Password control via the web

• US 6,000,033 A
• Filed: 11/26/1997
• Issued: 12/07/1999
• Est. Priority Date: 11/26/1997
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Knickerbocker, John U., Kelley, Edward E., Dauerer, Norman J.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Revak, Christopher A
• Application Number:
  US08/978,919
• Time in Patent Office: 741 Days
• Field of Search: 713/201, 713/202, 713/200, 709/225, 709/227
• US Class Current: 726/8
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system and process for providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net. A program storage device has a reference table having a listing of a plurality of services accessible on an inter- or intra-net, a real password associated with each of the services, a variable name for the real password used by each of the services to enter the real password associated therewith, and a virtual password corresponding to a desired group of the services and associated real passwords. A desired service listed on the desired group of services in the reference table is selected for access and the virtual password corresponding to the desired group of services is entered to begin access. The variable name for the real password associated with the desired service is found on the reference table, and the variable name for the real password is used to enter the real password for the desired service to gain access to the desired service. There is further provided a first virtual password corresponding to a first group of the services and associated real passwords and a second virtual password corresponding to a second group of the services and associated real passwords. The desired group of services may then be selected using the first or second virtual password.

Claims

1. A process for providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net comprising the steps of:

a) providing a reference table having a listing of a plurality of services accessible on an inter- or intra-net and a real password associated with each of said services;

b) assigning a first virtual password corresponding to a first group of said services and associated real passwords;

c) providing said first virtual password to a first group of users of said client computer;

d) assigning a second virtual password corresponding to a second group of said services and associated real passwords, said second group of said services being different from said first group of said services and said second virtual password being different from said first virtual password;

e) providing said second virtual password to a second group of users of said client computer, said second group of users being different from said first group of users; and

f) accessing a desired one of said services on an inter- or intra-net from said client computer by using one of said first or second virtual passwords assigned to the group of said desired service, whereby upon use of the assigned virtual password, said reference table is used by said client computer to substitute the real password associated with said desired service for the assigned virtual password.

2. The process of claim 1 wherein said step (f) of accessing said desired service is performed after said steps (b) and (d) of assigning said respective first and second virtual passwords.

3. The process of claim 1 wherein said step (a) comprises providing on a program storage device accessible by a client computer a reference table having a listing of a plurality of services accessible on an inter- or intra-net and a real password associated with each of said services, said reference table being accessible by said client computer to change the real passwords associated with each of said services.

4. The process of claim 1 wherein said step (f) of accessing a desired one said services on an inter- or intra-net from said client computer is by one of said first group of users using said first virtual password assigned to the group of said desired service, whereby upon use of the assigned first virtual password, said reference table is used by said client computer to substitute the real password associated with said desired service for the assigned first virtual password, and further including the step of accessing a desired another one said services on an inter- or intra-net from said client computer by one of said second group of users using said second virtual password assigned to the group of said another desired service, whereby upon use of the assigned second virtual password, said reference table is used by said client computer to substitute the real password associated with said desired service for the assigned second virtual password.

5. The process of claim 1 wherein said real password provided in step (a) includes a user identification.

6. The process of claim 1 wherein in step (a) said reference table is provided on a program storage device.

7. A process for providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net comprising the steps of:

a) providing on a program storage device a reference table having a listing of a plurality of services accessible on an inter- or intra-net, a real password associated with each of said services, a variable name for said real password used by each of said services to enter the real password associated therewith, and a virtual password corresponding to a desired group of said services and associated real passwords;

b) selecting a desired service listed on said desired group of services in said reference table for access on said inter- or intra-net;

c) entering said virtual password corresponding to desired said group of services to begin access to said desired service on said inter- or intra-net;

d) finding the variable name for the real password associated with said desired service on said reference table; and

e) using said variable name for the real password to enter the real password for said desired service to gain access to said desired service.

8. The process of claim 7 further including in step (a) providing on said reference table for said services accessible on an inter- or intra-net user identifications for said services and variable names for each of said user identifications used by said services to enter the user identifications associated therewith, and further including the steps of:

f) finding the variable name for the user identification associated with said desired service on said reference table; and

g) using said variable name for the user identification to enter the real password for said desired service to gain access to said desired service.

9. The process of claim 7 wherein said real passwords provided in step (a) include user identifications.

10. The process of claim 7 wherein in step (a) there is provided a first virtual password corresponding to a first group of said services and associated real passwords and a second virtual password corresponding to a second group of said services and associated real passwords, said second group of said services being different from said first group of said services and said second virtual password being different from said first virtual password, and wherein in step (b) said desired group of services is selected from said first or second group of services.

11. A system for providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net comprising:

a program storage device accessible by said client computer including a reference table having a listing of a first and second group of services accessible on an inter- or intra-net and a real password associated with each of said services, said second group of said services being different from said first group of said services;

a first virtual password corresponding to a first group of said services and associated real passwords; and

a second virtual password corresponding to a second group of said services and associated real passwords, said second virtual password being different from said first virtual password,

whereby a desired one of said services on an inter- or intra-net may be accessed from said client computer by using one of said first or second virtual passwords assigned to the group of said desired service, and upon use of the assigned virtual password, said reference table is adapted to be used by said client computer to substitute the real password associated with said desired service for the assigned virtual password.

12. The system of claim 11 wherein said reference table is adapted to be accessible by said client computer to change the real passwords associated with each of said services.

13. The system of claim 11 wherein said real password includes a user identification.

14. A system for providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net comprising:

a program storage device accessible by said client computer including a reference table having a listing of a plurality of services accessible on an inter- or intra-net, a real password associated with each of said services, a variable name for said real password used by each of said services to enter the real password associated therewith, and a virtual password corresponding to a desired group of said services and associated real passwords;

means for selecting a desired service listed on said desired group of services in said reference table for access on said inter- or intra-net;

means for entering said virtual password corresponding to desired said group of services to begin access to said desired service on said inter- or intra-net;

means for finding the variable name for the real password associated with said desired service on said reference table; and

means for using said variable name for the real password to enter the real password for said desired service to gain access to said desired service.

15. The system of claim 14 further including on said reference table for said services accessible on an inter- or intra-net user identifications for said services and variable names for each of said user identifications used by said services to enter the user identifications associated therewith.

16. The system of claim 15 further including:

means for finding the variable name for the user identification associated with said desired service on said reference table; and

means for using said variable name for the user identification to enter the real password for said desired service to gain access to said desired service.

17. The system of claim 14 wherein said real passwords include user identifications.

18. The system of claim 14 wherein there is included in said reference table a first virtual password corresponding to a first group of said services and associated real passwords and a second virtual password corresponding to a second group of said services and associated real passwords, said second group of said services being different from said first group of said services and said second virtual password being different from said first virtual password.

19. The system of claim 14 wherein said means for entering said virtual password is provided in a web browser on said program storage device.

20. A program storage device readable by a machine, tangibly embodying a database accessible by a client computer, including a reference table having a listing of a plurality of services accessible on an inter- or intra-net, a real password associated with each of said services, a variable name for said real password associated with each of said services to enter the real password associated therewith, and a virtual password corresponding to a desired group of said services and associated real passwords, said program storage device further having a program containing instructions executable by the machine to perform a method of providing passwords from a client computer to different servers, databases and applications and other services accessed on and inter- or intra-net, said method comprising the steps of:

a) connecting said client computer to a desired service listed on said desired group of services in said reference table for access on said inter- or intra-net;

b) receiving input of said virtual password corresponding to desired said group of services to begin access to said desired service on said inter- or intra-net;

c) finding the variable name for the real password associated with said desired service on said reference table; and

d) using said variable name for the real password to enter the real password for said desired service to gain access for said client computer to said desired service.