Generating and maintaining encrypted passwords

• US 20030131266A1
• Filed: 01/07/2002
• Published: 07/10/2003
• Est. Priority Date: 01/07/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Best, Steven Francis, Cooper, Michael Richard, Gray, James Lee
• Granted Patent: US 7,171,679 B2
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system, method and program of the invention provides an application program tool that generates a password for a user to access a resource. The tool receives as input from a user a global user password and at least one hash key. The tool applies a consistent algorithm to the name of the resource being accessed, such as a domain name for an Internet site, and the hash key, and the global user password to generate the password. The same password is regenerated the next time the user accesses the same resource. The tool automatically populates the resource with the password.

Claims

1. A method for generating a password for a user for access to a resource having a unique resource name, comprising:

i) receiving as input, from a user, a user global password, a user id, and at least one hash key;

ii) determining the resource name of the resource;

iii) generating the password based upon the global user password, the resource name, and the hash key during a first communication session with the resource; and

iv) regenerating the password during a next communication session with the resource by repeating steps i, ii, and iii.

2. The method of claim 1 wherein the resource is an Internet site having a unique domain name.

3. The method of claim 1 wherein the resource is an application and the resource name is an application name.

4. The method of claim 1 further comprising automatically populating the resource with the generated password and user id.

5. The method of claim 1 further comprising determining if the resource has a format requirement for the password;

and conforming the generated password to the format requirement in a consistent manner whereby the conformed generated password is regenerated during a next communication session with the resource by the user.

6. A method for generating a password for a user for access to an Internet site having a domain name, comprising:

receiving as input a user global password, a user id, and a set of hash keys;

determining a domain name of the Internet site;

determining an iteration of password renewal for the Internet site;

determining a corresponding hash key to the determined iteration; and

generating the password based upon the global user password, the domain name, and the corresponding hash key wherein the generated password is regenerated during a next communication session with the Internet site by the user.

7. The method of claim 6 further comprising automatically populating the Internet site with the generated password and the user id.

8. The method of claim 6 further comprising determining if the Internet site has a format requirement for the password;

and conforming the generated password to the format requirement in a consistent manner whereby the conformed generated password is regenerated during a next communication session with the Internet site by the user.

9. A computer program on a computer usable medium having computer readable program code means for generating a password for a user for access to a resource having a unique resource name, comprising:

means for receiving as input, from a user, a user global password, a user id, and at least one hash key;

means for determining the resource name of the resource;

means for generating the password based upon the global user password, the resource name, and the hash key during a first communication session with the resource; and

means for regenerating the password based upon the global user password, the resource name, and the hash key received during a next communication session with the resource by re-invoking the means for receiving and the means for determining.

10. The computer program of claim 9 further comprising means for automatically populating the resource with the generated password and the user id.

11. A computer program on a computer usable medium having computer readable program code means for generating a password for a user for access to an Internet site having a domain name, comprising:

means for receiving as input a user global password, a user id, and a set of hash keys;

means for determining a domain name of the Internet site;

means for determining an iteration of password renewal for the Internet site;

means for determining a corresponding hash key to the determined iteration; and

means for generating the password based upon the global user password, the domain name, and the corresponding hash key wherein the generated password is regenerated during a next communication session with the Internet site by the user.

12. A computer system having means for generating a password for a user for access to a resource having a unique resource name, comprising:

means for receiving as input, from a user, a user global password, a user id, and at least one hash key;

means for determining the resource name of the resource;

means for generating the password based upon the global user password, the resource name, and the hash key during a first communication session with the resource; and

means for regenerating the password based upon the global user password, the resource name, and the hash key received during a next communication session with the resource by re-invoking the means for receiving and the means for determining.

13. The computer system of claim 12 further comprising means for automatically populating the resource with the generated password and the user id.

14. A computer system having means for generating a password for a user for access to an Internet site having a domain name, comprising:

means for receiving as input a user global password, a user id, and a set of hash keys;

means for determining a domain name of the Internet site;

means for determining an iteration of password renewal for the Internet site;

means for determining a corresponding hash key to the determined iteration; and

means for generating the password based upon the global user password, the domain name, and the corresponding hash key wherein the generated password is regenerated during a next communication session with the Internet site by the user.