Password update systems and methods

• US 20070124807A1
• Filed: 11/29/2005
• Published: 05/31/2007
• Est. Priority Date: 11/29/2005
• Status: Abandoned Application

• Current Assignee: Taiwan Semiconductor Manufacturing Company Limited
• Original Assignee: Taiwan Semiconductor Manufacturing Company Limited
• Inventors: Jau, Jack
• Application Number:
  US11/289,029
• Publication Number:
  US 20070124807A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A password exchange method. A server responds to requests received from a client when a client password received therefrom matches a current password stored in the password update system. A first password and a second password are received and stored by the server. When the server utilizes the first password as the current password, the client also utilizes the first password as the client password. When the first password expires, the server automatically utilizes of the second password as the current password. When a request from the client fails to be responded, the client retransmits the request utilizing the second password as the client password. A fab may thereby avoid throughput loss due to password expiration and update.

Claims

1. A password exchange method, the server responds to requests received from the client when a client password received therefrom matches a current password stored in the password update system, comprising:

receipt and storage of a first password and a second password by the server;

when the server utilizes the first password as the current password, the first password is utilized as the client password by the client;

determination of an expiration date of the first password by the server;

when the expiration date of the first password arrives, the server automatically utilizes the second password as the current password; and

when a response to a client request fails, the client automatically utilizes the second password as the client password.

2. The method as claimed in claim 1, wherein after receiving the first password and the second password, the server automatically transmits the first password and the second password to the client.

3. The method as claimed in claim 1, wherein the server responds to the request by searching requested data from a database.

4. The method as claimed in claim 1, wherein after receiving the first password and the second password, the server transmits and stores the first password and the second password in a policy server coupled to the client and the server.

5. The method as claimed in claim 4, wherein when the request from the client fails to be responded, the client automatically retrieves the second password from the policy server.

6. The method as claimed in claim 5, wherein before transmitting the first password and the second password, the server automatically encrypts the first password and the second password.

7. The method as claimed in claim 1, wherein the server stores the first password and the second password in a queue, passwords therein comprise different expiration dates, before a password is utilized as a current password, the password is removed from the queue, when the queue is empty, the server automatically displays a message indicating that a new password is required.

8. The method as claimed in claim 7, wherein the password update system stores the expiration date of the second password, which is later than the expiration date of the first password.

9. The method as claimed in claim 8, wherein the client automatically transmits the request to the server again after utilizing the second password as the client password.

10. A password update system, comprising:

a client comprising a client password; and

a server coupled to the client, responding to requests received from the client when the client password received therefrom matches a current password stored in the password update system, storing passwords corresponding to different expiration dates in a queue sorting the passwords by the expiration dates, when expiration date of the current password arrives, automatically removing a password from the queue, utilizing the password as the current password, determining the number of passwords in the queue, and automatically displaying a message requiring at least one new password according to the determination.

11. The system as claimed in claim 10, wherein the server receives two new passwords for each password requirement and stores these two passwords in the queue.

12. The system as claimed in claim 11, wherein after the passwords are stored in the queue, the server automatically transmits the passwords to the client.

13. The system as claimed in claim 10, after storing the passwords in the queue, the server stores the passwords in a policy server coupled to the client and the server, and the client makes a request for one of the passwords from the policy server.

14. The system as claimed in claim 13, wherein when a response to a client request fails, the client retrieves a second password as the client password from the policy server.

15. The system as claimed in claim 14, wherein the client automatically transmits the request to the server again after utilizing the second password as the client password.

16. A password exchange system, comprising:

a client comprising a client password; and

a server coupled to the client, responding to requests received from the client when the client password received therefrom matches a current password stored in the password update system, receiving and storing a first password and a second password, utilizing the first password as the current password;

wherein the client utilizes the first password as the client password, the server determines expiration date of the first password, when the expiration date of the first password arrives, the server automatically utilizes the second password as the current password, and when a response to a client request fails, the client automatically utilizes the second password as the client password.

17. The system as claimed in claim 16, wherein after receiving the first password and the second password, the server automatically transmits the first password and the second password to the client.

18. The system as claimed in claim 16, wherein the server responds to the request by searching for requested data in a database.

19. The system as claimed in claim 16, wherein after receiving the first password and the second password, the server transmits and stores the first password and the second password in a policy server coupled to the client and the server.

20. The system as claimed in claim 19, wherein when the response to a client request fails, the client automatically retrieves the second password from the policy server.

21. The system as claimed in claim 20, wherein before transmitting the first password and the second password, the server automatically encrypts the first password and the second password.

22. The system as claimed in claim 16, wherein the server stores the first password and the second password in a queue, passwords therein comprise different expiration dates, before a password is utilized as the current password, the password is removed from the queue, when the queue is empty, the server automatically displays a message indicating that a new password is required.

23. The system as claimed in claim 22, wherein the password update system stores expiration date of the second password, which is later than the expiration date of the first password.

24. The system as claimed in claim 23, wherein the client automatically transmits the request to the server again after utilizing the second password as the client password.