Secure password reset for application

• US 7,975,292 B2
• Filed: 06/12/2008
• Issued: 07/05/2011
• Est. Priority Date: 06/12/2007
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: Francisco Corella
• Inventors: Corella, Francisco
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US12/138,409
• Publication Number:
  US 20090320107A1
• Time in Patent Office: 1,118 Days
• Field of Search: 726 4- 7, 713/168, 713/183
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method of controlling access to an interaction context of an application, including receiving login requests pertaining to an access account, each login request including a login password to be matched against an access password associated with the access account. A database includes at least one account record including a password state field indicating whether the access password is a temporary password or a permanent password and a security hold field indicating whether a security hold has been placed on the access account by an administrator. Access is denied upon receipt of a login request when the login password fails to match the access password. Access is denied upon receipt of a login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is a security hold on the access account. Access is granted upon receipt of a login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is no security hold on the access account. The method includes granting access which is limited to permitting changing of the access password and prompting a change of the access password upon receipt of a login request when the login password matches the access password and the access password is a temporary password.

Claims

1. A method of controlling access to an interaction context of an application, the method comprising:

receiving login requests pertaining to an access account, including a login request, each login request including a login password to be matched against an access password associated with the access account;

maintaining a database comprising at least one account record including a password state field indicating whether the access password is a temporary password or a permanent password and a security hold field indicating whether a security hold has been placed on the access account by an administrator;

denying access upon receipt of the login request when the login password fails to match the access password;

denying access upon receipt of the login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is a security hold on the access account;

granting access upon receipt of the login request when the login password matches the access password, the password state field indicates that the access password is a permanent password, and the security hold field indicates that there is no security hold on the access account; and

granting limited access to change the access password from a temporary password to a permanent password upon receipt of the login request when the login password matches the access password and the access password is a temporary password and, upon a change of the access password from the temporary password to a permanent password;

granting access if the security hold field indicates that there is no security hold on the access account; and

denying access if the security hold field indicates that there is a security hold on the access account.

4. The method of claim 1, comprising:

requesting, after a change of the access password from a temporary password to a permanent password, that the administrator be contacted when the security hold field indicates that there is a security hold on the access account.

2. A computer readable storage medium storing computer-executable instructions for controlling at least one computer system to perform a method of controlling access to an interaction context of a multi-user application, the method comprising:

receiving a change of password request pertaining to one of a plurality of user accounts of a virtual application instance of the multi-user application, the change of password request including a new password and each user account including a user password;

maintaining a database comprising user account records, each user account record including a password state field indicating whether the user password is a temporary password or a permanent password and a security hold field indicating whether a security hold has been placed on the user account by an administrator; and

changing the user password to the new password and setting the password state field to indicate that the user password is a permanent password, and subsequently;

denying the user access to the interaction context if the security hold field indicates that there is a security hold on the user account; and

granting the user access to the interaction context if the security hold field indicates that there is no security hold on the user account.

5. The computer readable storage medium of claim 2, wherein the method further comprises:

informing a user, after changing the user password to the new password, that a security hold is on the user account; and

prompting the user to contact the administrator to have the security hold lifted.

3. A server computer comprising:

at least one virtual application instance;

an instance database for each virtual application instance including one or more user records, each user record containing login data for accessing an associated user account of the virtual application instance and including a user ID, a user password, a password state field indicating whether the user password is a temporary password or a permanent password, and a security hold field indicating whether a security hold has been placed on the user account by an administrator;

a login module configured to receive a login request for a virtual application instance from a user including a login ID and a login password, and if the login ID matches a user ID of a user record of the corresponding instance database, configured to;

deny access upon receipt of a login request when the login password fails to match the user password;

deny access upon receipt of a login request when the login password matches the user password, the password state field indicates that the user password is a permanent password, and the security hold field indicates that there is a security hold on the user account;

grant access upon receipt of a login request when the login password matches the user password, the password state field indicates that the user password is a permanent password, and the security hold field indicates that there is no security hold on the user account; and

grant limited access to the user to change the user password from a temporary password to a permanent password upon receipt of a login request when the login password matches the user password and the user password is a temporary password; and

a change of password module configured to receive a change of password request for a virtual application instance pertaining to a user including a new password and configured to change the access password from the temporary password to the new password and set the password state field to indicate that the user password is a permanent password, and the login module subsequently configured to;

grant access to the virtual application instance if the security hold field indicates that there is no security hold on the access account; and

deny access to the virtual application instance if the security hold field indicates that there is a security hold on the access account.

6. The server computer of claim 3, wherein the change of password module is further configured to:

inform the user that a security hold is on the user account; and

prompt the user to contact the administrator to have the security hold lifted if the security hold field indicates that there is a security hold on the user account.