US6182229B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Password helper using a client-side master password which automatically presents the appropriate server-side password in a particular remote server
Assignee: Sun Microsystems Inc
•
Filing: 1999-11-30
•
Granted: 2001-01-30
•
Expires: 2019-11-30
Abstract
Abstract A user operating a client system may access a plurality of remote servers requiring passwords for access by employing a master password. The master password is used to decrypt a stored password for a particular remote server to which the client desires access. The client system maintains a database of encrypted passwords and user IDs for remote servers to which the user is registered. Although each remote server is accessed using a different password, the user need only remember one master password. Since only the master password need be remembered, the passwords particular to specific remote sites may be made more random and thus more secure. Implementation of the password management system need not require modification of any remote servers.
Inventors
- 👤 Jakob Nielsen
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 13:50
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
162 words
In a network including a client system and a group of at least one remote server, a method for authenticating a user operating said client system to said group of remote servers comprising the steps of: storing a plurality of entries corresponding to each remote server of said group in a database, each said entry comprising a password of the user registered at the corresponding remote server, said password being encrypted using a master password; receiving, at said client systems, an authentication request message from a first selected remote server of said group; inhibiting said client system from displaying an authentication form; prompting the user for said master password; searching said database for an entry corresponding to said authentication request message; decrypting, at said client system, said password registered at said first selected remoter server using the master password as a key; and sending, responsive to said authentication request message, said password form said client system to said first selected remote server.
Claim 2
Dependent Claim
162 words
In a network including a client system and a group of at least one remote server, a method for authenticating a user operating said client system to said group of remote servers comprising the steps of: storing a plurality of entries corresponding to each remote server of said group in a database, each said entry comprising a password of the user registered at the corresponding remote server, said password being encrypted using a master password; receiving, at said client systems, an authentication request message from a first selected remote server of said group; inhibiting said client system from displaying an authentication form; prompting the user for said master password; searching said database for an entry corresponding to said authentication request message; decrypting, at said client system, said password registered at said first selected remoter server using the master password as a key; and sending, responsive to said authentication request message, said password form said client system to said first selected remote server.
Claim 3
Dependent Claim
17 words
The method of claim 1 further comprising the step of: prompting the user for said master password.
Claim 4
Dependent Claim
18 words
The method of claim 2 further comprising the step of: storing said master password at said client system.
Claim 5
Dependent Claim
81 words
The method of claim 3 further comprising the steps of: receiving, at said client system, a further authentication request message from a second selected one of said remote servers; retrieving, at said client system, said master password; decrypting, at said client system, said password registered at said second selected remote server using said master password as a key; and sending, responsive to said authentication message, said password and said user ID from said client system to said second selected remote server.
Claim 6
Dependent Claim
16 words
The method of claim 1 wherein said authentication request message is a WWW authentication request message.
Claim 7
Dependent Claim
19 words
The method of claim 1 wherein each said entry further comprises a network address of the corresponding remote server.
Claim 8
Dependent Claim
12 words
The method of claim 6 wherein said network address is a URL.
Claim 9
Dependent Claim
17 words
The method of claim 1 further comprising the step of inhibiting display of said authentication request message.
Claim 10
Dependent Claim
31 words
The method of claim 1 further comprising the step of: searching for said an encrypted version of said password registered at said first selected remote server in said plurality of entries.
Claim 11
Dependent Claim
117 words
A client computer system adapted to couple to remote server via a network, said client computer system comprising: a network interface system that receives an authentication request message from said remote server; a data storage device that stores a password information database; a processing unit that responsive to said authentication request message performs the steps of: inhibiting said client system from displaying an authentication form; prompting the user for a master password; searching, at said client system, a password database for password information for said selected remoter server; and if said password information is found in said searching step, decrypting said password information using said master password; and transmitting said decrypted password information to said remote server.
Claim 12
Dependent Claim
117 words
A client computer system adapted to couple to remote server via a network, said client computer system comprising: a network interface system that receives an authentication request message from said remote server; a data storage device that stores a password information database; a processing unit that responsive to said authentication request message performs the steps of: inhibiting said client system from displaying an authentication form; prompting the user for a master password; searching, at said client system, a password database for password information for said selected remoter server; and if said password information is found in said searching step, decrypting said password information using said master password; and transmitting said decrypted password information to said remote server.
Claim 13
Dependent Claim
59 words
The client computer system of claim 10 wherein said processing unit further performs the steps of: if said password information is not found in said searching step, receiving user input specifying a password used to register to said remote server; and storing password information responsive to said user input in said password information database on said data storage device.
Claim 14
Dependent Claim
98 words
Software on a storage medium for use with a database of passwords and network addresses for a plurality of limited access remote servers, said passwords being encrypted with a master password key, said software comprising: code for receiving an authentication request message from a remote server having a selected network address; code for inhibiting the display of an authentication form; code for prompting a user for said master password key; code for searching for an encrypted password of said remote server; and code for decrypting an encrypted password retrieved by said searching software using said master password key.
Claim 15
Dependent Claim
98 words
Software on a storage medium for use with a database of passwords and network addresses for a plurality of limited access remote servers, said passwords being encrypted with a master password key, said software comprising: code for receiving an authentication request message from a remote server having a selected network address; code for inhibiting the display of an authentication form; code for prompting a user for said master password key; code for searching for an encrypted password of said remote server; and code for decrypting an encrypted password retrieved by said searching software using said master password key.
Claim 16
Dependent Claim
83 words
The software of claim 12 further comprising: software, adapted to operate in conjunction with browser software operating on a client system, for intercepting an authentication request message from a selected one of said limited access remote servers to said browser software; software for invoking said searching software and said decrypting software responsive to said authentication request message to find a decrypted password of said remote server; and software for transmitting said decrypted password to said remote server responsive to said authentication request message.
Claim 17
Dependent Claim
11 words
The software of claim 12 wherein said network addresses are URLs.
Claim 18
Dependent Claim
10 words
The software of claim 12 implemented as a Java applet.
Claim 19
Dependent Claim
12 words
The software of claim 12 further comprising: software for maintaining said database.
Claim 20
Dependent Claim
16 words
The software of claim 12 further comprising software for: prompting the user for said master password.
References Cited (Backward Citations)
US5481720A
Cited
US5560008A
Cited
US5448045A
Cited
US5642515A
Cited
US5611048A
Cited
US5623637A
Cited
US5655077A
Cited
US6006333A
Cited
US5892902A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-01-30 | 2004-07-31 | 2005-01-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-01-30 | 2008-07-31 | 2009-01-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-01-30 | 2012-07-31 | 2013-01-30 | $7700.00 | Window Closed / Lapsed |