: receiving the master password for the password manager a second time; determining whether the master password is valid a second time; after determining that the master password is valid a second time, displaying the plurality of images; receiving a second indication of the first computer service; receiving user input indicative of selecting the first image of the plurality of images; extracting the first password from the steganographic image; and providing the extracted first password as a credential to the first computer service.

3. The computer-implemented method of claim 1 , further comprising: encrypting the first password; and generating the steganographic image based on the first image and an indication of the encrypted first password.

4. The computer-implemented method of claim 1 , further comprising: omitting an image that is preloaded on a computing device from the plurality of images that are displayed.

5. The computer-implemented method of claim 1 , wherein at least one image of the plurality of images is captured with a camera of a computing device that includes the computer memory.

6. The computer-implemented method of claim 1 , further comprising: receiving an indication of a first user name; and generating the steganographic image further based on the first image, the indication of the first password, and the indication of the first user name.

7. The computer-implemented method of claim 1 , further comprising: generating the steganographic image further based on the first image, the indication of the first password, and the selected first computer service.

8. A computer system configured to manage passwords using steganography, comprising: a processor, a computer-readable memory, a computer-readable tangible storage device, and program instructions stored on the storage device for execution by the processor via the memory, wherein execution of the program instructions by the computer system configures the computer system to:
log into a password manager;
upon a determination that the login is successful, display a plurality of images and a list of computer services;
receive user input indicative of selecting a first image of the plurality of images;
receive the user input indicative of selecting a first computer service of the list of the computer services, for which a first password is to be stored;
receive an indication of the first password;
generate a steganographic image based on the first image and the indication of the first password; and
store the steganographic image in place of the first image in a computer memory, such that the first image is replaced with the steganographic image to prevent a malicious user from using the two images to determine how the steganographic image has changed relative to the first image.

9. The computer system of claim 8 , wherein execution of the program instructions further configures the computer system to: in response to receiving a request to access passwords, display the plurality of images; receive user input indicative of selecting the first image of the plurality of images; and extract the first password from the steganographic image.

10. The computer system of claim 9 , wherein execution of the program instructions further configures the computer system to: receive an indication of a computer service; and verify that the extracted first password corresponds to the computer service.

11. The computer system of claim 10 , wherein execution of the program instructions further configures the computer system to: provide the extracted first password as a credential to the computer service.

12. The computer system of claim 9 , wherein execution of the program instructions further configures the computer system to: log into the password manager in response to receiving a valid password for the password manager.

13. The computer system of claim 9 , wherein execution of the program instructions further configures the computer system to: receive an indication of a first user name; and generate the steganographic image further based on the first image, the indication of the first password, and the indication of the first user name.

14. The computer system of claim 9 , wherein execution of the program instructions further configures the computer system to: generate the steganographic image further based on the first image, the indication of the first password, and the selected first computer service.

15. A computer program product, comprising:
a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer cause the computer to:
log into a password manager;
upon a determination that the login is successful, display a plurality of images and a list of computer services;
receive user input indicative of selecting a first image of the plurality of images;
receive the user input indicative of selecting a first computer service of the list of the computer services, for which a first password is to be stored;
receive an indication of the first password;
generate a steganographic image based on the first image and the indication of the first password; and
store the steganographic image in place of the first image in a computer memory, such that the first image is replaced with the steganographic image to prevent a malicious user from using the two images to determine how the steganographic image has changed relative to the first image.

16. The computer program product of claim 15 , wherein the program instructions executable by the computer further cause the computer to: in response to receiving a request to access passwords, display the plurality of images; receive user input indicative of selecting the first image of the plurality of images; and extract the first password from the steganographic image.

17. The computer program product of claim 15 , wherein the program instructions executable by the computer further cause the computer to: verify that an extracted password corresponds to the first computer service.

18. The computer program product of claim 15 , wherein the program instructions executable by the computer further cause the computer to: encrypt the first password; and generate the steganographic image based on the first image and an indication of the encrypted first password.

19. The computer program product of claim 15 , wherein the program instructions executable by

Assignees

• IBM

Inventors

• Daly Elizabeth M
• Stephenson Martin J

Classifications

• G06F21/36 Primary

  by graphic or iconic representation · CPC title

• H04N7/185

  from a mobile camera, e.g. for remote control · CPC title

• G06T1/0021

  Image watermarking · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04N7/183

  for receiving images from a single remote source · CPC title