Method and apparatus for password protection of a computer

• US 5,091,939 A
• Filed: 06/22/1990
• Issued: 02/25/1992
• Est. Priority Date: 06/22/1990
• Status: Expired due to Term

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Tandy Corporation (RS Legacy Corp.)
• Inventors: Cole, James F., Keeran, Jerald J.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): SWANN, TOD R
• Application Number:
  US07/543,120
• Time in Patent Office: 613 Days
• Field of Search: 380/23-25, 364/286.4, 364/286.5, 364/260.81, 364/969.4, 364/949.7, 340/825.33, 902/5, 238/382, 238/382.5
• US Class Current: 713/183
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G07C 9/33 by means of a password

Abstract

A method and apparatus for password protecting a personal, laptop or single user computer. The user'"'"'s password entry is compared to the value of a secondary password retained by the computer as well as the value of the user'"'"'s stored primary password. The user may thus access the computer when his primary password is corrupted or forgotten by obtaining an alternate password from the computer manufacturer which matches the secondary password generated or stored by the computer. The operation of the method and the organization of the apparatus make the secondary and alternate passwords valid for a limited time, thereby preserving the overall integrity of the password protection system. The primary, secondary and alternate passwords may be encrypted for added security.

Claims

1. A method for password-protecting access by a user to a computer, the computer including memory, permitting access when a password has been forgotten or corrupted, the method comprising:

storing in said memory a valid password, said valid password being non-user-settable and said valid password being based on first information, said first information being information which can be obtained without accessing said first information from said computer;

receiving, in said computer, an attempted password, said attempted password obtained by said user, based solely on said first information and said attempted password being obtainable without using information other than said first information;

retrieving from memory said valid password;

translating said valid password into an acceptable code based on said valid password;

comparing an attempted code, based on said attempted password, to said acceptable code; and

permitting user access when said attempted code matches said acceptable code.

2. A method, as claimed in claim 1, wherein said first information is based on a date.

3. A method, as claimed in claim 1, wherein said first information is based on a date and wherein there is also at least a first date stored in said computer.

4. A method, as claimed in claim 2, wherein said date is the date on which user access is attempted.

5. A method, as claimed in claim 3, further comprising displaying said date stored in said computer.

6. A method, as claimed in claim 3, further comprising encrypting at least portions of said first date to provide said acceptable code.

7. A method, as claimed in claim 3, wherein said password comprises an ASCII code for at least a portion of said first date.

8. A method, as claimed in claim 1, wherein said attempted code is an ASCII code for at least a portion of said attempted password.

9. A method, as claimed in claim 1, wherein said memory includes non-volatile memory, and wherein said step of retrieving from memory said valid password comprises retrieving a valid password from non-volatile memory.

10. A method, as claimed in claim 1, further comprising encrypting at least portions of said valid password to provide said acceptable code.

11. A method, as claimed in claim 1, wherein said attempted code is identical to at least portions of said attempted password.

12. A method for password-protecting user access to a computer, the computer including memory, the method permitting access when a password has been forgotten or corrupted, the method comprising:

receiving a user-settable first valid password;

storing a first acceptable code based on said received first valid password;

storing in said memory a second valid password, said valid password being non-user-settable and said valid password being based on first information, said first information being information which can be obtained without accessing said first information from said computer;

receiving, in said computer, an attempted password, said attempted password obtained by said user based solely on said first information, and said attempted password being obtainable without using information other than said first information;

comparing a first attempted code, based on said attempted password with said first acceptable code;

retrieving from memory said second valid password;

translating said second valid password into a second acceptable code based on said second valid password;

comparing a second attempted code, based on said attempted password, to said second acceptable code; and

permitting user access when said second attempted code matches said second acceptable code.

13. A method, as claimed in claim 12, wherein said first information is based on a date.

14. A method, as claimed in claim 13, wherein said date is the date on which user access is attempted.

15. A method, as claimed in claim 13, further comprising displaying said date using said computer.

16. A method, as claimed in claim 13, further comprising encrypting at least portions of said date to provide said second acceptable code.

17. A method, as claimed in claim 12, wherein said first information is based on a date and wherein there is also at least a first date stored in said computer.

18. A method, as claimed in claim 12, further comprising encrypting said attempted password using a first encryption algorithm to obtain said first attempted code.

19. A method, as claimed in claim 18, further comprising encrypting said first valid password, using said first encryption algorithm, to provide said first acceptable code.

20. A method, as claimed in claim 18, further comprising:

encrypting said second valid password, using said first encryption algorithm to obtain said second acceptable code.

21. A method, as claimed in claim 12, wherein said first information is based on a date and wherein said second valid password is identical to at least portions of said date.

22. A method, as claimed in claim 12, wherein said second attempted code is identical to at least portions of said attempted password.

23. A method, as claimed in claim 12, wherein said second attempted code is an ASCII code for at least a portion of said attempted password.

24. A method, as claimed in claim 12, wherein said memory includes non-volatile memory, and wherein said step of retrieving from memory said second valid password comprises retrieving said second valid password from non-volatile memory.

25. Apparatus for password-protecting user access to a computer, the computer including memory, the apparatus permitting access when a password has been forgotten or corrupted, the apparatus comprising:

means for storing in said memory a valid password, said valid password being non-user-settable and said valid password being based on first information, said first information being information which can be obtained without accessing said first information from said computer;

means, in said computer, for receiving an attempted password, said attempted password obtained by said user based solely on said first information, and said attempted password being obtainable without using information other than said first information;

means for retrieving from memory said valid password,;

means for translating said valid password into an acceptable code based on said valid password;

means for comparing an attempted code, based on said attempted password, to said acceptable code; and

means for permitting user access when said attempted code matches said acceptable code.

26. Apparatus, as claimed in claim 25, further comprising means for storing a date in said computer, and wherein said information is based on said date.

27. Apparatus, as claimed in claim 26, further comprising means for displaying said date stored in said computer.

28. Apparatus, as claimed in claim 26, further comprising means for encrypting at least portions of said date to provide said acceptable code.

29. Apparatus, as claimed in claim 25, further comprising means for encrypting said attempted password to obtain said attempted code.

30. Apparatus, as claimed in claim 25, wherein said memory includes non-volatile memory, and wherein said means for retrieving from memory said valid password comprises means for retrieving said valid password from non-volatile memory.

31. A method for password-protecting user access to a first computer, using a second computer, to permit access when a first password has been forgotten or corrupted, said first computer including information storage devices, and a clock for determining the current date, the method comprising:

storing in said first computer a first password for permitting user-access to said first computer in response to user-input of said first password, at least a portion of said first password being a user-memorized portion;

calculating, in said second computer, a second password to be used to attempt access to said first computer, said calculating of said second password conducted using date information, and without inputting said user-memorized portion of said first password;

outputting, from said second computer, said second password;

inputting, into said first computer, said second password;

calculating, in said first computer, a third non-user-settable password, said third password based on a date obtained from said clock;

comparing in said first computer, said second and third passwords; and

permitting user access to said first computer when said second password matches said third password.

32. A method for password-protecting user access to a first computer, using a second computer, to permit access when a first password has been forgotten or corrupted, said first computer including information storage devices, the method comprising:

storing in said first computer data based on said first password for permitting user-access to said first computer in response to user-input of said first password, at least a portion of said first password being a user-memorized portion;

calculating, in said second computer, a second password to be used to attempt access to said first computer, said calculating of said second password conducted using first information which can be obtained without accessing said first information from said first computer, and without inputting said user-memorized portion of said first password;

outputting, from said second computer, said second password;

inputting, into said first computer, said second password;

calculating, in said first computer, a third non-user-settable password, said third password based on said first information;

translating, in said first computer, said third password into an acceptable code;

translating, in said first computer, said second password into an attempted code;

comparing, in said first computer, said attempted code with said acceptable code; and

permitting user access to said first computer when said attempted code matches said acceptable code.