US 12,015,605 B2 · Prioritized ranking for memory device preparation

Abstract

A rollover system is provided to facilitate transitioning of client devices in a shared account network environment, from an old password to a new replacement password. The switching of passwords may take place gradually during a rollout period for client devices without required downtime and reducing a risk of lockouts. During the rollover period, a prior salt is temporarily carried over to a new verifier for the replacement password. Two new verifiers are generated: a temporary new verifier using the old salt for verification during the rollover period and another new verifier using a different new salt for verification after the rollover period had expired. During the rollover period, authentication involves the use of the temporary new verifier with the old salt or by the old verifier and old salt of the prior password. After the rollover period, authentication is based on the new verifier with a new salt.

Claims20

Dependent claims

An apparatus for transitioning passwords of a user account accessible to a plurality of client devices, the apparatus comprising:

one or more processors;
and
logic encoded in one or more non-transitory media for execution by the one or more processors and when executed operable to perform operations comprising:
activating a rollover period in response to receiving a replacement password to replace a first password associated with a stored first verifier created with a first salt (v1s1), wherein the rollover period is a predefined period of time;
during the rollover period:
in response to receiving the replacement password, generating a second verifier created with a second salt (v2s2) and a second verifier created with the first salt (v2s1), wherein the first salt is continued from prior use with the first verifier associated with the first password;
and
authenticating a first entered password, by the first entered password satisfying one of v2s1 or v1s1;
and
after the rollover period expires:
authenticating a second entered password, by the second entered password satisfying v2s2.

8 more elements

Dependencies are inferred from the claim text.

Prioritized ranking for memory device preparation

Life of this patent

Prioritized ranking for memory device preparation

Life of this patent

Abstract

Claims20