| 摘要 |
A user account recovery method is described. The method in- cludes storing an account recovery token at both an identity management system (IDM) and a service provider. In response to an indication that a user cannot access an account, a re- quest for the account recovery token is sent by the relevant service provider to the IDM. On confirming the identity of the user, the IDM retrieves the account recovery token and returns the token to the service provider. The service pro- vider compares the token received from the IDM with one or more locally stored tokens to initiate an account recovery process (which process may, for example, include prompting the user to provide a new password for the account). |
