| 摘要 |
Systems and methods for recovering from a lost password are described. A password reset disk is created by generating a key pair consisting of a private key and a corresponding public key. The private key is stored on a removable computer-readable medium so that it can be removed and securely stored remote from the computer system on which it was created. The public key is stored on the computer system and used to maintain an up-to-date encrypted copy of the current password. This encrypted copy is stored on the computer system. If, at a later time, the user forgets a user password, the user may insert the password reset disk into the computer system. The private key is retrieved from the password reset disk and the encrypted password is decrypted using the private key. If the decryption is successful, the user is allowed to set a new password. The password reset disk is effective even if the user password has been changed since the creation of the password reset disk. In this way, a user does not have to contact customer service to recover from a forgotten password. The user may also create the password reset disk when there is no password set. When a password is set, the password is encrypted with the public key and stored. |
