Password generator

Patent metadata

Field	Value
Publication number	US-9483634-B2
Application number	US-201615005555-A
Country	US
Kind code	B2
Filing date	Jan 25, 2016
Priority date	Apr 1, 2014
Publication date	Nov 1, 2016
Grant date	Nov 1, 2016

Abstract

Methods and apparatus are disclosed for generating a short term password that may be used to access a data warehouse. According to aspects of the disclosure, a user may request a password after inputting a data warehouse environment, an ID name, and a reason for the password reset. A server may receive the request and determine whether the difference in time of the present request and a previous request for the same ID name and data warehouse environment is greater than a time limit. Additionally, the server may determine whether a previous user has logged in using a password for the same ID name and data warehouse environment. Thereafter, the server may generate and output a short term password that expires after the time limit.

First claim

What is claimed is:

1. A method, comprising:
receiving, at a processor, a current request to generate a current single-use, short-term password, wherein the current request comprises prompts for entry of a data warehouse environment, an ID name, and a text box for typing a reason for password reset;
determining, at the processor, a current time that the current request to generate the current single-use, short-term password is received at the processor;
identifying, at the processor, a latest prior request to generate a prior single-use, short-term password initiated for the same ID name and the data warehouse environment, wherein the identifying comprises determining a prior time that the latest prior request was received at the processor;
calculating, at the processor, a time difference between the current time that the current request to generate the current single-use, short-term password is received at the processor and the prior time the latest prior request to generate the prior single-use, short-term password was received at the processor;
determining whether a previous user who initiated the latest prior request with the same ID name and data warehouse environment has logged on using the prior single-use, short-term generated password;
comparing, at the processor, the time difference with a short term time limit;
if the previous user who initiated the latest prior request with the same ID name and data warehouse environment has not logged on with the prior single-use, short-term password generated by the latest prior request and the time difference is less than the short term time limit, outputting, by the processor, a denial message; and
if the time difference is greater than the short term time limit or the previous user who initiated the latest prior request to generate the prior single-use, short-term password has logged in using the prior single-use, short-term password, randomly generating and outputting, by the processor, the current single-use, short-term password.

2. The method of claim 1 , wherein the time limit is a predetermined short term time limit.

3. The method of claim 1 , wherein the short term time limit is five minutes.

4. The method of claim 1 , further comprising expiring, at the processor, the current single-use, short-term password when no new request to generate a new single-use, short-time password is initiated for the ID name and data warehouse environment a certain time after the current single-use, short-term password was output, wherein the certain time is equal to the short term time limit.

5. The method of claim 1 , wherein the generated current single-use, short-term password enables access to a data warehouse.

6. The method of claim 1 , wherein the denial message provides a notification that the current single-use, short-term password cannot be generated for the ID name until the short term time limit expires.

7. The method of claim 1 , wherein the current single-use, short-term password comprises alphanumeric characters.

8. A non-transitory computer-readable storage medium having computer-executable program instructions stored thereon that, when executed by a processor, cause the processor to:
receiving, at the processor, a current request to generate a current single-use, short-term password, wherein the current request comprises prompts for entry of a data warehouse environment, an ID name, and a text box for typing a reason for password reset;
determining, at the processor, a current time that the current request to generate the current single-use, short-term password is received at the processor;
identifying, at the processor, a latest prior request to generate a prior single-use, short-term password initiated for the same ID name and the data warehouse environment, wherein the identifying comprises determining a prior time that the latest prior request was received at the processor;
calculating, at the processor, a time difference between the current time that the current request to generate the current single-use, short-term password is received at the processor and the prior time the latest prior request to generate the prior single-use, short-term password was received at the processor;
determining whether a previous user who initiated the latest prior request with the same ID name and data warehouse environment has logged on using the prior single-use, short-term generated password;
comparing, at the processor, the time difference with a short term time limit;
if the previous user who initiated the latest prior request with the same ID name and data warehouse environment has not logged on with the prior single-use, short-term password generated by the latest prior request and the time difference is less than the short term time limit, outputting, by the processor, a denial message; and
if the time difference is greater than the short term time limit or the previous user who initiated the latest prior request to generate the prior single-use, short-term password has logged in using the prior single-use, short-term password, randomly generating and outputting, by the processor, the current single-use, short-term password.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the short term time limit is a predetermined time limit.

10. The transitory computer-readable storage medium of claim 8 , wherein the short term time limit is five minutes.

11. The transitory computer-readable storage medium of claim 8 , wherein the computer-executable program instructions further cause the processor to expire the current single-use, short-term password when no new request to generate a new single-use, short-term password is initiated for the ID name and data warehouse environment a certain time after the current single-use, short-term password was output, wherein the certain time is equal to the short term time limit.

12. The transitory computer-readable storage medium of claim 8 , wherein the generated current single-use, short-term password enables access to a data warehouse.

13. The transitory computer-readable storage medium of claim 8 , wherein the denial message provides a notification that the current single-use, short-term password cannot be generated for the ID name until the short term time limit expires.

14. An apparatus comprising:
a memory;
a processor, wherein the processor executes computer-executable program instructions which cause the processor to:
receive, at the processor, a current request to generate a current single-use, short-term password, wherein the current request comprises prompts for entry of a data warehouse environment, an ID name, and a text box for typing a reason for password reset;
determine, at the processor, a current time that the current request to generate the current single-use, short-term password is received at the processor;
identify, at the processor, a latest prior request to generate a prior single-use, short-term password initiated for the same ID name and the data warehouse environment, wherein the identifying comprises determining a prior time that the latest prior request was received at the processor;
calculate, at the processor, a time difference between the current time that the current request to generate the current single-use, short-term password is received at the processor and the prior time the latest prior request to generate the prior single-use, short-term password was received at the processor;
determine whether a previous user who initiated the latest prior request with the same ID name and data warehouse environment has logged on using the prior single-use, short-term generated password;
compare,

Assignees

• Bank Of America

Inventors

• Alexander Denise
• Balaraman Sugumar
• Chandran Thiyagu
• Davidraj Prabhu
• John Judeson Bobson
• Merrill Mary E
• Natarajan Meenakshi Sundaram
• Thiyagarajan Senthil
• Zott Jerome

Classifications

• H04L63/108

  when the policy decisions are valid for a limited amount of time · CPC title

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title

• G06F2221/2151

  Time stamp · CPC title

• H04L63/0846

  using time-dependent-passwords, e.g. periodically changing passwords · CPC title

• G06F21/46 Primary

  by designing passwords or checking the strength of passwords · CPC title