US 10,097,536 B2Granted

Space-time separated and jointly evolving relationship-based network access and data protection system

AssigneeAuburn University

InventorsChwan-Hwa Wu, J. David Irwin, David Charles Last, Myers Hawkins, Hao Sun

Life of this patent

Estimating the term…

Loading patent…

Abstract

A network security system that employs space-time separated and jointly-evolving relationships to provide fast network access control, efficient real-time forensics capabilities, and enhanced protection for at-rest data in the event of a network breach. The network security system allows, in part, functionality by which the system accepts a request by a user to access the data stored in the database, identifies a sequence of security agents to participate in authenticating and protecting the access of the data by the user, generates a sequence of pseudorandom IDs and space-time varying credentials, checks at each one of the security agents a corresponding one of the credentials, determines that the user is permitted to access the data using access control logs if all the security agents accept the corresponding credentials, and varies the credentials based on a space-time relationship.

Claims4

Dependent claims

A system for determining whether a user is authorized to access a database, comprising:

computer-executable software code stored on one or more non-transitory data storage devices for:
receiving a first partial password at a first computing device, the first partial password comprising a first subset of symbols;
receiving a second partial password at a second computing device, the second partial password comprising a second subset of symbols;
generating a random sequence of symbols for each symbol of the first partial password and each symbol of the second partial password, each random sequence of symbols being different than the other random sequences of symbols;
transmitting the random sequences of symbols to a server;
generating a synchronous password based on the random sequences of symbols, the synchronous password comprising the first subset of symbols and the second subset of symbols;
and
determining whether the synchronous password matches one or more values stored on the server.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/960,798Filed 7 Dec 2015 · continuation
Priority: 17 Sep 2013
Published: US 2016/0182486 A123 Jun 2016
Granted: 9 Oct 2018
Term ends: Not estimatedThe source records don’t support an estimate.

Classification19 codes

H04L 63/083
For authentication of entities: using passwords
G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
H04L 9/0656
Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3: pseudorandom key sequence…
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…

Family

Application61/878,694Us provisional application · filed 17 Sep 2013
Application14/293,350Parent of this continuation · filed 2 Jun 2014
US 2016/0182486 A1Pre-grant publication · published 23 Jun 2016
US 9,208,335 B2Parent of this continuation
US 2015/0082399 A1Published application
US 10,097,536 B2This patent

From the US filing history. Foreign family members aren’t listed.