Password management system and method
AssigneeAuthentico Technologies AB
InventorsPhilip Lundin Weinstock, Aysajan Abidin
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to a password management system and to a method for operating such a password management system. The password management system operates in communication with a client device running a cookie enabled browser application. The present disclosure also relates to a method for allowing access to restricted information stored at a server.
Claims14
A computer implemented method for operating a password management system comprising a server arranged in communication with a client device, the client device running a cookie enabled application, wherein the method comprises:
- receiving, at the server, a representation of a user password provided from the client device,
- storing the representation of the user password at a computer memory associated with the server,
- receiving, at the server, a server specific key,
- encrypting, at the server, the user password using the server specific key,
- forming, at the server, an access token based on the encrypted user password, wherein the access token has a predefined lifetime,
- forming, at the server, a cookie comprising the access token, and
- sending, by the server, the cookie to the client device for storage in a computer memory arranged in association with the client device.
A password management system, the system comprising a server arranged in communication with a client device, the client device running a cookie enabled application, wherein the server is adapted to:
- receive a representation of a user password provided from the client device,
- store the representation of the user password at a computer memory associated with the server,
- receive a server specific key,
- encrypt the user password using the server specific key,
- form an access token based on the encrypted user password, wherein the access token has a predefined lifetime,
- form a cookie comprising the access token, and
- send the cookie to the client device for storage in a computer memory arranged in association with the client device.
Dependencies are inferred from the claim text.