Patent ID: 9060026
Filing Date: 2015-06-16
Classification: G06F,H04L

Abstract:
1. A method comprising: maintaining, by a password management system, a password history for a user, the password history comprising a record of prior passwords used by the user to access a secure environment and where each password represented in the password history is replaced with substitute text masking the password; analyzing, by a password audit service, the password history for the user without accessing the passwords represented in the password history; determining, by the password audit service based on said analyzing, whether the password history complies with a password usage policy for the user and a lifetime password usage policy for an enterprise; and generating, by the password audit service, a report including an audit trail of the password history wherein the report masks the password and the password history and includes an indication as to whether the user has complied with the password usage policy for the user and the lifetime password usage policy for the enterprise.