US 2011/0088085 A1 · PROTECTING PASSWORD FROM ATTACK

Abstract

A password may be provided along with a validation code, which can help prevent the password from being sent to the wrong recipient. When a password is created, a validation code may be created based on (a) the password, and (b) the identity of the target of authentication (TA) to which the password is intended to be sent. When a user is requested to provide a password, validation component intercepts the request and asks the user to enter both the password and validation code. The validation component then re-calculates the validation code based on the entered password and on the TA that is requesting the password. If the re-calculated validation code matches the validation code entered by the user, then the password is released to the user agent that the user uses to communicate with the TA, and the user agent sends the password to the requesting TA.

Claims20

Dependent claims

One or more computer-readable storage media that store executable instructions to perform a validation, wherein the executable instructions, when executed by a computer, cause the computer to perform acts comprising:

receiving, from an entity, a request for a password;
in response to said request, receiving, from a user, said password and a first validation code;
obtaining a binding associated with said entity;
calculating a second validation code based on said binding and on said password;
determining, based on a comparison between said first validation code and said second validation code, that said first validation code is valid;
and
based on a determination that said first validation code is valid, releasing said password to a user agent that sends said password to said entity.

4 more elements

Dependencies are inferred from the claim text.

Protecting password from attack

Life of this patent

Protecting password from attack

Life of this patent

Abstract

Claims20