# US 8,474,013 B2 · Securely managing password access to a computer system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,474,013 B2
- Document ID: US8474013B2
- Status: Granted
- Kind: B2
- Application number: 13/074,555
- Filed: 2011-03-29
- Published: 2012-10-04
- Granted: 2013-06-25
- Earliest claimed: 2011-03-29
- Assignees: International Business Machines Corporation
- Applicants: James C. Fletcher
- Inventors: James C. Fletcher
- Web page: https://patentgrep.com/patent/US8474013B2

## CPC

- G06F 21/31: User authentication
- G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS
- G06F 2221/2137: Time limited access, e.g. to a computer or data
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method, system or computer usable program product for providing initial access Lo the computer system in response to a user providing a first password, and upon detecting a condition meeting a predetermined criteria, providing subsequent access to the computer system in response to the user providing a second password wherein the first password has stronger security than the second password.

## Claims

### Claim 1

A method of managing access to a computer system comprising:
providing initial access to the computer system in response to a user providing a first password; and
upon detecting a condition meeting a predetermined criteria including detecting less than a maximum elapsed time since the user provided the first password, providing subsequent access to the computer system in response to the user providing a second password wherein the first password has stronger security than the second password.

### Claim 2 (depends on 1)

The method of claim 1 further comprising providing subsequent access to the computer system in response to the user providing a first password when the predetermined criteria are not met by the condition.

### Claim 3 (depends on 1)

The method of claim 1 wherein detecting the condition meeting the predetermined criteria includes detecting less than a maximum number of consecutive invalid password attempts.

### Claim 4 (depends on 1)

The method of claim 1 wherein detecting the condition meeting the predetermined criteria includes verifying an administrator defined set of predetermined criteria.

### Claim 5 (depends on 1)

The method of claim 1 further comprising receiving a request from the computer system to manage access to the computer system, the request including the condition and the predetermined criteria.

### Claim 6 (depends on 1)

The method of claim 1 wherein detecting the condition meeting the predetermined criteria includes detecting a current location of the user within a minimum distance from a desired location.

### Claim 7 (depends on 1)

The method of claim 1 wherein detecting the condition meeting the predetermined criteria includes detecting a type of application being accessed.

### Claim 8 (depends on 1)

The method of claim 1 wherein detecting the condition meeting the predetermined criteria includes detecting a type of device being used by the user.

### Claim 9 (depends on 1)

The method of claim 1 further comprising receiving a request from the computer system to manage access to the computer system, the request including the condition and predetermined criteria, wherein detecting the condition meeting the predetermined criteria includes verifying an administrator defined set of predetermined criteria.

### Claim 10

A computer usable program product comprising a computer usable storage including computer usable code for use in managing access to a computer system, the computer usable program product comprising code for performing the steps of:
providing initial access to the computer system in response to a user providing a first password; and
upon detecting a condition meeting a predetermined criteria including detecting less than a maximum elapsed time since the user provided the first password, providing subsequent access to the computer system in response to the user providing a second password wherein the first password has stronger security than the second password.

### Claim 11 (depends on 10)

The computer usable program product of claim 10 further comprising providing subsequent access to the computer system in response to the user providing a first password when the predetermined criteria are not met by the condition.

### Claim 12 (depends on 10)

The computer usable program product of claim 10 wherein detecting the condition meeting the predetermined criteria includes verifying an administrator defined set of predetermined criteria.

### Claim 13 (depends on 10)

The computer usable program product of claim 10 wherein detecting the condition meeting the predetermined criteria includes detecting a current location of the user within a minimum distance from a desired location.

### Claim 14 (depends on 10)

The computer usable program product of claim 10 wherein detecting the condition meeting the predetermined criteria includes detecting a type of application being accessed.

### Claim 15 (depends on 10)

The computer usable program product of claim 10 wherein detecting the condition meeting the predetermined criteria includes detecting a type of device being used by the user.

### Claim 16

A data processing system for managing access to a computer application stored in a data processing system memory, the data processing system comprising:
a processor;
a memory storing program instructions which when executed by the processor execute the steps of:
providing initial access to the computer application in response to a user providing a first password; and
providing subsequent access to the computer application upon detecting a condition meeting a predetermined criteria, including detecting less than a maximum elapsed time since the user provided the first password, in response to the user providing a second password wherein the first password is more complex than the second password.

### Claim 17 (depends on 16)

The data processing system of claim 16 further comprising providing subsequent access to the computer system in response to the user providing a first password when the predetermined criteria are not met by the condition.

### Claim 18 (depends on 16)

The data processing system of claim 16 wherein detecting the condition meeting the predetermined criteria includes verifying an administrator defined set of predetermined criteria.

### Claim 19 (depends on 16)

The data processing system of claim 16 wherein detecting the condition meeting the predetermined criteria includes detecting a current location of the user within a minimum distance from a desired location.

### Claim 20 (depends on 16)

The data processing system of claim 16 wherein detecting the condition meeting the predetermined criteria includes detecting a type of computer application being accessed.
