Temporary password login

• US 20040181696A1
• Filed: 03/11/2003
• Published: 09/16/2004
• Est. Priority Date: 03/11/2003
• Status: Abandoned Application

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Walker, William T.
• Application Number:
  US10/387,182
• Publication Number:
  US 20040181696A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords

Abstract

A telecommunications component, such as a switch or server, is provided that includes a timer 120 and an access agent 116 operable to (a) authenticate a user using a first (typically dynamic) password; (b) after the user is successfully authenticated using the first password, receive a request from the user for a second (temporary, typically non-dynamic) password to be authorized for at least one of the user and a login associated with the user; (c) provide the user with the second password; and {d} initiate the timer to determine when an assigned life for the second password has expired.

Claims

1. A method for providing access to a computational component, comprising:

(a) authenticating a user using a first password;

(b) after the user is successfully authenticated using the first password, receiving a request from the user for a second password to be authorized for at least one of the user and a login associated with the user;

(c) providing the user with the second password; and

(d) initiating a timer to determine when an assigned life for the second password has expired.

2. The method of claim 1, further comprising:

(e) when the assigned life for the second password has expired, deactivating the second password.

3. The method of claim 1, wherein the first password is a dynamic password and the second password is a nondynamic password.

4. The method of claim 1, wherein a first life of the first password is greater than the assigned life of the second password.

5. The method of claim 1, further comprising:

(e) after the timer is initiated, receiving a request to reset the timer to a selected value; and

(f) resetting the timer to the selected value.

6. The method of claim 1, further comprising:

(e) after receiving a command to deactivate the second password, deactivating the second password.

7. The method of claim 1, wherein a third password having an assigned life is active and is associated with a second login different from the login associated with the user.

8. The method of claim 1, wherein the assigned life is selected by the user.

9. The method of claim 1, further comprising after the steps of claim 1:

(e) authenticating the at least one of the user and the login using the second password rather than the first password.

10. The method of claim 1, further comprising after the steps of claim 1:

(e) authenticating the user, wherein a sequence of characters is received from the user and wherein during authenticating step (e);

comparing the sequence of characters with a third password, the third password being different from the first password;

when the sequence of characters is different from a third password, comparing the sequence of characters with the second password; and

when the sequence of characters is identical to the third password or the second password, the user is successfully authenticated.

19. The component of claim 11, wherein the agent, after performing the steps of claim 1, is operable to authenticate the at least one of the user and the login using the second password rather than the first password.

20. The component of claim 11, wherein the agent, after performing the steps of claim 1, is operable to (e) authenticate the user, wherein a sequence of characters is received from the user, wherein during authentication operation (e) the agent (i) compares the sequence of characters with a third password, the third password being different from the first password;

(ii) when the sequence of characters is different from a third password, compares the sequence of characters with the second password; and

(iii) when the sequence of characters is identical to the third password or the second password, successfully authenticates the user.

11. A telecommunications component, comprising:

a timer; and

an access agent operable to (a) authenticate a user using a first password;

(b) after the user is successfully authenticated using the first password, receive a request from the user for a second password to be authorized for at least one of the user and a login associated with the user;

(c) provide the user with the second password; and

(d) initiate the timer to determine when an assigned life for the second password has expired.

12. The component of claim 11, wherein the access agent, when the assigned life for the second password has expired, is operable to deactivate the second password.

13. The component of claim 11, wherein the first password is a dynamic password and the second password is a static password.

14. The component of claim 11, wherein a first life of the first password is greater than the assigned life of the second password.

15. The component of claim 11, wherein the access agent, after the timer is initiated, is operable to reset the timer to a selected value in response to a request from the user.

16. The component of claim 11, wherein the access agent is operable to deactivate the second password in response to a request from the user.

17. The component of claim 11, wherein a third password having an assigned life is active and is associated with a second login different from the login associated with the user.

18. The component of claim 11, wherein the assigned life is selected by the user.

21. A method for authenticating a user, comprising:

(a) receiving a sequence of characters from a user;

(b) comparing the sequence of characters with a first password, the first password being a dynamic password; and

(c) when the sequence of characters is different from the first password, comparing the sequence of characters with a second password, the second password being a nondynamic password and having a predetermined life.

22. The method of claim 21, wherein the user is authenticated successfully either (i) when the sequence of characters in comparing step (b) is identical to the first password or (ii) when the sequence of characters in comparing step (c) is identical to the second password.

24. The method of claim 21, wherein the user is authenticated successfully either (i) when the sequence of characters in comparing step (b) is identical to the first password or (ii) when the sequence of characters in comparing step (c) is identical to the second password.

23. A method for authenticating a user, comprising:

(a) receiving a sequence of characters from a user;

(b) comparing the sequence of characters with a first password, the first password being a dynamic password; and

(c) comparing the sequence of characters with a second password, the second password being a static password and having a predetermined life, wherein step (b) is performed when the sequence of characters is different from the second password.