Patent ID: 8402522

Claim:
A system for managing access by a first computer account to a second computer account of a computer system, the system comprising: a password repository for storing a an encrypted password for the second computer account, wherein the second computer account is not associated with a human user and wherein an initial password is encrypted with at least a first secret and a second secret to generate the encrypted password; a first data storage device for storing the first secret, wherein a first group of users is authorized to access the first storage device; a second data storage device for storing the second secret, wherein a second group of users is authorized to access the second storage device, and wherein the first and second groups do not contain a user that is a member of both the first and second groups, and wherein the first data storage device is separate from the second data storage device; and a computer device in communication with the password repository and the first and second data storage devices, wherein the computer device is programmed to, in response to a request from the first computer account to perform an action under the second computer account: retrieve the first secret from the first data storage device; retrieve the second secret from the second data storage device; and decrypt the encrypted password with the first and second secrets without revealing the initial password to a user of the first computer account.