Temporary password for password reset

Patent metadata

Field	Value
Publication number	US-11880449-B2
Application number	US-202016795918-A
Country	US
Kind code	B2
Filing date	Feb 20, 2020
Priority date	Feb 20, 2020
Publication date	Jan 23, 2024
Grant date	Jan 23, 2024

Abstract

One embodiment provides a method, including: receiving, in an application on an information handling device, a password reset request from a user; accessing, subsequent to the receiving, a data store comprising a list of answers that are responsive to a list of security questions; constructing, using the data store, a temporary password, wherein the temporary password consists of at least one answer selected from the list of answers; and providing, to the user, a prompt containing an indication of the temporary password, wherein the prompt comprises at least one security question, from the list of security questions, that corresponds to the at least one answer. Other aspects are described and claimed.

First claim

What is claimed is:

1. A method, comprising:
receiving, in an application on an information handling device, a password reset request from a user;
accessing, subsequent to the receiving, a data store comprising a list of user-provided answers that are responsive to a list of security questions;
constructing, using the data store, a temporary password, wherein the temporary password consists of at least one answer selected from the list of answers;
providing, to the user, a prompt containing an indication of the temporary password without the temporary password in the prompt, wherein the indication comprises at least one security question, from the list of security questions, that corresponds to the at least one answer, wherein an order of the list of security questions informs the user of a proper order to assemble the temporary password based upon the list of user-provided answers, wherein a plurality of digits from an at least one numerical answer to the list of security questions are comingled between the at least one answer based upon the proper order to assemble the temporary password, wherein an interception by an another user maintains transmission security of the temporary password, wherein the assembly of the temporary password randomizes the ordering of the user-provided answers, wherein a number of the user-provided answers for the temporary password is based upon a priority of the application; and
authorizing the user access to the application responsive to identifying a match between user provided answers to the prompt and the constructed temporary password.

2. The method of claim 1 , wherein the at least one answer comprises a numerical answer and a textual answer.

3. The method of claim 2 , wherein at least one answers comprises a numerical answer and wherein portions of the numerical answer are comingled among the textual answer in a predefined way.

4. The method of claim 2 , wherein the textual answer is arranged in a predetermined order and wherein the predetermined order is derived from an ordering of the at least one security question in the prompt.

5. The method of claim 4 , wherein the ordering is randomized each time the password reset request is received.

6. The method of claim 1 , wherein the providing comprises transmitting the prompt to the user using a secondary communication channel.

7. The method of claim 6 , wherein the secondary communication channel is selected from the group consisting of an SMS message, an email, and a notification.

8. The method of claim 1 , wherein the providing comprises providing the prompt in the application.

9. The method of claim 1 , wherein the list of answers is received from the user during a password registration process.

10. The method of claim 1 , further comprising:
receiving, in an input field of the application, the temporary password; and
directing, responsive to confirming the temporary password, the user to a password reset page.

11. An information handling device, comprising:
at least one sensor;
a processor;
a memory device that stores instructions executable by the processor to:
receive, in an application, a password reset request from a user;
access, subsequent to the receiving, a data store comprising a list of user-provided answers that are responsive to a list of security questions;
construct, using the data store, a temporary password, wherein the temporary password consists of at least one answer selected from the list of answers;
provide, to the user, a prompt containing an indication of the temporary password without the temporary password in the prompt, wherein the indication comprises at least one security question, from the list of security questions, that corresponds to the at least one answer, wherein an order of the list of security questions informs the user of a proper order to assemble the temporary password based upon the list of user-provided answers, wherein a plurality of digits from an at least one numerical answer to the list of security questions are comingled between the at least one answer based upon the proper order to assemble the temporary password, wherein an interception by an another user maintains transmission security of the temporary password, wherein the assembly of the temporary password randomizes the ordering of the user-provided answers, wherein a number of the user-provided answers for the temporary password is based upon a priority of the application; and
authorize the user access to the application responsive to identifying a match between user provided answers to the prompt and the constructed temporary password.

12. The information handling device of claim 11 , wherein the at least one answer comprises.

13. The information handling device of claim 12 , wherein at least one answers comprises a numerical answer and wherein portions of the numerical answer are comingled among the textual answer in a predefined way.

14. The information handling device of claim 12 , wherein the textual answer is arranged in a predetermined order and wherein the predetermined order is derived from an ordering of the at least one security question in the prompt.

15. The information handling device of claim 14 , wherein the ordering is randomized each time the password reset request is received.

16. The information handling device of claim 11 , wherein the instructions executable by the processor to provide comprise instructions executable by the processor to transmit the prompt to the user using a secondary communication channel.

17. The information handling device of claim 11 , wherein the instructions executable by the processor to provide comprise instructions executable by the processor to provide the prompt in the application.

18. The information handling device of claim 11 , wherein the list of answers is received from the user during a password registration process.

19. The information handling device of claim 11 , wherein the instructions are further executable by the processor to:
receive, in an input field of the application, the temporary password; and
direct, responsive to confirming the temporary password, the user to a password reset page.

20. A product, comprising:
a storage device that stores code, the code being executable by a processor and comprising:
code that receives, in an application, a password reset request from a user;
code that accesses, subsequent to the receiving, a data store comprising a list of user-provided answers that are responsive to a list of security questions;
code that constructs, using the data store, a temporary password, wherein the temporary password consists of at least one answer selected from the list of answers;
code that provides, to the user, a prompt containing an indication of the temporary password without the temporary password in the prompt, wherein the indication comprises at least one security questions, from the list of security questions, that corresponds to the at least one answer, wherein an order of the list of security questions informs the user of a proper order to assemble the temporary password based upon the list of user-provided answers, wherein a plurality of digits from an at least one numerical answer to the list of security questions are comingled between the at least one answer based upon the proper order to assemble the temporary password, wherein an interception by an another user maintains transmission security of the temporary password, wherein the assembly of the temporary password randomizes the ordering of the user-provided a

Assignees

• Lenovo Singapore Pte Ltd

Inventors

• Kapinos Robert James
• Norton Jr Robert James
• Li Scott Wentao
• Vanblon Russell Speight

Classifications

• G06F21/46 Primary

  by designing passwords or checking the strength of passwords · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F2221/2131

  Lost password, e.g. recovery of lost or forgotten passwords · CPC title