Flexible encryption scheme for GSO target passwords

1. A method in a data processing system for providing security to target passwords in a global sign on system centralized database, comprising the steps of:

receiving a target password;

encrypting said target password in a user selected encryption manner to create an encrypted password; and

storing said encrypted password and an indication of encryption manner chosen, and further comprising:

responsive to a determination that the user has changed a primary password from a first primary password to a second primary password:

retrieving all of said users target passwords that were encrypted using said first primary password;

decrypting all of said users target passwords that were encrypted using said first primary password to produce unencrypted target passwords;

encrypting said unencrypted target passwords using said second primary password to produce reencrypted target passwords; and

storing said reencrypted target passwords.

2. A method in a data processing system for providing security to target passwords in a global sign on system centralized database, comprising the steps of:

receiving a target password;

encrypting said target password in a user selected encryption manner to create an encrypted password; and

storing said encrypted password and an indication of encryption manner chosen, and further comprising:

responsive to a determination that a master key has been changed from a first master key to a second master key:

retrieving all of said target passwords encrypted using said first master key;

decrypting all of said target passwords encrypted using said first master key to produce unencrypted target passwords;

encrypting said unencrypted target passwords using said second master key to produce reencrypted target passwords; and

storing said reencrypted target passwords.

3. A method in a data processing system for accessing password protected information comprising the steps of:

sending a request for target information to a server, wherein the target information is stored in an encrypted form on a database;

receiving the target information from the server;

responsive to a determination that the encrypted form is a second encrypted form, further decrypting the target information using a user's primary password to produce decrypted target information; and

sending the decrypted target information to the target to acquire access to the target.

4. The method as recited in claim 3 , wherein the second encrypted form uses only the user's primary password to encrypt the target information.

5. The method as recited in claim 3 , wherein the second encrypted form uses both the user's primary password and a master key to encrypt the target information.

6. A computer program product in a data processing system, comprising:

a computer recordable medium storing computer usable program code for providing security to target passwords in a global sign on system centralized database, the computer program product comprising:

first instructions for receiving a target password;

second instructions for encrypting said target password in a user selected encryption manner to create an encrypted password; and

third instructions for storing said encrypted password and an indication of encryption manner chosen, and further comprising:

fourth instructions, responsive to a determination that the user has changed a primary password from a first primary password to a second primary password, for retrieving all of said users target passwords that were encrypted using said first primary password;

fifth instructions, responsive to said fourth instructions, for decrypting all of said users target passwords that were encrypted using said first primary password to produce unencrypted target passwords;

sixth instructions, responsive to said fifth instructions, for encrypting said unencrypted target passwords using said second primary password to produce reencrypted target passwords; and

seventh instructions, responsive to said sixth instructions, for storing said reencrypted target passwords.

7. A computer program product in a data processing system, comprising:

a computer recordable medium storing computer usable program code for providing security to target passwords in a global sign on system centralized database, the computer program product comprising:

first instructions for receiving a target password;

second instructions for encrypting said target password in a user selected encryption manner to create an encrypted password; and

third instructions for storing said encrypted password and an indication of encryption manner chosen, and further comprising:

fourth instructions, responsive to a determination that a master key has been changed from a first master key to a second master key, for retrieving all of said target passwords encrypted using said first master key;

fifth instructions, responsive to said fourth instructions, for decrypting all of said target passwords encrypted using said first master key to produce unencrypted target passwords;

sixth instructions, responsive to said fifth instructions, for encrypting said unencrypted target passwords using said second master key to produce reencrypted target passwords; and

seventh instructions, responsive to said sixth instructions, for storing said reencrypted target passwords.

8. A computer program product in a data processing system, comprising:

a computer recordable medium storing computer usable program code for accessing password protected information, the computer program product comprising:

first instructions for sending a request for target information to a server, wherein the target information is stored in an encrypted form on a database;

second instructions for receiving the target information from the server;

third instructions, responsive to a determination that the encrypted form is a second encrypted form, for further decrypting the target information using a user's primary password to produce decrypted target information; and

fourth instructions for sending the decrypted target information to the target to acquire access to the target.

9. The computer program product as recited in claim 8 , wherein the second encrypted form uses only the user's primary password to encrypt the target information.

10. The computer program product as recited in claim 8 , wherein the second encrypted form uses both the user's primary password and a master key to encrypt the target information.

11. A global sign on system, comprising:

means for receiving a target password;

means for encrypting said target password in a user selected encryption manner to create an encrypted password; and

means for storing said encrypted password and an indication of encryption manner chosen, wherein security is provided for said target passwords stored in a centralized database, and further comprising:

retrieving means, responsive to a determination that the user has changed a primary password from a first primary password to a second primary password, for retrieving all of said users target passwords that were encrypted using said first primary password;

decrypting means, responsive to said retrieving means, for decrypting all of said users target passwords that were encrypted using said first primary password to produce unencrypted target passwords;

encrypting means, responsive to said decrypting means, for encrypting said unencrypted target passwords using said second primary password to produce reencrypted target passwords; and

storing means, responsive to said encrypting means, for storing said reencrypted target passwords.

12. A global sign on system, comprising:

means for receiving a target password;

means for encrypting said target password in a user selected encryption manner to create an encrypted password; and

means for storing said encrypted password and an indication of encryption manner chosen, wherein security is provided for said target passwords stored in a centralized database, and further comprising:

retrieving means, responsive to a determination that a master key has been changed from a first master key to a second master key, for retrieving all of said target passwords encrypted using said first master key;

decrypting means, responsive to said retrieving means, for decrypting all of said target passwords encrypted using said first master key to produce unencrypted target passwords;

encrypting means, responsive to said decrypting means, for encrypting said unencrypted target passwords using said second master key to produce reencrypted target passwords; and

storing means, responsive to said encrypting means, for storing said reencrypted target passwords.