Patent ID: 9292674
Filing Date: 2016-03-22
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method, comprising: upon receiving, at a server, data from a computing device that represents a user login password, generating a key from the would-be user's password by calculating a checksum; retrieving a corresponding user record; decrypting an encrypted password in the user record using the key, the encrypted password being encrypted by using an unencrypted password previously provided by the user and a previously generated key, wherein the previously generated key is generated from the previously provided unencrypted password; comparing the decrypted password and the user login password to determine if they match; and if the decrypted password and user login password match, creating a temporary session record and storing the key in the session record, otherwise aborting the user login, the stored key being usable to decrypt other encrypted information stored in the user record during a session.