Propagating plain-text passwords from a main registry to a plurality of foreign registries

Claim 3

A system according to claim 1, wherein said main data store includes an information account for each of said plurality of clients that includes a password of said user.

Claim 4

A system according to claim 2, wherein said security server provides a clear-text password to said password synchronization server for propagating to each of said plurality of secondary data stores.

Claim 5

A system according to claim 3, wherein said security server includes means for encrypting said clear-text password for storage in said information account.

Claim 6

A system according to claim 2, wherein said main data store stores, in association with said information account of each of said plurality of clients, an entry specifying one or more of said plurality of secondary data stores.

Claim 7

A system according to claim 2, said password synchronization server comprising: means, responsive to receipt of a request for said password of said client from a particular secondary data store among said plurality of secondary data stores, for determining if said particular secondary data store can obtain said password of said particular client; and means, responsive to a determination that said particular secondary data store can obtain said password, for transmitting said password to said particular secondary data store for storage in said particular secondary data store.

Claim 8

A system according to claim 6, wherein: said system further comprises means for encrypting said password prior to transmission of said password to said particular secondary data store; and said means for transmitting said password further comprises means for transmitting, to said particular secondary data store, an indication of a type of encryption utilized to encrypt said password.

Claim 9

A system according to claim 1, wherein said main data store includes an information account for said password synchronization server that binds each of said plurality of secondary data stores with each of said plurality of clients.

Claim 10

A system according to claim 1, wherein said main data store includes an information account for each of said plurality of secondary data stores.

Claim 11

A system according to claim 1, wherein said main data store is a main registry, said network is a distributed computing environment, and each of said plurality of secondary data stores forms a part of a foreign registry server.

Claim 12

A system according to claim 1, further comprising: a temporary memory data store coupled to said password synchronization server that stores information supporting a password propagation retry; wherein said password synchronization server includes means for performing a password propagation retry by retransmitting said password from said password synchronization server to at least one of said one or more secondary data stores in response to a temporary outage of a secondary data store among said one or more secondary data stores or said password synchronization server.

Claim 13

A system according to claim 1, wherein said password propagation synchronization is imposed on said one or more of said plurality of secondary data stores regardless of a current password status of said plurality of secondary data stores.

Claim 14

A system according to claim 1, and further comprising: a plurality of password servers coupled to said password synchronization server, wherein said plurality of password servers check password integrity among said plurality of clients so that each client maintains a password having a composition consistent with a set of rules selected for said main data store.

Claim 15

A system according to claim 1, wherein said password synchronization server comprises means for automatically transmitting said password to one or more of said plurality of clients in response to said user establishing said password and in response to said user modifying said password.

Claim 16

A computer program product comprising a computer usable medium having computer-readable program code embodied in said medium for use in a network that provides password synchronization between a main data store and a plurality of secondary data stores, said network including a plurality of clients, said computer program product comprising: computer usable code means forming a security server, wherein said security server can be coupled to the main data store to control communication between the plurality of clients and the main data store such that said plurality of clients access said main data store via said security server, wherein said main data store stores a password utilized to access one of said plurality of clients; and computer usable code means forming a password synchronization server, wherein said password synchronization server is adapted to be coupled to said security server, to said plurality of secondary data stores, and to a password repository that stores said password so that at least one secondary data store among said plurality of second data stores can retrieve said password through said password synchronization server, wherein said password synchronization server provides password propagation synchronization by transmitting said password utilized to access one of said plurality of clients to one or more of said plurality of secondary data stores for storage in said one or more secondary data stores; wherein said password synchronization server includes computer usable code means, responsive to receipt of a request for said password from a particular secondary data store among said plurality of secondary data stores, for retrieving said password from said password repository and for transmitting said password to said particular secondary data store for storage in said secondary data store so that a user is able to maintain a single, unique password among said plurality of secondary data stores and so that a remote computer coupled to said particular secondary data store can be accessed utilizing said synchronized password.

Claim 17

A computer program product comprising a computer usable medium having computer-readable program code embodied in said medium for use in a network that provides password synchronization between a main data store and a plurality of secondary data stores, said network including a plurality of clients, said computer program product comprising: computer usable code means forming a security server, wherein said security server can be coupled to the main data store to control communication between the plurality of clients and the main data store such that said plurality of clients access said main data store via said security server, wherein said main data store stores a password utilized to access one of said plurality of clients; and computer usable code means forming a password synchronization server, wherein said password synchronization server is adapted to be coupled to said security server, to said plurality of secondary data stores, and to a password repository that stores said password so that at least one secondary data store among said plurality of second data stores can retrieve said password through said password synchronization server, wherein said password synchronization server provides password propagation synchronization by transmitting said password utilized to access one of said plurality of clients to one or more of said plurality of secondary data stores for storage in said one or more secondary data stores; wherein said password synchronization server includes computer usable code means, responsive to receipt of a request for said password from a particular secondary data store among said plurality of secondary data stores, for retrieving said password from said password repository and for transmitting said password to said particular secondary data store for storage in said secondary data store so that a user is able to maintain a single, unique password among said plurality of secondary data stores and so that a remote computer coupled to said particular secondary data store can be accessed utilizing said synchronized password.

Claim 18

A computer program product according to claim 15, wherein said computer usable code means for storing said unique password in said main data store comprises: computer usable code means for establishing an information account in said main data store for each of said plurality of clients that includes said password of said user.

Claim 19

A computer program product according to claim 16, and further comprising: computer usable code means for providing a clear-text password to be propagated to said one or more of said plurality of secondary data stores.

Claim 20

A computer program product according to claim 17, and further comprising: computer usable code means for encrypting said clear-text password for storage in said information account.

Claim 21

A computer program product according to claim 16, and further comprising computer usable means for storing, in said main data store stores in association with said information account of said client, an entry specifying said one or more of said plurality of secondary data stores.

Claim 22

A computer program product according to claim 16, said computer program product further comprising: computer usable code means, responsive to receipt of a request for said password of said client from a particular secondary data store among said plurality of secondary data stores, for determining if said particular secondary data store can obtain said password of said particular client; and computer usable code means, responsive to a determination that said particular secondary data store can obtain said password, for transmitting said password to said particular secondary data store for storage in said particular secondary data store.

Claim 23

A computer program product according to claim 20, wherein: said computer program product further comprises means for encrypting said password prior to transmission of said password to said particular secondary data store; and said computer usable code means for transmitting said password further comprises computer usable code means for transmitting, to said particular secondary data store, an indication of a type of encryption utilized to encrypt said password.

Claim 24

A computer program product according to claim 15, and further comprising: computer usable code means for establishing an information account for binding each of said plurality of secondary data stores with each of said plurality of clients.

Claim 25

A computer program product according to claim 15, and further comprising: computer usable code means for establishing an information account for each of said plurality of secondary data stores.

Claim 26

A computer program product according to claim 15, and further comprising: computer usable code means for performing a propagation retry by retransmitting said unique password to at least one of said one or more secondary data stores in response to a temporary outage of a secondary data store among said one or more of said plurality of secondary data stores.

Claim 27

A computer program product according to claim 15, said password propagation synchronization being imposed on said one or more of said plurality of secondary data stores regardless of a current password status of said plurality of secondary data stores.

Claim 28

A computer program product according to claim 15, and further comprising: computer usable code means for checking that each of said plurality of clients maintains a password having a composition consistent with a set of rules selected for said main data store.

Claim 29

A computer program product according to claim 15, said computer usable means for providing password propagation synchronization comprising computer usable means for automatically transmitting said password to one or more of said plurality of clients in response to said user establishing said password and in response to said user modifying said password.

Claim 32

A method according to claim 28, and further comprising the step of: establishing an information account in said main data store for each of said plurality of clients that includes said unique password.

Claim 33

A method according to claim 29, wherein the step of: providing a clear-text password of said user's password, wherein said transmitting said password to one or more of said plurality of secondary data stores comprises the step of propagating a clear-text password to said one or more of said plurality of secondary data stores.

Claim 34

A method according to claim 30, and further comprising the step of: encrypting said clear-text password for storage in said information account.

Claim 35

A method according to claim 29, and further comprising the step of storing in said main data store, in association with said information account of said client, an entry specifying said one or more of said plurality of secondary data stores.

Claim 36

A method according to claim 29, said method further comprising the steps of: in response to receipt of a request for said password of said client from a particular secondary data store among said plurality of secondary data stores, determining if said particular secondary data store can obtain said password of said particular client; and in response to a determination that said particular secondary data store can obtain said password, transmitting said password to said particular secondary data store for storage in said particular secondary data store.

Claim 37

A method according to claim 33, and further comprising the steps of: encrypting said password prior to transmission of said password to said particular secondary data store; and transmitting, to said particular secondary data store, an indication of a type of encryption utilized to encrypt said password.

Claim 38

A method according to claim 28, and further comprising the step of: establishing an information account for binding each of said plurality of secondary data stores with each of said plurality of clients.

Claim 39

A method according to claim 28, and further comprising the step of: establishing an information account for each of said plurality of secondary data stores.

Claim 40

A method according to claim 28, and further comprising the step of: performing a propagation retry by retransmitting said password to at least one of said one or more secondary data stores in response to a temporary outage of one of said one or more secondary data stores.

Claim 41

A method according to claim 28, wherein said password is transmitted to said one or more of said plurality of secondary data stores regardless of a current password status of said plurality of secondary data stores.

Claim 42

A method according to claim 28, and further comprising the step of: checking password integrity among said plurality of clients to ensure that each client maintains a password having a composition consistent with a set of rules selected for said main data store.

Claim 43

A method according to claim 28, said transmitting step comprising the step of automatically transmitting said password to one or more of said plurality of clients in response to the user establishing said password and in response to said user modifying said password.