Automated password generation and change
AssigneeOkta, Inc.
InventorsHector Aguilar-Macias, Reman P. Child, Xin Gu, Jonathan R. Todd, Thomas M. Belote
Life of this patent
Estimating the term…
Abstract
An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system can also detect a manual user change of a password for a third-party service and cause configuration of client devices of the user to reflect the new password.
Claims20
A computer-implemented method performed by an identity management system, the method comprising:
- identifying client devices of a user, each client device including third-party applications for interfacing with third-party service systems;
- responsive to exceeding a length of time that passwords are valid, generating, by the identity management system, a first set of passwords and a second set of passwords for a user to access the third-party service systems, the first set of passwords comprising a distinct password for each third-party application that does not support per-device passwords, and the second set of passwords comprising a distinct password for each pair comprising a third-party application that supports per-device passwords and a client device from the client devices;
- configuring the client devices of the user with the first set of passwords for accessing the third-party service system;
- and
- configuring the client devices of the user with the second set of passwords by storing the distinct password for each pair on a client device to which the distinct password corresponds.
A non-transitory computer-readable storage medium storing instructions executable by a computer processor and that when executed by the computer processor perform actions comprising:
- identifying client devices of a user, each client device including third-party applications for interfacing with third-party service systems;
- responsive to exceeding a length of time that passwords are valid, generating, by the identity management system, a first set of passwords and a second set of passwords for a user to access the third-party service systems, the first set of passwords comprising a distinct password for each third-party application that does not support per-device passwords, and the second set of passwords comprising a distinct password for each pair comprising a third-party application that supports per-device passwords and a client device from the client devices;
- configuring the client devices of the user with the first set of passwords for accessing the third-party service system;
- and
- configuring the client devices of the user with the second set of passwords by storing the distinct password for each pair on a client device to which the distinct password corresponds.
A computer system comprising:
- a computer processor;
- and
- a storage medium storing instructions executable by a computer processor and that when executed by the computer processor perform actions comprising:
- identifying client devices of a user, each client device including third-party applications for interfacing with third-party service systems;
- responsive to exceeding a length of time that passwords are valid, generating, by the identity management system, a first set of passwords and a second set of passwords for a user to access the third-party service systems, the first set of passwords comprising a distinct password for each third-party application that does not support per-device passwords, and the second set of passwords comprising a distinct password for each pair comprising a third-party application that supports per-device passwords and a client device from the client devices;
- configuring the client devices of the user with the first set of passwords for accessing the third-party service system;
- and
- configuring the client devices of the user with the second set of passwords by storing the distinct password for each pair on a client device to which the distinct password corresponds.
Dependencies are inferred from the claim text.