Patent ID: 8365245
Filing Date: 2013-01-29
Classification: G06F

Abstract:
1. A computer implemented method for previous password based authentication, the computer implemented method comprising: obtaining, from a user, a combination of an identifier and a password to access a resource; determining whether the password is current and correct; responsive to determining the password is other than current and correct, prompting for a plurality of old passwords; obtaining, from the user, the plurality of old passwords; defining, by a password policy, a duration of the password and a duration of each one of the plurality of old passwords; setting, by the password policy: invoking, by the password policy, a service of an authentication processor to inform the user of an impending expiration of the password and the plurality of old passwords; determining whether each of the plurality of old passwords matches each of a plurality of previous passwords that were each previously used by the user to access the resource, wherein each of the plurality of previous passwords is stored in association with the identifier; responsive to each of the plurality of old passwords matching each of the plurality of previous passwords, creating a password match; and responsive to the password match, permitting access to the resource.