System and method for key recovery

A system for providing secure access to a resource, comprising:

• a password management agent, the password manager agent detecting a user request to access a secure resource from a user and determining the authenticator associated with the user has changed subsequent to the encryption of a user credential required to access the requested secure resource;
• a first key used to encrypt the user credential required to access the requested secure resource, the first key generated from a plurality of cryptographically strong components, destroyed after encrypting the user credential, and regenerated following the detection by the password manager agent of the user request;
• and
• a second key used to encrypt the user credential subsequent to the decryption of the user credential using the regenerated key, the second key generated from a plurality of cryptographically strong components and destroyed after encrypting the user credential.

An article of manufacture having embodied thereon computer-readable program means for providing access to a secure resource, the article of manufacture comprising:

• computer-readable program means for receiving a first authenticator for a user;
• computer-readable program means for encrypting using a first key, in response to receipt of the first authenticator, a user credential required for access to at least one resource;
• computer-readable program means for destroying the first key;
• computer-readable program means for receiving, subsequent to the destruction of the first key, a second authenticator used to authenticate the user;
• computer-readable program means for receiving a request from the user to access the at least one resource;
• computer-readable program means for regenerating the first key following validation of the identity of the user;
• computer-readable program means for decrypting the encrypted user credential using the regenerated first key;
• computer-readable program means for providing the decrypted user credential to the at least one resource;
• computer-readable program means for encrypting the user credential using a second key created following the receipt of the second authenticator;
• and
• computer-readable program means for destroying the second key.

A method of providing access to a secure resource over a network, comprising:

• providing a user credential associated with a user, the user credential encrypted using a first key and associated with the user following a first authentication of the user to the network using a first authenticator, the first key destroyed following the encryption of the user credential;
• receiving, subsequent to the first authentication, a request from the user to access a secure resource, the secure resource requiring the encrypted user credential;
• determining that the request for the secure resource originated from the user following a second authentication of the user to the network using a second authenticator;
• regenerating, automatically without additional user input, the first key, following validation of the identity of the user;
• decrypting the encrypted user credential using the regenerated first key;
• providing the decrypted user credential to the secure resource;
• and
• encrypting the user credential using a second key created following the receipt of the second authenticator, the second key destroyed following the encryption.