Method for providing a secure non-reusable one-time password
AssigneeSymantec Corporation
InventorsShawn R. Lohstroh, David Grawrock
Life of this patent
Estimating the term…
Loading patent…
AssigneeSymantec Corporation
InventorsShawn R. Lohstroh, David Grawrock
Estimating the term…
The present invention is directed toward providing a secure method to access data when the user has lost or forgotten the user password. In accordance with the invention and in a system where decryption of an access key will give access to data, two encrypted versions of the access key are created. A first version is formed using a key formed with the user password. A second version is formed using a public key from a public-private key pair. Generally, data access can be had by decrypting the first encrypted version of the access key with the password key. However, if the password is forgotten, access to data can be accomplished by decrypting the second encrypted version of the access key with the private key from the public-private key pair. One embodiment of the invention requires the private key to be stored at a remote site and for decryption using the private key to take place at the remote site. In this manner the user can gain access to data without significantly compromising the data security.
A method of securing an access key, comprising the steps of:
A method of securing an access key, comprising the steps of:
A method of securing computer data, comprising the steps of:
A computer readable medium having a set of instructions stored therein, which when executed by a computer, causes the computer to secure an access key by performing the steps of:
Dependencies are inferred from the claim text.