METHOD OF MANAGING PASSWORDS USING A MASTER PASSWORD

摘要

The present invention provides a method of supporting registration of a user operating a user terminal to a password server system in a network comprising the user terminal and the password server system. The method comprises specifying a server user ID being unique to the password server system at the user terminal, and specifying a master password at the user terminal. A first message is generated at the user terminal, where this first message is at least partly based on the specified master password, and the first message and the server user ID is forwarded to the password server system, and a user entry comprising the first message and the server user ID is stored at the password server system. The first message may be a first cryptographic message formed by use of a first cryptographic function, and the first cryptographic function may be downloaded from the password server system to the user terminal. The method may further comprise generating at the password server system a unique lock-up code corresponding to the server user ID, and forwarding the lock-up code to the user terminal. The uniqueness of the server user ID being specified at the user terminal may be validated at the password server system, and the specification of the master password may be followed by a respecification of the master password at the user terminal. The method may also comprise downloading a password service application from the password server system to the user terminal, displaying a password service user interface corresponding to the password service user application at the user terminal, and displaying a password pattern indicator at the password service user interface, wherein said specification of the master password is performed using the password pattern indicator. The re-specification of the master password may be performed using the password pattern indicator, and the first cryptographic function may be downloaded from the password server system to the user terminal together with or as part of the password service application. The present invention also provides a method for authenticating a user operating the user terminal to the password server system. The present invention further provides a method of managing service site passwords and/or service site user ID's of users desiring access to one or more applications or service sites that require passwords and/or user ID.