PASSWORD MANAGEMENT SYSTEMS AND METHODS

• US 20110265160A1
• Filed: 09/22/2009
• Published: 10/27/2011
• Est. Priority Date: 09/23/2008
• Status: Abandoned Application

• Current Assignee: Peer 1 Network Enterprises, Inc. (Cogeco Incorporated)
• Original Assignee: Peer1 Network Enterprise Incorporated
• Inventors: Nettleton, Timothy Andrew
• Application Number:
  US13/120,635
• Publication Number:
  US 20110265160A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords

Abstract

Password management systems include a plurality of child nodes and a mother node. Each child node includes a secure resource, a target account, and a password management service. The target account can be password-protected, and the secure resource can be accessible through the target account. The password management service can periodically update a password of the target account by requesting a new password from the mother node. In response to such requests, the mother node can generate new passwords and forward the new passwords to the appropriate child nodes. The mother node can store the new passwords in a database of current passwords. When an authorized user of the mother node requests a current password for a target account of a child node, the mother node can provide the requested current password to the authorized user. Other aspects, features, and embodiments are also claimed and described.

Claims

1. A password management system comprising:

a mother node comprising a storage device and a computer processing unit, and being in communication with a first child node and a second child node; and

an external interface for receiving a request for a new first password from the first child node, and for receiving a request for a new second password from the second child node;

the computer processing unit of the mother node generating the new first password and the new second password;

the mother node responding to the first child node'"'"'s request with the new first password, and responding to the second child node'"'"'s request with the new second password; and

the mother node storing the new first password and the new second password on the storage device of the mother node.

2. The password management system of claim 1, the mother node providing the new first password to a user upon request.

3. The password management system of claim 1, the first child node and the second child node being located remotely from the mother node.

4. The password management system of claim 1, the first child node comprising an autonomous service for contacting the mother node to request the new first password.

5. The password management system of claim 4, the mother node deploying the autonomous service to the first child node.

6. The password management system of claim 1, the external interface periodically receiving requests from the first child node for new passwords, and the mother node responding to the first child'"'"'s requests by sending the requested new passwords.

8. The password management system of claim 1, the mother node comprising a first database for maintaining stored encrypted passwords for the child nodes, and a second database for storing decryption keys for the stored encrypted passwords.

9. The password management system of claim 8, the mother node comprising at least two servers, the first database and the second database being located on different servers of the mother node.

7. (Canceled)

10. A password management system comprising:

a mother node in communication with a plurality of child nodes, each child node comprising;

a secure resource;

a target account through which the secure resource is accessible, the target account being protected by a password; and

a password management service for updating the target account;

the mother node comprising a storage device for maintaining a plurality of password records associated with the target accounts of the plurality of child nodes; and

the password management service of a first child node initiating contact with the mother node to request an updated password for the target account of the first child node.

13. The password management system of either of claim 10, the mother node generating a new password and transmitting the new password to the first child node in response to a request from the first child node for a new password.

14. The password management system of claim 10, the first child node having a firewall restricting communications from the mother node.

15. The password management system of claim 10, further comprising a password look-up module for presenting a password for the target account of the first child node to a user upon request of the user.

16. The password management system of claim 10, the target account of the first child node being a technical support account.

11. (Canceled)

12. (Canceled)

17. A computer program product embodied in a computer-readable medium, the computer program product comprising an algorithm adapted to effectuate a method for managing passwords, the method comprising:

providing a first password management service in communication with the mother node, the first password management service being executed at a first computing device;

receiving a first request from the first password management service for a new first password;

responding to the first request by transmitting the new first password to the first password management service;

storing the new first password on the storage device of the mother node; and

providing the new first password to an authorized user upon request.

18. The computer program product of claim 17, the first password management service making periodic requests for passwords from the mother node.

19. The computer program product of claim 18, the periodic requests being based on a schedule that is at least partially randomized.

20. The computer program product of claim 17, the method further comprising encrypting the new first password before transmitting the new first password to the first computing device.

21. The computer program product of claim 17, the first computing device comprising a firewall through which the mother node is unable to communicate without initiation by the first computing device.

23. The computer program product of claim 17, the method further comprising:

providing a second password management service in communication with the mother node, the second password management service being executed at a second computing device;

receiving a second request from the second password management service for a new second password;

responding to the second request by transmitting the new second password to the second password management service;

storing the new second password on the storage device of the mother node; and

providing the new second password to an authorized user upon request.

24. The computer program product of claim 23, the first and second password management services having different schedules for requesting passwords from the mother node.

22. (Canceled)