Computer access control using password reset
The present invention relates to a method for method or system which is able to control access to a new computer user password reset. The system is preloaded with a random password that does not needed to be known by anyone. There are two main situations in which this method will be used. The first situation involves a locally managed password and account where the user does not log in to a domain. The second situation involves remote management, where the user logs in to a domain.
1. An apparatus comprising:
an arrangement for generating a unique system identifier in response to power-up of the apparatus;
an arrangement for accepting user input for accessing a pre-loaded unique system identifier;
an arrangement for comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus; and
an arrangement for permitting a system password reset upon a match involving the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus.
2. The apparatus according to claim 1 , wherein the pre-loaded unique system identifier comprises a unique value generated during manufacturing from one or more sources of apparatus specific information, and wherein the unique value further comprises a unique value encrypted using a key pair and stored in a secure location of the apparatus.
3. The apparatus according to claim 2 , wherein said arrangement for generating a unique system identifier in response to power-up of the apparatus is configured to generate an unencrypted unique system identifier using the one or more sources of apparatus specific information utilized to generate the pre-loaded unique system identifier.
4. The apparatus according to claim 2 , wherein said user input for accessing a pre-loaded unique system identifier comprises a user input member of the key pair, and wherein the arrangement for accepting user input for accessing a pre-loaded unique system identifier is configured to utilize the user input member of the key pair to decrypt the pre-loaded unique system identifier.
5. The apparatus according to claim 4 , wherein said arrangement for comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus is configured to compare the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus in response to the pre-loaded unique system identifier being decrypted.
6. The apparatus according to claim 1 , wherein the pre-loaded unique system identifier comprises a unique value generated during manufacturing stored in a remote directory.
7. The apparatus according to claim 6 , wherein said user input for accessing a pre-loaded unique system identifier comprises a user input for authentication to the directory.
8. The apparatus according to claim 7 , wherein said arrangement for comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus is configured to provide the unique system identifier generated in response to power-up of the apparatus for comparison with the pre-loaded unique system identifier stored in the directory in response to the user being authenticated at the directory.
9. A method comprising:
generating a unique system identifier in response to power-up of an apparatus;
accepting user input for accessing a pre-loaded unique system identifier;
comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus; and
permitting a system password reset upon a match involving the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus.
10. The method according to claim 9 , wherein the pre-loaded unique system identifier comprises a unique value generated during manufacturing from one or more sources of apparatus specific information, and wherein the unique value further comprises a unique value encrypted using a key pair and stored in a secure location of the apparatus.
11. The method according to claim 10 , wherein said generating a unique system identifier in response to power-up of the apparatus further comprises generating an unencrypted unique system identifier using the one or more sources of apparatus specific information utilized to generate the pre-loaded unique system identifier.
12. The method according to claim 10 , wherein said user input for accessing a pre-loaded unique system identifier comprises a user input member of the key pair, and wherein said accepting user input for accessing a pre-loaded unique system identifier further comprises utilizing the user input member of the key pair to decrypt the pre-loaded unique system identifier.
13. The method according to claim 9 , wherein the pre-loaded unique system identifier comprises a unique value generated during manufacturing stored in a remote directory.
14. The method according to claim 13 , wherein said user input for accessing a pre-loaded unique system identifier comprises a user input for authentication to the directory.
15. The method according to claim 14 , wherein said comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus further comprises providing the unique system identifier generated in response to power-up of the apparatus for comparison with the pre-loaded unique system identifier stored in the directory in response to the user being authenticated at the directory.
16. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform acts, said acts comprising:
generating a unique system identifier in response to power-up of an apparatus;
accepting user input for accessing a pre-loaded unique system identifier;
comparing the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus; and
permitting a system password reset upon a match involving the pre-loaded unique system identifier and the unique system identifier generated in response to power-up of the apparatus.
17. The program storage device according to claim 16 , wherein the pre-loaded unique system identifier comprises a unique value generated during manufacturing from one or more sources of apparatus specific information, and wherein the unique value further comprises a unique value encrypted using a key pair and stored in a secure location of the apparatus.
18. The program storage device according to claim 17 , wherein said generating a unique system identifier in response to power-up of the apparatus further comprises generating an unencrypted unique system identifier using the one or more sources of apparatus specific information utilized to generate the pre-loaded unique system identifier.
19. The program storage device according to claim 17 , wherein said user input for accessing a pre-loaded unique system identifier comprises a user input member of the key pair, and wherein said accepting user input for accessing a pre-loaded unique system identifier further comprises utilizing the user input member of the key pair to decrypt the pre-loaded unique system identifier.