Authentication system
AssigneeHewlett-Packard Development Company, L.P.
InventorsJoshua Serratelli Schiffman, Gurchetan Grewal, Boris Balacheff
Life of this patent
Estimating the term…
Abstract
A system and method for authentication are described herein. An authentication request is received at a combiner proxy (350). The combiner proxy (350), is arranged to receive a user authentication request, receive one or more share values from one or more communications devices (330A, . . . , 330N) where each of the communications devices (330A, . . . 330N) stores at least one share value of a set of share values and determine if one or more share values that have been received from the communications devices (330A, . . . , 330N) meet a quantitative criteria. The combiner proxy (350) is arranged to authenticate the user if the received share values meet the quantitative criteria.
Claims11
A method of authenticating a user comprising:
- receiving a user authentication request;
- determining if one or more share values that have been received from a plurality of communications devices meet a quantitative criteria, each of the communications devices storing at least one share value of a set of share values distributed among the plurality of communications devices, the share values having being computed on the basis of a user credential, wherein a separate secure communication channel was used for each communication device of the plurality of communications devices, and wherein determining if the quantitative criteria has been met comprises determining if the number of received share values have been received in a specified time frame;
- and
- authenticating the user if the received share values meet the quantitative criteria.
A system comprising:
- a combiner proxy arranged to:
- receive a user authentication request;
- receive one or more share values from one or more communications devices, each of the communications devices storing at least one share value of a set of share values distributed among a plurality of communications devices, the share values having been computed on the basis of a user credential, wherein a separate secure communication channel was used for each communication device of the plurality of communications devices;
- determine if the one or more share values that have been received meet a quantitative criteria, wherein determining if the quantitative criteria has been met comprises determining if the number of received share values have been received in a specified time frame;
- and
- authenticate the user if the received shared share values meet the quantitative criteria.
A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to:
- receive a user authentication request;
- determine if one or more share values that have been received from a plurality of communications devices meet a quantitative criteria, each of the communications devices storing at least one share value of a set of share values distributed among the plurality of communications devices, the share values having being computed on the basis of a user credential, wherein a separate secure communication channel was used for each communication device of the plurality of communications devices, and wherein determining if the quantitative criteria has been met comprises determining if the number of received share values have been received in a specified time frame;
- and
- authenticate the user if the received share values meet the quantitative criteria.
Dependencies are inferred from the claim text.