Systems and methods for password reset

Patent metadata

Field	Value
Publication number	US-9355244-B2
Application number	US-201514591159-A
Country	US
Kind code	B2
Filing date	Jan 7, 2015
Priority date	Dec 24, 2013
Publication date	May 31, 2016
Grant date	May 31, 2016

Abstract

Systems and methods are provided for password reset. For example, a first server receives a request operation instruction from a user terminal, wherein the request operation instruction includes account information and identity information; the first server determines whether to permit password reset for a first account indicated by the account information; in response to the password reset for the first account being permitted, the first server authenticates the account information and the identity information; if the authentication of the account information and the identity information is successful, the first server processes the request operation instruction and sends a password reset prompt to the user terminal; the user terminal receives the password reset prompt and sends to the first server password information set by a user in response to the password reset prompt; and the first server sends to a second server a password reset request that carries the password information.

First claim

What is claimed is:

1. A method operating a data processing system including a user terminal and two or more servers each comprising one or more non-transitory machine-readable storage media for password reset, the method comprising:
receiving, by a first server comprising one or more non-transitory machine-readable storage media, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;
determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;
in response to the password reset for the first account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information associated with the account;
in response to the authentication of the account information and the identity information being successful,
processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving, by the first server, password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt;
sending, by the first server, to a second server comprising one or more non-transitory machine-readable storage media, a password reset request that carries the password information so that the second server responds to the password reset request and sets a new password for the account according to the password information;
in response to the password reset for the account being forbidden, authenticating, by the first server, the account information and the identity information; and
in response to the authentication of the account information and the identity information being successful, performing the processing, by the first server, of the request operation instruction.

2. The method of claim 1 , wherein the authenticating the account information and the identity information includes:
sending, by the first server, an authentication request including the account information and the identity information to the second server so that the second server authenticates an association between the account information and the identity information; and
receiving, by the first server, an authentication pass message from the second server.

3. The method of claim 1 , wherein the processing the request operation instruction includes:
sending, by the first server, to a designated communication account a verification request for returning verification information, wherein the communication account is associated with the account; and
receiving, by the first server, the verification information returned by the communication account,
wherein the processing, by the first server, of the request operation instruction is performed according to the verification information.

4. The method of claim 1 , further comprising:
generating, by the first server, a password reset credential according to the account information and the identity information;
wherein:
the password reset request includes the password information and the password reset credential; and
the second server sets a new password for the account according to the password reset credential and the password information.

5. The method of claim 1 , wherein the determining whether to permit password reset for the account indicated by the account information includes:
determining, by the first server, whether the account indicated by the account information satisfies a preset condition;
in response to the account satisfying the preset condition, permitting, by the first server, the password reset for the account; and
in response to the first account not satisfying the preset condition, forbidding, by the first server, the password reset for the account.

6. A non-transitory computer readable storage medium comprising programming instructions for password reset, the programming instructions configured to cause a first server comprising one or more data microprocessors to execute operations comprising:
receiving, by the first server, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;
determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;
in response to the password reset for the first account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information;
in response to the authentication of the account information and the identity information being successful,
processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving, by the first server, password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt;
sending, by the first server, to a second server comprising one or more non-transitory machine-readable storage media, a password reset request that carries the password information so that the second server responds to the password reset request and sets a new password for the account according to the password information;
in response to the password reset for the account being forbidden, authenticating, by the first server, the account information and the identity information; and
in response to the authentication of the account information and the identity information being successful, performing the processing, by the first server, of the request operation instruction.

7. A system for password reset, comprising:
a first server comprising one or more data microprocessors; and
one or more non-transitory computer-readable storage media encoded with instructions for commanding the one or more data microprocessors of the first server to execute operations including:
receiving, by the first server, a request operation instruction from a user terminal, wherein the request operation instruction is associated with a payment and includes account information of an account and identity information;
determining, by the first server in response to receiving the request operation instruction, whether to permit password reset for the account indicated by the account information;
in response to the password reset for the account being permitted, authenticating, by the first server, the account information and the identity information based on determining whether the identity information matches pre-stored identity information associated with the first account;
in response to the authentication of the account information and the identity information being successful,
processing, by the first server, the request operation instruction, wherein processing the request operation instruction comprises sending, by the first server, a password reset prompt to the user terminal;

receiving password information set by the user terminal in response to the password reset prompt after the user terminal receives the password reset prompt; and
sending to a second server a password reset request that carries the password information

Assignees

• Tencent Tech Shenzhen Co Ltd

Inventors

• Liu Tiehua
• Song Zhigang

Classifications

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title