Methods, systems, and computer program products for recovering a password using user-selected third party authorization

Patent metadata

Field	Value
Publication number	US-9323918-B2
Application number	US-201414531417-A
Country	US
Kind code	B2
Filing date	Nov 3, 2014
Priority date	Oct 29, 2009
Publication date	Apr 26, 2016
Grant date	Apr 26, 2016

Abstract

A password recovery technique for access to a system includes receiving a request from a first party to recover the first party's password to access the system, receiving a selection of a second party from the first party, sending a message to the second party requesting that the second party authorize the request to recover the first party's password, receiving authorization from the second party for the request to recover the first party's password, and resetting the first party's password responsive to receiving authorization from the second party.

First claim

That which is claimed:

1. A method, comprising:
receiving, by a server associated with a second party, an electronic request sent from a network address associated with a device, the electronic request requesting recovery of a password associated with a first party;
sending, by the server, a webpage to the network address associated with the device, the webpage for generating an interface for selecting a third party to authorize the recovery of the password, the interface comprising one of a field for entering an identity of the third party and a list that contains the identity of the third party;
receiving, by the server, a selection of the third party sent from the network address associated with the device, the selection input via the interface;
retrieving, by the server, a contact address associated with the third party;
sending, by the server, an electronic message to the contact address associated with the third party, the electronic message requesting that the third party authorize the recovery of the password associated with the first party;
receiving, by the server, authorization from the third party for the recovery of the password associated with the first party; and
resetting, by the server, the password associated with the first party responsive to the authorization authorized by the third party.

2. The method of claim 1 , further comprising:
presenting the first party with a security question responsive to receiving the electronic request to recover the password; and
receiving a correct response to the security question from the first party.

3. The method of claim 1 , further comprising generating the electronic message.

4. The method of claim 1 , wherein sending the electronic message to the contact address associated with the third party comprises:
receiving content for the electronic message sent from the network address associated with the device; and
sending the content to the contact address associated with the third party requesting that the third party authorize the recovery of the password.

5. The method of claim 4 , further comprising receiving information that validates an identity of the first party to the third party.

6. The method of claim 5 , further comprising receiving a pre-arranged code established between the first party and the third party that validates the identity of the first party.

7. The method of claim 1 , further comprising:
retrieving an account associated with the third party; and
sending a prompt to the contact address associated with the third party after a log in.

8. The method of claim 1 , wherein sending the electronic message to the contact address associated with the third party comprises sending one of e-mail message and a text message.

9. The method of claim 1 , further comprising retrieving multiple contact addresses, each one of the multiple contact addresses associated with a different third party authorized to recover the password associated with the first party.

10. The method of claim 9 , further comprising:
selecting a different contact address from the multiple contact addresses, the different contact address associated with an additional third party authorizer; and
sending the electronic message to the different contact address associated with the additional third party authorizer, the electronic message requesting that the additional third party authorizer approve the recovery of the password associated with the first party.

11. The method of claim 10 , wherein resetting the password associated with the first party comprises resetting the password responsive to receiving the authorization from both the third party and the additional third party authorizer.

12. The method of claim 9 , wherein retrieving the multiple contact addresses comprises retrieving an email contact list.

13. The method of claim 1 , further comprising:
determining a time between sending the electronic message to the second party and receiving the authorization for the recovery of the password;
comparing the time to a threshold value; and
resetting the password responsive to the time being less than the threshold value.

14. A system, comprising:
a processor; and
a memory coupled to the processor, the memory storing code that when executed causes the processor to perform operations, the operations comprising:
receiving an electronic request sent from a network address associated with a device, the electronic request requesting recovery of a password associated with a first party;
sending a webpage to the network address associated with the device, the webpage for generating an interface for selecting a third party to authorize the recovery of the password, the interface comprising one of a field for entering an identity of the third party and a list that contains the identity of the third party;
receiving a selection of the third party sent from the network address associated with the device, the selection input via the interface;
retrieving a contact address associated with the third party;
sending an electronic message to the contact address associated with the third party, the electronic message requesting that the third party authorize the recovery of the password associated with the first party;
receiving an electronic authorization sent from the contact address associated with the third party, the electronic authorization authorizing the recovery of the password associated with the first party; and
resetting the password associated with the first party responsive to the electronic authorization authorized by the third party.

15. The system of claim 14 , wherein the operations further comprise:
sending a prompt to the network address associated with the device, the prompt presenting the first party with a security question to recover the password; and
receiving a correct response to the security question sent from the network address.

16. The system of claim 14 , wherein the operations further comprise generating the electronic message.

17. The system of claim 14 , wherein the operations further comprise receiving a pre-arranged code established between the first party and the third party.

18. A computer program product memory device storing code that when executed causes a processor to perform operations, the operations comprising:
receiving an electronic request sent from a network address associated with a device, the electronic request requesting recovery of a password associated with a first party;
sending a webpage to the network address associated with the device, the webpage for generating an interface for selecting a third party to authorize the recovery of the password, the interface comprising one of a field for entering an identity of the third party and a list that contains the identity of the third party;
receiving a selection of the third party sent from the network address associated with the device, the selection input via the interface;
retrieving a contact address associated with the third party;
sending an electronic message to the contact address associated with the third party, the electronic message requesting that the third party authorize the recovery of the password associated with the first party;
receiving an electronic authorization sent from the contact address associated with the third party, the electronic authorization authorizing the recovery of the password associated with the first party; and
resetting the password associated with the first party responsive to the electronic authorization authorized by the third party.

Assignees

• At & T Ip I Lp

Inventors

• Shankaranarayanan Nemmara K
• Cheswick William Roberts

Classifications

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F2221/2131

  Lost password, e.g. recovery of lost or forgotten passwords · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F21/31

  User authentication · CPC title