# US 9,521,127 B1 · Password management system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,521,127 B1
- Document ID: US9521127B1
- Status: Granted
- Kind: B1
- Application number: 15/044,357
- Filed: 2016-02-16
- Granted: 2016-12-13
- Earliest claimed: 2015-09-08
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Rhonda L. Childress; Itzhack Goldberg; Clifford A. Pickover; Neil Sondhi
- Web page: https://patentgrep.com/patent/US9521127B1

## CPC

- G06F 21/31: User authentication
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 21/46: by designing passwords or checking the strength of passwords
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04W 12/041: Key generation or derivation
- G06F 2221/2115: Third party
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

An embodiment of the invention may include a method, computer program product and computer system for password management. The embodiment may include a computing device that creates a password inventory. The password inventory may be a list of one or more passwords, where each of the one or more passwords corresponds to a password key. The embodiment may update the password inventory without input from a user. The embodiment may receive a first login request from a first device. The embodiment may transmit information detailing a first password key to the first device, where the first password key corresponds to a first password from the list of one or more passwords. The embodiment may receive information detailing a first entered password from the first device. The embodiment may determine whether the first entered password is identical to the first password from the list of one or more passwords.

## Claims

### Claim 1

A method for authenticating a user, the method comprising:
creating a password inventory, wherein the password inventory comprises a list of one or more passwords, wherein each of the one or more passwords corresponds to a password key;
updating the password inventory without input from a user, wherein updating the password inventory comprises one or more of:
issuing a new password key to each password; and
issuing a new password to each password key;
based on updating the password inventory transmitting information detailing a portion of the password inventory to a third device, wherein the user has access to the third device, and wherein the third device is a mobile device;
receiving a first login request from a first device;
transmitting information detailing a first password key to the first device, wherein the first password key corresponds to a first password from the list of one or more passwords;
receiving information detailing a first entered password from the first device; and
determining whether the first entered password is identical to the first password from the list of one or more passwords.