Method and apparatus for securely synchronizing password systems
First Claim
1. A method of securely updating at least one password on a network connected to a plurality of password domains, the method comprising:
- maintaining, by a password portal, a table associating user identifiers with the password domains in which the user identifiers are used;
receiving from a user a user identifier and password;
authenticating the received user identifier and password at the password portal;
receiving from the user a communication requesting a password change;
implementing the requested password change in the table;
exchanging at least one synchronization message between the password portal and an additional password portal to ensure each password portal maintains an updated table;
identifying at least one password domain associated with the authenticated user identifier in which the received user identifier is used;
determining, by the password portal from the at least one password domain, a password change authentication level associated with the at least one password domain, the password change authentication level being an authentication level that is specified by the at least one password domain that must be met before a password change will be implemented at the at least one password domain; and
only if the user identifier has been authenticated at the password portal to an authentication level that meets or exceeds the password change authentication level specified by the at least one identified password domain;
establishing an encrypted and authenticated network connection to the at least one identified password domain; and
implementing the requested password change on a password database of the at least one identified password domain.
6 Assignments
0 Petitions
Accused Products
Abstract
A centralized password repository (CPR) provides network users with a password portal through which the user can manage password access to domains and applications on the network. A subset of the domains and applications on the network may be required, by design, to maintain a separate password infrastructure. For these systems, the CPR establishes a secure and authenticated communication channel and software on the system interfaces with the password infrastructure to synchronize the password in the system password infrastructure with the password in the CPR. For other systems not required to maintain a separate password infrastructure, the CPR performs password services by responding to requests from those systems seeking to validate user IDs and passwords. The CPR enables an administrator to modify network privileges and enables a user to alter passwords on the network through a single interface.
11 Citations
22 Claims
-
1. A method of securely updating at least one password on a network connected to a plurality of password domains, the method comprising:
-
maintaining, by a password portal, a table associating user identifiers with the password domains in which the user identifiers are used; receiving from a user a user identifier and password; authenticating the received user identifier and password at the password portal; receiving from the user a communication requesting a password change; implementing the requested password change in the table; exchanging at least one synchronization message between the password portal and an additional password portal to ensure each password portal maintains an updated table; identifying at least one password domain associated with the authenticated user identifier in which the received user identifier is used; determining, by the password portal from the at least one password domain, a password change authentication level associated with the at least one password domain, the password change authentication level being an authentication level that is specified by the at least one password domain that must be met before a password change will be implemented at the at least one password domain; and only if the user identifier has been authenticated at the password portal to an authentication level that meets or exceeds the password change authentication level specified by the at least one identified password domain; establishing an encrypted and authenticated network connection to the at least one identified password domain; and implementing the requested password change on a password database of the at least one identified password domain. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 21)
-
-
11. A non-transitory, tangible, processor-readable storage medium having stored thereon instructions for securely updating at least one password on a network connected to a plurality of password domains, the instructions comprising instructions executable by a processor:
-
to maintain a table associating user identifiers with the password domains in which the user identifiers are used; to receive from a user a user identifier and password; to authenticate the received user identifier and password; to receive from the user a communication requesting a password change; to implement the requested password change in the table; to exchange at least one synchronization message between the password portal and an additional password portal to ensure each password portal maintains an updated table; to identify at least one password domain associated with the authenticated user identifier in which the received user identifier is used; to determine, by the password portal from the at least one password domain, a password change authentication level associated with the at least one password domain, the password change authentication level being an authentication level that is specified by the at least one password domain that must be met before a password change will be implemented at the at least one password domain; and only if the user identifier has been authenticated at the password portal to an authentication level that meets or exceeds the password change authentication level specified by the at least one identified password domain; to establish an encrypted and authenticated network connection to the at least one identified password domain; and to implement the requested password change on a password database of the at least one identified password domain. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20, 22)
-
Specification