Method and apparatus for resetting passwords in a computer system

• US 6,871,286 B1
• Filed: 07/29/1999
• Issued: 03/22/2005
• Est. Priority Date: 07/29/1999
• Status: Expired due to Term

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Jones, Kevin M, Noren, Gregory T., Cagle, John M., Frantz, Christopher J.
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): KLIMACH, PAULA W
• Application Number:
  US09/363,508
• Time in Patent Office: 2,063 Days
• Field of Search: 713/202, 713/201, 709/229, 709/225, 709/226
• US Class Current: 726/5
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method for resetting a password in a computer system is provided. A remote reset signal is received. A local reset verification signal is received at the computer system. An elapsed period of time between receipt of the remote reset signal and the local reset verification signal is determined. The password is reset in response to the elapsed period of time being less than a predetermined time period.

Claims

1. A method performed by a first computer, comprising:

receiving a remote reset signal;

receiving a local reset verification signal;

determining an elapsed period of time between receipt of the remote reset signal and the local reset verification signal; and

resetting a password in response to the elapsed period of time being less than a predetermined time period;

wherein the remote reset signal is activated by a user at a second computer and the local reset verification signal is activated by the same user or a different user at the first computer.

2. The method of claim 1, further comprising storing a remote reset receipt time on the computer system in response to receiving the remote reset signal.

3. The method of claim 2, wherein determining the elapsed period of time includes:

determining a local reset verification time; and

comparing the remote reset receipt time to the local reset verification time.

4. The method of claim 1, wherein the first computer comprises a headless server and the second computer comprises a client computer coupled to the first computer.

5. The method of claim 1, wherein receiving the remote reset signal includes receiving the remote reset signal through an external internet connection with the second computer.

6. The method of claim 1, wherein receiving the remote reset signal includes receiving an email message.

7. The method of claim 1, wherein receiving the local reset verification signal includes a user activating a physical reset of the first computer.

8. The method of claim 1, wherein receiving the local reset verification signal includes a user activating a local switch on the first computer.

9. The method of claim 1, wherein resetting the password includes resetting the password in response to the elapsed period of time being less than about 10 minutes.

10. A computer system comprising:

a processor; and

a program storage device encoded with instructions that, when executed by the processor, perform a method for resetting a password, the method comprising;

receiving a remote reset signal;

receiving a local reset verification signal;

determining an elapsed period of time between receipt of the remote reset signal and the local reset verification signal; and

resetting the password in response to the elapsed period of time being less than a predetermined time period;

wherein the remote reset signal is activated by a user at a separate computer system and the local reset verification signal is activated at an input device that is associated only with the computer system.

11. The computer system of claim 10, the method further comprising storing a remote reset receipt time on the computer system in response to receiving the remote reset signal.

12. The computer system of claim 11 wherein determining the elapsed period of time in the method includes:

determining a local reset verification time; and

comparing the remote reset receipt time to the local reset verification time.

13. The computer system of claim 10, wherein the computer system comprises a headless server and the separate computer system comprises a client computer coupled to the computer system.

14. The computer system of claim 10, wherein receiving the remote reset signal in the method includes receiving the remote reset signal through an external internet connection of the computer system.

15. The computer system of claim 10, wherein receiving the remote reset signal in the method includes receiving an e-mail message.

16. The computer system of claim 10, wherein receiving the local reset verification signal comprises a user activating a physical reset of the computer system.

17. The computer system of claim 10, wherein receiving the local reset verification signal comprises activating a local switch on the computer system.

18. The computer system of claim 10, wherein resetting the password in the method includes resetting the password in response to the elapsed period of time being less than about 10 minutes.

19. A computer system, comprising:

means for receiving a remote reset signal;

means for receiving a local reset verification signal dependent upon a user moving from a first computer location to a second computer location;

means for determining an elapsed period of time between receipt of the remote reset signal and the local reset verification signal; and

means for resetting the password in response to the elapsed period of time being less than a predetermined time period.

23. The computer system of claim 19 wherein said predetermined time period is adjustable by an administrator.

24. The computer system of claim 19 wherein the local reset verification signal is generated by physically resetting the computer system.

25. The computer system of claim 19 wherein the local reset verification signal is generated by physically activating a switch located on the computer system.

20. A method for resetting a password in a server, comprising:

receiving a first password reset signal from a client computer;

generating a local reset verification signal if a user activates an input device associated only with the server;

resetting the password if the local reset verification signal is received within a predetermined amount of time following the receipt of the first password reset signal by the server.

21. The method of claim 20, wherein said local reset verification signal is generated by a user-activated input device associated only with the server and connected to the server.

22. The method of claim 20, wherein said resetting the password comprises storing a new password received from a user-operated input device.