Authentication system
AssigneeHewlett-Packard Development Company, L.P.
InventorsJoshua Serratelli Schiffman, Gurchetan Grewal, Boris Balacheff
Life of this patent
Estimating the term…
Abstract
A system and method for authentication are described herein. An authentication request is received at a combiner proxy (350). The combiner proxy (350), is arranged to receive a user authentication request, receive one or more share values from one or more communications devices (330A, . . . , 330N) where each of the communications devices (330A, . . . 330N) stores at least one share value of a set of share values and determine if one or more share values that have been received from the communications devices (330A, . . . , 330N) meet a quantitative criteria. The combiner proxy (350) is arranged to authenticate the user if the received share values meet the quantitative criteria.
Claims15
A method of authenticating a user comprising:
- receiving a user authentication request;
- determining if a share value that has been received from a plurality of communications devices meets a quantitative criteria, each of the communications devices storing at least one share value of a set of share values distributed among the plurality of communications devices, the share values having being computed on the basis of a user credential, wherein determining if the quantitative criteria has been met comprises determining if the number of share values received from the plurality of communications devices have been received in a specified time frame;
- and
- authenticating the user if the received share values meet the quantitative criteria.
A method comprising:
- computing a plurality of share values based on a user credential, the plurality of share values being such that any subset thereof meeting a quantitative criteria can be used to authenticate the user, wherein meeting the quantitative criteria comprises determining if the number of share values received from a plurality of communications devices have been received in a specified time frame;
- and
- distributing at least one share value to each of the plurality of communications devices.
A system comprising:
- a combiner proxy arranged to:
- receive a user authentication request;
- receive a share value from a communications device, the communications device storing at least one share value of a set of share values distributed among a plurality of communications devices, the share values having been computed on the basis of a user credential;
- determine if the share value that has been received meets a quantitative criteria, wherein determining if the quantitative criteria has been met comprises determining if the number of share values received from the plurality of communications devices have been received in a specified time frame;
- and
- authenticate the user if the received shared share values meet the quantitative criteria.
A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to:
- receive a user authentication request;
- determine if a share value that has been received from a plurality of communications devices meets a quantitative criteria, each of the communications devices storing at least one share value of a set of share values distributed among the plurality of communications devices, the share values having being computed on the basis of a user credential, wherein determining if the quantitative criteria has been met comprises determining if the number of share values received from the plurality of communications devices have been received in a specified time frame;
- and
- authenticate the user if the received share value meets the quantitative criteria.
Dependencies are inferred from the claim text.