Device authentication agent
AssigneeHewlett Packard Enterprise Development LP
InventorsRaniyal Maninder, Madhyastha Sandesh V
Life of this patent
Estimating the term…
Abstract
Techniques for user authentication are provided. In one aspect, an authentication request form a user device may be received. The authentication request may include a username. A time stamp may be sent to the user device. An encrypted response may be received form the user device. The response may have been encrypted with a user and device specific authentication agent. The encrypted response may be based on the time stamp. The authentication agent may include user and device specific parameters.
Claims7
A method comprising:
- receiving, by a server, a request from a user computing device to generate an authentication agent, the request including a device identifier uniquely associated with the user computing device;
- generating, by the server, the authentication agent, the authentication agent associated with a user of the user computing device and the user computing device itself and including a derived identifier, the derived identifier being derived from the device identifier;
- sending, from the server, the authentication agent to the user computing device;
- receiving, by the server, an encrypted response from the user computing device, the encrypted response based in part on the derived identifier of the authentication agent matching a derived identifier derived in the user computing device from the device identifier;
- and
- inserting, by the server, user identification information within the authentication agent, the inserting including:
- generating, by the server, a randomly selected number of tags;
- inserting, by the server, the randomly selected number of tags into randomly selected locations within the authentication agent;
- and
- storing, by the server, an association between the number and locations of the tags within the authentication agent and the user;
- wherein the derivation of each of the derived identifier in the authentication unit and the derived identifier in the user computing device is a one way derivation.
A non-transitory processor readable medium containing thereon a set of instructions which when executed by a processor cause the processor to:
- receive, by a server, a request from a user computing device to generate an authentication agent, the request including a device identifier uniquely associated with the user computing device;
- generate, by the server, an authentication agent, the authentication agent associated with a user of the user computing device and the user computing device itself and including a derived identifier, the derived identifier being derived from the device identifier;
- receive, by the server, an authentication request from the user computing device, the authentication request including a username;
- send, from the server, a time stamp to the user computing device;
- receive, by the server, an encrypted response from the user computing device, the response encrypted with the authentication agent, the encrypted response based on the time stamp, the authentication agent including user and user computing device specific parameters, and the encrypted response further based on the derived identifier of the authentication agent matching a derived identifier derived in the user computing device from the device identifier;
- and
- insert, by the server, user identification information within the authentication agent, the inserting including:
- generating, by the server, a randomly selected number of tags;
- inserting, by the server, the randomly selected number of tags into randomly selected locations within the authentication agent;
- and
- storing, by the server, an association between the number and locations of the tags within the authentication agent and the user;
- wherein the derivation of each of the derived identifier in the authentication unit and the derived identifier in the user computing device is a one way derivation.
Dependencies are inferred from the claim text.