IP Library Granted Patent US 11,689,523
Granted Patent B2
US 11,689,523 · App. 16/818,987 · Granted Jun 27, 2023

Facilitating password creation via a secure device

Inventors: Cesar Augusto Rodriguez Bravo (San Rafael de Alajuela, CR); Kevin Jimenez Mendez (Heredia, CR); Ramamohan Chennamsetty (Hopewell Junction, NY); Mauro Marzorati (Lutz, FL)
Assignee: Kyndryl, Inc.
H04L63/083H04L63/0861H04L63/107H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,689,523
App. No.
16/818,987
Granted
Jun 27, 2023
Kind
B2
Abstract

Techniques are described with respect to facilitating password creation via a secure device in a defined corporate environment. An associated method includes receiving an authentication request associated with an authorized client of a client system in the defined corporate environment and initializing the secure device with respect to the client system responsive to validating the authentication request. The method further includes creating a password for the client system in compliance with policy criteria associated with the defined corporate environment, encrypting the password, and distributing the password via at least one predetermined technique. In an embodiment, the method further includes creating access control credentials for the client system in compliance with the policy criteria associated with the defined corporate environment.

Claims (58)

1. A computer-implemented method of facilitating password creation in a defined corporate environment via a secure device having self-configuration capabilities, the method comprising:

receiving an authentication request associated with an authorized client of a client system in the defined corporate environment;

responsive to validating the authentication request, initializing the secure device with respect to the client system by connecting the secure device to the client system;

creating a password for the client system in compliance with policy criteria associated with the defined corporate environment, wherein the password is created via a security application loaded on a microcontroller of the secure device;

encrypting the password; and

distributing the password by injecting the password into the client system.

2. The computer-implemented method of claim 1 , further comprising:

creating access control credentials for the client system in compliance with the policy criteria associated with the defined corporate environment.

3. The computer-implemented method of claim 1 , further comprising:

receiving an additional authentication request associated with an additional authorized client of an additional client system;

initializing the secure device with respect to the additional client system responsive to validating the additional authentication request; and

creating an additional password for the additional client system.

4. The computer-implemented method of claim 1 , wherein the authentication request is validated only upon confirming that the secure device is within a predetermined location or geographic range.

5. The computer-implemented method of claim 1 , wherein validating the authentication request comprises:

receiving at least one biometric aspect associated with the authentication request via at least one biometric device; and

confirming that each of the received at least one biometric aspect corresponds to biometric information linked to the authorized client of the client system.

6. The computer-implemented method of claim 1 , wherein validating the authentication request comprises:

receiving at least one gesture associated with the authentication request via at least one motion detection device; and

confirming that each of the received at least one gesture corresponds to at least one gesture attribute linked to the authorized client of the client system.

7. The computer-implemented method of claim 1 , wherein validating the authentication request comprises:

receiving a locational signal associated with the authentication request via a location detection device; and

confirming that the received locational signal originated within a predetermined location or geographic range.

8. The computer-implemented method of claim 1 , wherein validating the authentication request comprises:

receiving a short range communication signal associated with the authentication request via a short range communication device;

confirming that the received short range communication signal corresponds to short range communication information linked to the authorized client of the client system; and

confirming that the received short range communication signal originated within a predetermined location or geographic range.

9. The computer-implemented method of claim 1 , wherein the secure device is physically connected to the client system.

10. The computer-implemented method of claim 1 , wherein the secure device is compatible with Universal Serial Bus human interface device (USB-HID) capabilities.

11. The computer-implemented method of claim 1 , wherein the security application is configured to initialize the secure device with respect to the client system only.

12. The computer-implemented method of claim 1 , wherein the secure device is a plug-and-play device.

13. A computer program product comprising a computer readable storage medium having program instructions embodied therewith for facilitating password creation in a defined corporate environment via a secure device having self-configuration capabilities, the program instructions executable by a computing device to cause the computing device to:

receive an authentication request associated with an authorized client of a client system in the defined corporate environment;

responsive to validating the authentication request, initialize the secure device with respect to the client system by connecting the secure device to the client system;

create a password for the client system in compliance with policy criteria associated with the defined corporate environment, wherein the password is created via a security application loaded on a microcontroller of the secure device;

encrypt the password; and

distribute the password by injecting the password into the client system.

14. The computer program product of claim 13 , wherein the program instructions further cause the computing device to:

create access control credentials for the client system in compliance with the policy criteria associated with the defined corporate environment.

15. The computer program product of claim 13 , wherein the program instructions further cause the computing device to:

receive an additional authentication request associated with an additional authorized client of an additional client system;

initialize the secure device with respect to the additional client system responsive to validating the additional authentication request; and

create an additional password for the additional client system.

16. The computer program product of claim 13 , wherein the authentication request is validated only upon confirming that the secure device is within a predetermined location or geographic range.

17. A system comprising:

a processor; and

a memory storing an application program, which, when executed on the processor, performs an operation of facilitating password creation in a defined corporate environment via a secure device having self-configuration capabilities, the operation comprising:

receiving an authentication request associated with an authorized client of a client system in the defined corporate environment;

responsive to validating the authentication request, initializing the secure device with respect to the client system by connecting the secure device to the client system;

creating a password for the client system in compliance with policy criteria associated with the defined corporate environment, wherein the password is created via a security application loaded on a microcontroller of the secure device;

encrypting the password; and

distributing the password by injecting the password into the client system.

18. The system of claim 17 , wherein the operation further comprises:

creating access control credentials for the client system in compliance with the policy criteria associated with the defined corporate environment.

19. The system of claim 17 , wherein the operation further comprises:

receiving an additional authentication request associated with an additional authorized client of an additional client system;

initializing the secure device with respect to the additional client system responsive to validating the additional authentication request; and

creating an additional password for the additional client system.

20. The system of claim 17 , wherein the authentication request is validated only upon confirming that the secure device is within a predetermined location or geographic range.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 18, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: KYNDRYL, INC.
Reel/Frame 058213/0912 →
CORRECTIVE ASSIGNMENT TO CORRECT THE SIGNATURE OF CO-INVENTOR KEVIN JIMENEZ MENDEZ PREVIOUSLY RECORDED AT REEL: 052113 FRAME: 0771. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Mar 18, 2020
From: RODRIGUEZ BRAVO, CESAR AUGUSTO; JIMENEZ MENDEZ, KEVIN; CHENNAMSETTY, RAMAMOHAN; MARZORATI, MAURO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 053241/0103 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 13, 2020
From: RODRIGUEZ BRAVO, CESAR AUGUSTO; JIMENEZ MENDEZ, KEVIN; CHENNAMSETTY, RAMAMOHAN; MARZORATI, MAURO
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 052113/0771 →
Continuity (1)
Related Publication 20210288950A1 · Sep 16, 2021