Secure password reset for application

Details Secure password reset for application Secure password reset for application

2011-07-05

2011-07-05

Zand, Kambiz (Department: 2434)

Information security

Access control or authentication

Network

C726S004000, C726S005000, C726S007000, C713S168000, C713S183000

Reexamination Certificate

active

07975292

ABSTRACT:
A method of controlling access to an interaction context of an application, including receiving login requests pertaining to an access account, each login request including a login password to be matched against an access password associated with the access account. A database includes at least one account record including a password state field indicating whether the access password is a temporary password or a permanent password and a security hold field indicating whether a security hold has been placed on the access account by an administrator. Access is denied upon receipt of a login request when the login password fails to match the access password. Access is denied upon receipt of a login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is a security hold on the access account. Access is granted upon receipt of a login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is no security hold on the access account. The method includes granting access which is limited to permitting changing of the access password and prompting a change of the access password upon receipt of a login request when the login password matches the access password and the access password is a temporary password.

REFERENCES:
patent: 6339828 (2002-01-01), Grawrock et al.
patent: 6408389 (2002-06-01), Grawrock et al.
patent: 2004/0064742 (2004-04-01), Excoffier et al.
patent: 2007/0016454 (2007-01-01), Tipirneni
patent: 2007/0157029 (2007-07-01), Mani
Wikipedia, Password, Internet—http://en.wikipedia.org/wiki/Password, May 8, 2010, 12 pages.
Ferguson, Best Practices for Your “Forgot Password” Feature, fishnet Security, Mar. 2009, 12 pages.

Affiliated with

Also associated with

Rating

Secure password reset for application does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Secure password reset for application, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Secure password reset for application will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2664236