Patent ID: 11870899
Assignee: WHITESTAR COMMUNICATIONS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. An apparatus implemented as a physical machine, the apparatus comprising:
non-transitory machine readable media configured for storing executable machine readable code implemented as a secure executable container;
a device interface circuit configured for communications with a recovery device and receiving an input string entered by a user of the apparatus; and
a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
generating, by the machine readable code implemented as a secure executable container, a secure recovery container based on encrypting a user password into an encrypted target password using a secret regenerative key, and adding a one-time password seed and the encrypted target password into the secure recovery container,
causing secure storage, by the secure executable container, of the secure recovery container in the non-transitory machine readable media, and by the recovery device via the device interface circuit, the recovery device having a trusted relationship with the apparatus,
generating, by the secure executable container in response to a recovery request, a one-time password using the one-time password seed, the one-time password required for retrieval of the encrypted target password from the recovery device,
executing, by the secure executable container, decryption on an input string into a decrypted recovery password based on the recovery request, the decryption of the input string based on the secret regenerative key,
decrypting the encrypted target password, by the secure executable container, into a decrypted target password based on the secret regenerative key, the encrypted target password retrieved by the secure executable container from the secure recovery container in the non-transitory machine readable media based on the recovery request, and
authorizing, by the secure executable container, a user to input a new user password that replaces the user password for updated secure access to the secure executable container in response to determining the decrypted recovery password matches at least a part of the decrypted target password.