Password Management for RSS Interfaces

• US 20080046369A1
• Filed: 07/26/2007
• Published: 02/21/2008
• Est. Priority Date: 07/27/2006
• Status: Abandoned Application

• Current Assignee: Newsilike Media Group, Inc.
• Original Assignee: Newsilike Media Group, Inc.
• Inventors: Wood, Charles
• Application Number:
  US11/828,945
• Publication Number:
  US 20080046369A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A password management process handles passwords at a remote service that operates as an intermediary between a user and a web service.

Claims

1. A method comprising:

providing a remote service including an RSS interface to a secure enterprise system;

receiving login credentials for accessing the secure enterprise system, the login credentials including a username and a password, the password being encrypted for secure communication between a client and the remote service;

validating a subscription to the remote service with the username;

decrypting the password;

encrypting the password for secure communication between the remote service and the secure enterprise system;

logging in to the secure enterprise system; and

providing the client with the RSS interface to the secure enterprise system.

2. The method of claim 1 wherein the secure enterprise system includes a customer relationship management system.

3. The method of claim 2 further comprising providing sales leads to the client through the RSS interface.

4. The method of claim 1 wherein the secure enterprise system includes a calendar.

5. The method of claim 4 further comprising providing calendar entries to the client through the RSS interface.

6. The method of claim 1 wherein the secure enterprise system includes a database.

7. The method of claim 1 wherein the secure enterprise system includes a web application.

8. The method of claim 1 further comprising locally caching a session identifier at the remote service in order to maintain a session between the remote service and the secure enterprise system.

9. The method of claim 1 wherein the remote service includes a fee-based service for converting data from a customer relationship management system to a syndicated data feed.

10. The method of claim 9 wherein the syndicated data feed includes one or more calendar items.

11. A computer program product comprising computer executable code that when executing on one or more computer devices performs the steps of:

providing a remote service including an RSS interface to a secure enterprise system;

receiving login credentials for accessing the secure enterprise system, the login credentials including a username and a password, the password being encrypted for secure communication between a client and the remote service;

validating a subscription to the remote service with the username;

decrypting the password;

encrypting the password for secure communication between the remote service and the secure enterprise system;

logging in to the secure enterprise system; and

providing the client with the RSS interface to the secure enterprise system.

12. The computer program product of claim 11 wherein the secure enterprise system includes a customer relationship management system.

13. The computer program product of claim 12 further comprising computer executable code that performs the step of providing sales leads to the client through the RSS interface.

14. The computer program product of claim 11 wherein the secure enterprise system includes a calendar.

15. The computer program product of claim 14 further comprising computer executable code that performs the step of providing calendar entries to the client through the RSS interface.

16. The computer program product of claim 11 wherein the secure enterprise system includes a database.

17. The computer program product of claim 11 wherein the secure enterprise system includes a web application.

18. A method comprising:

receiving login credentials from a user at a proxy for logging in to a network service, the login credentials including a username and a password;

determining whether the login credentials have been previously and unsuccessfully applied to log in to the network service;

transmitting the login credentials to the network service when the login credentials have not been previously and unsuccessfully applied to log in to the network service; and

transmitting an error message to the user when the login credentials have been previously and unsuccessfully applied to log in to the network service.

19. The method of claim 18 wherein determining whether the login credentials have been previously and unsuccessfully applied includes maintaining a database of usernames and corresponding hashes of passwords for each unsuccessful login attempt.

20. The method of claim 19 wherein maintaining the database includes removing a username and corresponding hash of a password when the username is submitted with a password having a hash that does not match the hash in the database.