Password management system

• US 9,521,127 B1
• Filed: 02/16/2016
• Issued: 12/13/2016
• Est. Priority Date: 09/08/2015
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Childress, Rhonda L., Goldberg, Itzhack, Pickover, Clifford A., Sondhi, Neil
• Primary Examiner(s): Hoffman, Brandon
• Application Number:
  US15/044,357
• Time in Patent Office: 301 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/041 Key generation or derivation

Abstract

An embodiment of the invention may include a method, computer program product and computer system for password management. The embodiment may include a computing device that creates a password inventory. The password inventory may be a list of one or more passwords, where each of the one or more passwords corresponds to a password key. The embodiment may update the password inventory without input from a user. The embodiment may receive a first login request from a first device. The embodiment may transmit information detailing a first password key to the first device, where the first password key corresponds to a first password from the list of one or more passwords. The embodiment may receive information detailing a first entered password from the first device. The embodiment may determine whether the first entered password is identical to the first password from the list of one or more passwords.

Claims

1. A method for authenticating a user, the method comprising:

creating a password inventory, wherein the password inventory comprises a list of one or more passwords, wherein each of the one or more passwords corresponds to a password key;

updating the password inventory without input from a user, wherein updating the password inventory comprises one or more of;

issuing a new password key to each password; and

issuing a new password to each password key;

based on updating the password inventory transmitting information detailing a portion of the password inventory to a third device, wherein the user has access to the third device, and wherein the third device is a mobile device;

receiving a first login request from a first device;

transmitting information detailing a first password key to the first device, wherein the first password key corresponds to a first password from the list of one or more passwords;

receiving information detailing a first entered password from the first device; and

determining whether the first entered password is identical to the first password from the list of one or more passwords.