Multi-control password changing

Patent metadata

Field	Value
Publication number	US-9049189-B2
Application number	US-201213728803-A
Country	US
Kind code	B2
Filing date	Dec 27, 2012
Priority date	Oct 12, 2012
Publication date	Jun 2, 2015
Grant date	Jun 2, 2015

Abstract

Multi-control password changing includes initiating a password change cycle to change a target user's password, selecting a plurality of administrators to provide password part inputs, receiving password part inputs separately and confidentially from the plurality of administrators, generating a multi-control password comprised of multiple password part inputs, changing the target user's password to the multi-control password, and transmitting either the single multi-control password or multiple password parts each separately to target user. In an exemplary embodiment, a system for multi-control password changing includes a multi-control password changing module configured to change a target user's password, a recruitment module configured to select a plurality of administrators to provide password part inputs, a regulation module configured to receive and process password part inputs from the plurality of administrators, and a change value module configured to generate a multi-control password comprised of multiple password part inputs.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
selecting, by at least one hardware processor, a first administrator account from a plurality of administrator accounts to create a first password part input, where the first administrator account is associated with a first administrator node in a network;
selecting, by the at least one hardware processor, a second administrator account from a plurality of administrator accounts to create a second password part input, where the second administrator account is associated with a second administrator node in the network;
receiving, from the at least one hardware processor, the first password part input from the first administrator account and the second password part input from the second administrator account;
generating, by the at least one hardware processor, a multi-control password comprised the first password part input and the second password part input; and
changing, by the at least one hardware processor, a target user's password to multi-control password.

2. The computer-implemented method of claim 1 , further comprising:
allocating space to receive the first and second password part inputs from the first and second administrator accounts.

3. The computer-implemented method of claim 1 , further comprising:
determining if the first and second password part inputs are sufficient in at least one of length, type, value, and complexity to generate a multi-control password.

4. The computer-implemented method of claim 1 , further comprising:
recycling until a password change cycle comprising the selecting the first administrator account, the selecting the second administrator account, and the receiving is successfully completed.

5. The computer-implemented method of claim 1 , further comprising:
transmitting the multi-control password to the target user.

6. The computer-implemented method of claim 5 , wherein the transmitting comprises:
transmitting the multi-control password to the target user using a multi-control password service to concatenate, format, and address the first and second password part inputs.

7. The computer-implemented method of claim 1 , wherein the receiving comprises:
receiving the first and second password part inputs from the first and second administrator accounts through a user interface configured to enforce password part input requirements.

8. A system, comprising:
a memory comprising:
a multi-control password changing module, implemented on a processing device, configured to change a target user's password,
a recruitment module, implemented on a processing device, configured to:
select a first administrator account from a plurality of administrator accounts to create a first password part input, wherein the first administrator account is associated with first administrator node in a network, and
select a second administrator account from the plurality of administrator accounts to create a second password art input, wherein the second administrator account is associated with a second administrator node in the network;

a regulation module, implemented on a processing device, configured to receive and process the first password part input from the first administrator account and the second password part input from the second administrator account, and
a change value module, implemented on the processing device, configured to generate a multi-control password comprised of the first and second password part inputs; and

at least one processor coupled to the memory and configured to process the modules.

9. The system of claim 8 , wherein the memory further comprises:
an allocation module, implemented on a processing device, configured to allocate space to receive the first and second password part inputs from the first and second administrator accounts.

10. The system of claim 8 , wherein the memory further comprises:
a transmission module, implemented on the processing device, configured to transmit the multi-control password to a target user.

11. The system of claim 10 , wherein the transmission module further comprises:
a multi-control password service configured to concatenate, format, and address the first and second password part inputs.

12. The system of claim 8 , wherein the recruitment module further comprises:
a selection engine configured to select the first and second administrators based on qualifying criteria.

13. The system of claim 8 , wherein the recruitment module is further configured to:
blind the first administrator from knowing or discovering the identity and the second password part input of the second administrator.

14. The system of claim 8 , wherein the regulation module is further configured to:
substitute the first administrator using a selection engine until the first password part input is sufficient in at least one of length, type, value, and complexity to generate the multi-control password.

15. A non-transitory computer-readable storage medium having control logic recorded thereon, execution of which, by a processor, causes the processor to perform operations to perform multi-control password changing, the operations comprising:
selecting a first administrator account from a plurality of administrator accounts to create a first password part input, wherein the first administrator account is associated with a first administrator node in a network;
selecting a second administrator associated with a second administrator account from the plurality of administrator accounts to create a second password part input, wherein the second administrator account is associated with a second administrator node in the network;
receiving the first password part input from the first administrator account and the second password input from the second administrator account;
generating a multi-control password comprised of the first password part input and the second password part input; and
changing a target user's password to the multi-control password.

16. The non-transitory computer-readable storage medium of claim 15 , the operations further comprising:
allocating space to receive the first and second password part inputs from the first and second administrator accounts.

17. The non-transitory computer-readable storage medium of claim 15 , the operations further comprising:
determining if the first and second password part inputs are sufficient in at least one of length, type, value, and complexity to generate the multi-control password.

18. The non-transitory computer-readable storage medium of claim 15 , the operations further comprising:
recycling until a password change cycle comprising the selecting the first administrator account, the selecting the second administrator account, and the receiving is successfully completed.

19. The non-transitory computer-readable storage medium of claim 15 , the operations further comprising:
transmitting the multi-control password to the target user.

20. The non-transitory computer-readable storage medium of claim 15 , wherein the receiving comprises:
receiving the first and second password part inputs from the first and second administrator accounts through a user interface configured to enforce password part input requirements.

Assignees

• Goel Anil
• Gupta Ramesh
• Desai Asif Iqbal
• Kandiyanallur Vivek
• Ghosh Somnath
• Sybase Inc

Inventors

• Goel Anil
• Gupta Ramesh
• Desai Asif Iqbal
• Kandiyanallur Vivek
• Ghosh Somnath

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F21/45

  Structures or tools for the administration of authentication · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title