Method and system for authentication over a distributed service to limit password compromise

Claim 3

The method of claim 1, further comprising: using an expiration date to remove said user record.

Claim 4

The method of claim 2, further comprising: allowing a visiting server to update said expiration date.

Claim 5

The method of claim 3, further comprising: prior to removing said user record due to said expiration date, checking to see if said user is accessing said visiting server; and if said user is accessing said visiting server, updating said expiration date in order to void removal of said user record.

Claim 6

The method of claim 1, further comprising: encrypting said initial random factor.

Claim 7

The method of claim 1, further comprising: storing said user record at a central database to record registration with a visiting server using said password plus said initial random factor.

Claim 8

The method of claim 1, further comprising: allowing a visiting server to remove said user record.

Claim 9

The method of claim 1, further comprising the step of rejecting the subsequent request if the random factor provided in the subsequent request does not match the random factor contained in the user record.

Claim 10

A method according to claim 1, further comprising the step of invoking a Duplication Handler when said subsequent request presents a subsequent random factor that does not match the initial random factor contained in the user record, wherein said Duplication Handler ensures that access to the distributed service in response to the subsequent request is limited to the services provided during the initial access.

Claim 13

The system of claim 10, further comprising: means for using an expiration date to remove said user record.

Claim 14

The system of claim 11, further comprising: means for allowing a visiting server to update said expiration date.

Claim 15

The system of claim 12, further comprising: prior to removing said user record due to said expiration date, means for checking to see if said user is accessing said visiting server; and if said user is accessing said visiting server, means for updating said expiration date in order to void removal of said user record.

Claim 16

The system of claim 10, further comprising: means for encrypting said initial random factor.

Claim 17

The system of claim 10, further comprising: means for storing said user record at a central database to record registration with a visiting server using said password plus said initial random factor.

Claim 18

The system of claim 10, further comprising: means for allowing a visiting server to remove said user record.

Claim 19

The system of claim 10, further comprising means for rejecting the subsequent request if the random factor provided in the subsequent request does not match the random factor contained in the user record.

Claim 20

A system according to claim 10, further comprising means for invoking a Duplication Handler when said subsequent request presents a subsequent random factor that does not match the initial random factor contained in the user record, wherein said Duplication Handler ensures that access to the distributed service in response to the subsequent request is limited to the services provided during the initial access.

Claim 21

A computer program product recorded on computer readable medium for controlling access to a distributed service to one user at any one time with a same password, comprising: computer readable means for allowing a user initial access to the distributed service with a user identification a password and an additional initial random factor created by said user for a unique record registration in a user record; computer readable means for creating a user record containing the user identification, the password and the initial random factor; computer readable means for receiving a subsequent request to access the distributed service utilizing the user identification, the password and a subsequent random factor; computer readable means for accessing the user record corresponding to the user identification of the subsequent request; and computer readable means for restricting use of the distributed service to said user during a subsequent request to access the distributed service with said user identification based on the accessed user identification, the password and said initial random factor contained in the user record.

Claim 22

A computer program product recorded on computer readable medium for controlling access to a distributed service to one user at any one time with a same password, comprising: computer readable means for allowing a user initial access to the distributed service with a user identification a password and an additional initial random factor created by said user for a unique record registration in a user record; computer readable means for creating a user record containing the user identification, the password and the initial random factor; computer readable means for receiving a subsequent request to access the distributed service utilizing the user identification, the password and a subsequent random factor; computer readable means for accessing the user record corresponding to the user identification of the subsequent request; and computer readable means for restricting use of the distributed service to said user during a subsequent request to access the distributed service with said user identification based on the accessed user identification, the password and said initial random factor contained in the user record.

Claim 23

The program product of claim 19, further comprising: computer readable means for using an expiration date to remove said user record.

Claim 24

The program product of claim 20, further comprising: computer readable means for allowing a visiting server to update said expiration date.

Claim 25

The program product of claim 21, further comprising: prior to removing said user record due to said expiration date, computer readable means for checking to see if said user is accessing said visiting server; and if said user is accessing said visiting server, computer readable means for updating said expiration date in order to void removal of said user record.

Claim 26

The program product of claim 19, further comprising: computer readable means for encrypting said initial random factor.

Claim 27

The program product of claim 19, further comprising: computer readable means for storing said user record at a central database to record registration with a visiting server using said password plus said initial random factor.

Claim 28

The program product of claim 19, further comprising: computer readable means for allowing a visiting server to remove said user record.

Claim 29

The program product of claim 19, further comprising computer readable means for rejecting the subsequent request if the random factor provided in the subsequent request does not match the random factor contained in the user record.

Claim 30

A program product according to claim 19, further comprising computer readable means for invoking a Duplication Handler when said subsequent request presents a subsequent random factor that does not match the initial random factor contained in the user record, wherein said Duplication Handler ensures that access to the distributed service in response to the subsequent request is limited to the services provided during the initial access.