Patent ID: 8370925

Claim:
A computer-performed method for controlling expiration of a password, comprising: computing, within a computer system, a strength of the password from a formula that relates the length of the password and the types of characters included in the password to a resultant strength value; setting, within the computer system, an expiration period for the password in conformity with the resultant strength value, so that for a greater length of the password and a greater number of types of characters included in the password, a longer expiration period is set for the password and so that for lesser length of the password and a lesser number of types of characters included in the password, a shorter expiration period is set for the password; placing the password into service within the computer system, wherein the password controls access to one or more resources within the computer system; tracking, by the computer system, an age period corresponding to how long the password has been in effect; denying access to the one or more resources accessible by the computer system in response to the age period becoming equal to or greater than the expiration period; further in response to the age period becoming equal to or greater than the expiration period, automatically generating, by a password management subsystem of the computer system, a new password that replaces the password for providing access to the one or more resources, wherein the computing is performed to generate the new password according to a specified expiration period, wherein the new password automatically generated by the password management subsystem has a strength value sufficient for the specified expiration period; and in response to completing the automatically generating, automatically placing the new password into service within the computer system to control access to the one or more resources.