Password management system

• US 9,716,699 B2
• Filed: 09/26/2016
• Issued: 07/25/2017
• Est. Priority Date: 09/08/2015
• Status: Expired due to Fees

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Sondhi, Neil, Childress, Rhonda L., Goldberg, Itzhack, Pickover, Clifford A.
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US15/275,540
• Publication Number:
  US 20170070494A1
• Time in Patent Office: 302 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/041 Key generation or derivation

Abstract

An embodiment of the invention may include a method, computer program product and computer system for password management. The embodiment may include a computing device that creates a password inventory. The password inventory may be a list of one or more passwords, where each of the one or more passwords corresponds to a password key. The embodiment may update the password inventory without input from a user. The embodiment may receive a first login request from a first device. The embodiment may transmit information detailing a first password key to the first device, where the first password key corresponds to a first password from the list of one or more passwords. The embodiment may receive information detailing a first entered password from the first device. The embodiment may determine whether the first entered password is identical to the first password from the list of one or more passwords.

Claims

1. A computer system for authenticating a user, the computer system comprising:

one or more processors, one or more computer-readable memories, one or more non-transitory computer-readable tangible storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising;

program instructions to create a password inventory, wherein the password inventory comprises a list of one or more passwords, wherein each of the one or more passwords corresponds to a password key;

program instructions to update the password inventory without input from a user, wherein updating the password inventory comprises one or more of;

issuing a new password key to each password; and

issuing a new password to each password key;

based on updating the password inventory program instructions to transmit information detailing a portion of the password inventory to a third device, wherein the user has access to the third device, and wherein the third device is a mobile device;

program instructions to receive a first login request from a first device;

program instructions to transmit information detailing a first password key to the first device, wherein the first password key corresponds to a first password from the list of one or more passwords;

program instructions to receive information detailing a first entered password from the first device; and

program instructions to determine whether the first entered password is identical to the first password from the list of one or more passwords.