公开(公告)号：US20100235897A1

公开(公告)日：2010-09-16

申请号：US12679432

申请日：2008-08-15

Applicant: Jeremy R. Mason ,  Neil A. Emms ,  Colin R. Paterson

Inventor： Jeremy R. Mason ,  Neil A. Emms ,  Colin R. Paterson

IPC: H04L9/32 ,  G06F21/00

CPC classification number: H04L63/0846 ,  G06F21/31

Abstract: A method for recording a password for providing access to secure resources in a computer network, including a user establishing a session via the computer network in which the user is in communication with a password authority via the session; the user identifying themselves to the password authority via the session and requesting a password via the session; the password authority sending a code to the user otherwise than via the session; the user receiving the code and providing the code to the password authority via the session; the user providing a proposed password value to the password authority via the session; the password authority receiving and checking the validity of the code provided by the user and, if the code entered is valid, recording the proposed password value entered by user; in which the code is only valid if provided via the session via which the password is requested.

Abstract translation: 一种用于记录用于提供对计算机网络中的安全资源的访问的密码的方法，包括用户通过所述计算机网络建立会话，所述计算机网络中所述用户经由所述会话与密码管理机构通信; 该用户通过该会话向该密码机构识别自己，并通过会话请求密码; 密码管理机构向用户发送代码，而不是通过会话; 用户接收代码并通过会话向密码管理机构提供代码; 用户通过会话向密码管理机构提供建议的密码值; 密码管理机构接收和检查用户提供的代码的有效性，如果输入的代码有效，则记录用户输入的建议密码值; 其中代码仅在通过请求密码的会话提供时才有效。