Automated password reset

• US 5,991,882 A
• Filed: 08/07/1997
• Issued: 11/23/1999
• Est. Priority Date: 06/03/1996
• Status: Expired due to Term

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Electronic Data Systems Corporation (Perspecta, Inc.)
• Inventors: O'Connell, Ellen R.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): ELISCA, PIERRE E
• Application Number:
  US08/908,302
• Time in Patent Office: 838 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 395/609, 395/244, 395/218, 395/490, 395/491, 380/1.59, 380/3, 380/4, 380/23, 380/25, 711/163, 711/164, 705/18, 705/44, 707/9, 713/200, 713/201, 713/202
• US Class Current: 726/18
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2131 Lost password, e.g. recovery of lost or forgotten passwords

Abstract

An automated system (10) is provided for resetting a computing system user'"'"'s log-in password. The automated system (10) includes a database (16) which stores at least one question and corresponding answer received from the user. In response to a request for password reset received from the user, an interface (12) displays the stored question(s), thereby prompting the user to input an answer to each displayed question. A processor (14) is coupled to the database (16) and the interface (12). The processor (14) determines whether each input answer is the same as the stored corresponding answer. If the answers are the same, the processor (14) automatically resets the user'"'"'s log-in password.

Claims

1. An automated method for resetting a computing system user'"'"'s log-in password, comprising the steps of:

storing at least one question and corresponding answer received from a user, wherein said at least one question can be personal to the user and said corresponding answer can be factually incorrect;

graphically displaying the stored at least one question to the user in response to a request for a password reset, thereby prompting the user to input an answer to each such displayed question;

automatically determining whether each such input answer matches the stored corresponding answer; and

automatically resetting the user'"'"'s log-in password if each such input answer matches the stored corresponding answer.

2. The method of claim 1, wherein the step of graphically displaying the stored at least one question to the user further comprises the step of displaying the at least one question in a random sequence.

3. The method of claim 2, further comprising the step of determining whether the user has input a predetermined number of correct answers.

4. The method of claim 1, further comprising the step of displaying the stored question and corresponding answer to a security officer.

5. The method of claim 1, further comprising the step of receiving a verification for each such input answer.

6. The method of claim 1, further comprising the step of refusing access to the user if at least one input answer is not the same as the stored corresponding answer.

7. An automated method for resetting a computing system user'"'"'s log-in password, comprising the steps of:

receiving a plurality of questions and corresponding answers from a user;

storing the questions and corresponding answers;

storing a log-on identification for the user;

receiving a password reset request from the user;

identifying the user based solely upon the stored log-on identification for the user;

graphically displaying at least one of the stored questions in response to the identity of the user, thereby prompting the user to input an answer to each such displayed question;

determining whether each such input answer matches the stored answer corresponding to the displayed at least one question;

determining whether the user has input at least a predetermined number of correct answers, and

automatically resetting the user'"'"'s log-in password if the user has input at least the predetermined number of correct answers.

8. The method of claim 7, wherein the step of graphically displaying at least one of the stored questions further comprises the step of displaying at least two of the stored questions in a random sequence.

9. The method of claim 7, wherein the step of graphically displaying at least one of the stored questions further comprises the step of displaying all of the stored questions.

10. The method of claim 7, wherein the step of receiving a plurality of questions and corresponding answers further comprises the step of receiving a verification for each corresponding answer.

11. The method of claim 10, further comprising the step of determining whether each such verification is the same as the corresponding answer.

12. An automated system for resetting a computing system user'"'"'s log-in password, comprising:

a database operable to store at least one question and corresponding answer received from a user, wherein said at least one question can be personal to the user and said corresponding answer can be factually incorrect;

an interface operable to graphically display the stored at least one question in response to a request for password reset received from the user, thereby prompting the user to input an answer to each such displayed question; and

a processor coupled to the database and the interface, the processor operable to determine whether each such input answer matches the stored corresponding answer, the processor further operable to automatically reset the user'"'"'s log-in password if each such input answer matches the stored corresponding answer.

13. The system of claim 12, wherein the at least one question is displayed in a random sequence.

14. The system of claim 12, wherein the number of questions displayed to a user is configurable.

15. The system of claim 12, wherein the processor is further operable to determine whether the user has input a predetermined number of correct answers.

16. The system of claim 12, wherein the database is further operable to store a log-on identification for the user.