Patent ID: 8474022
Filing Date: 2013-06-25
Classification: G06F

Abstract:
1. A method for determining whether to permit a user to reset a credential used to access a resource, comprising the steps of: receiving, by at least one processing unit, a first request from a first user to reset a first credential, wherein the first request includes first user information; determining, based at least on the first user information, an applicable reset policy from among at least a first reset policy comprising a first gate and a second reset policy comprising a second gate identical to the first gate, wherein the first reset policy comprises a different pass/fail threshold than the second reset policy; receiving a response from the first user; and granting the first request if the response satisfies the applicable reset policy; wherein the determining step further comprises determining: that the first user is a member of both a first group having a first set of permissions within the resource and a second group having a second set of permissions within the resource; that the first reset policy is associated with users in the first group and the second reset policy is associated with users in the second group; that the first reset policy is more stringent than the second reset policy based on a ranking of the first reset policy and the second reset policy according to stringency; and that the applicable reset policy is the first reset policy and not the second reset policy.