Systems and methods for password reset

• US 9,355,244 B2
• Filed: 01/07/2015
• Issued: 05/31/2016
• Est. Priority Date: 12/24/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: Liu, Tiehua, Song, Zhigang
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US14/591,159
• Publication Number:
  US 20150178493A1
• Time in Patent Office: 510 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

Systems and methods are provided for password reset. For example, a first server receives a request operation instruction from a user terminal, wherein the request operation instruction includes account information and identity information; the first server determines whether to permit password reset for a first account indicated by the account information; in response to the password reset for the first account being permitted, the first server authenticates the account information and the identity information; if the authentication of the account information and the identity information is successful, the first server processes the request operation instruction and sends a password reset prompt to the user terminal; the user terminal receives the password reset prompt and sends to the first server password information set by a user in response to the password reset prompt; and the first server sends to a second server a password reset request that carries the password information.

Claims

1. A method operating a data processing system including a user terminal and two or more servers each comprising one or more non-transitory machine-readable storage media for password reset, the method comprising:

receiving, by a first server comprising one or more non-transitory machine-readable storage media, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;

determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;

in response to the password reset for the first account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information associated with the account;

in response to the authentication of the account information and the identity information being successful,

processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving, by the first server, password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt;

sending, by the first server, to a second server comprising one or more non-transitory machine-readable storage media, a password reset request that carries the password information so that the second server responds to the password reset request and sets a new password for the account according to the password information;

in response to the password reset for the account being forbidden, authenticating, by the first server, the account information and the identity information; and

in response to the authentication of the account information and the identity information being successful, performing the processing, by the first server, of the request operation instruction.

2. The method of claim 1, wherein the authenticating the account information and the identity information includes:

sending, by the first server, an authentication request including the account information and the identity information to the second server so that the second server authenticates an association between the account information and the identity information; and

receiving, by the first server, an authentication pass message from the second server.

3. The method of claim 1, wherein the processing the request operation instruction includes:

sending, by the first server, to a designated communication account a verification request for returning verification information, wherein the communication account is associated with the account; and

receiving, by the first server, the verification information returned by the communication account,

wherein the processing, by the first server, of the request operation instruction is performed according to the verification information.

4. The method of claim 1, further comprising:

generating, by the first server, a password reset credential according to the account information and the identity information;

wherein;

the password reset request includes the password information and the password reset credential; and

the second server sets a new password for the account according to the password reset credential and the password information.

5. The method of claim 1, wherein the determining whether to permit password reset for the account indicated by the account information includes:

determining, by the first server, whether the account indicated by the account information satisfies a preset condition;

in response to the account satisfying the preset condition, permitting, by the first server, the password reset for the account; and

in response to the first account not satisfying the preset condition, forbidding, by the first server, the password reset for the account.

6. A non-transitory computer readable storage medium comprising programming instructions for password reset, the programming instructions configured to cause a first server comprising one or more data microprocessors to execute operations comprising:

receiving, by the first server, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;

determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;

in response to the password reset for the first account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information;

in response to the authentication of the account information and the identity information being successful,

processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving, by the first server, password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt;

sending, by the first server, to a second server comprising one or more non-transitory machine-readable storage media, a password reset request that carries the password information so that the second server responds to the password reset request and sets a new password for the account according to the password information;

in response to the password reset for the account being forbidden, authenticating, by the first server, the account information and the identity information; and

in response to the authentication of the account information and the identity information being successful, performing the processing, by the first server, of the request operation instruction.

7. A system for password reset, comprising:

a first server comprising one or more data microprocessors; and

one or more non-transitory computer-readable storage media encoded with instructions for commanding the one or more data microprocessors of the first server to execute operations including;

receiving, by the first server, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;

determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;

in response to the password reset for the account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information associated with the first account;

in response to the authentication of the account information and the identity information being successful,

processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt; and

sending to a second server a password reset request that carries the password information so that the server responds to the password reset request and sets a new password for the account according to the password information;

in response to the password reset for the account being forbidden, authenticating, by the first server, the account information and the identity information; and

in response to the authentication of the account information and the identity information being successful, performing the processing, by the first server, of the request operation instruction.