Authenticating user identity when resetting passwords

Details Authenticating user identity when resetting passwords Authenticating user identity when resetting passwords

2011-01-18

2011-01-18

Arani, Taghi T (Department: 2438)

Information security

Prevention of unauthorized use of data including prevention...

Access control

C726S002000, C726S005000, C726S016000, C726S017000, C726S018000, C726S019000, C726S026000, C726S027000, C726S029000, C726S030000, C713S182000, C713S183000, C713S184000

Reexamination Certificate

active

07874011

ABSTRACT:
The “identity authentication program” (IAP) creates a custom set of authentication questions in response to a user request to have a user password reset. The IAP accesses a record located in a data source containing information related to the user's recent computer activity and generates an authentication question and a corresponding answer based on the record. In order to reset a user password, the user must correctly answer a designated number of questions from the custom set of authentication questions. In a preferred embodiment, the IAP bases authentication questions on recent e-mail messages sent by the user. Because the questions are generated at the time of the user's request, the answers are unique and can not be memorized. Because the questions are based on recent activities of the user, the questions are hard to guess by an unauthorized person.

REFERENCES:
patent: 6609198 (2003-08-01), Wood et al.
patent: 6691232 (2004-02-01), Wood et al.
patent: 6734886 (2004-05-01), Hagan et al.
patent: 6973575 (2005-12-01), Arnold
patent: 7047560 (2006-05-01), Fishman et al.
patent: 7383575 (2008-06-01), Cheston et al.
patent: 7613919 (2009-11-01), Bagley
patent: 2001/0034837 (2001-10-01), Kausik et al.
patent: 2002/0116661 (2002-08-01), Thomas et al.
patent: 2002/0147914 (2002-10-01), Arnold
patent: 2003/0163714 (2003-08-01), Nortung
patent: 2003/0204724 (2003-10-01), Ayyagari et al.
patent: 2004/0039906 (2004-02-01), Oka et al.
patent: 2005/0044376 (2005-02-01), Libin
patent: 2005/0081044 (2005-04-01), Giles et al.
patent: 2005/0097106 (2005-05-01), Lineman
patent: 2005/0138399 (2005-06-01), Cheston et al.
patent: 2006/0036871 (2006-02-01), Champine et al.
patent: 2006/0037073 (2006-02-01), Juels et al.
patent: 2006/0059361 (2006-03-01), Paden et al.
patent: 2006/0059362 (2006-03-01), Paden et al.
patent: 2006/0080545 (2006-04-01), Bagley
patent: 2006/0095785 (2006-05-01), White, Jr.
patent: 2007/0271601 (2007-11-01), Pomerantz

Affiliated with

Also associated with

Rating

Authenticating user identity when resetting passwords does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Authenticating user identity when resetting passwords, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Authenticating user identity when resetting passwords will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2657212