Generating and validating activation codes without data persistence
AssigneeOversec, UAB
InventorKazimieras Celiesius
Life of this patent
Estimating the term…
Abstract
The current embodiments offer a method to generate, send, and authenticate users through validations codes without the need for data retention. Codes are generated each time they are sent and received based on original and identifiable inputs. They are then compared to authenticate a user. Eliminating the need for data retention or persistence removes the risks associated with keeping data on the service provider's storage as can be maliciously accessed.
Claims17
A method for authenticating a user device at a service provider server, the method comprising:
- receiving, at the service provider server, from the user device, an identifier and a first timestamp, wherein the user device is remote to the service provider server;
- validating, at the service provider server, the first timestamp;
- generating, at the service provider server, a first validation code;
- sending, from the service provider server, the first validation code to the user device;
- receiving, at the service provider server from the user device, the first validation code and the first timestamp to the user device;
- validating, at the service provider server, the first timestamp;
- generating, at the service provider server, the second validation code by same procedure as used to generate the first validation code;
- comparing, at the service provider server, the first validation code and the second validation code;
- and
- authenticating, at the service provider server, the user device, if the first validation code and the second validation code are a match within a predefined time threshold,
- wherein the user device comprises at least two distinct devices, at least one of which authenticates with the service provider server and the other is used to open an email message.
An apparatus for authenticating a user device, at a service provider server, the apparatus comprising the service provider server, the service provider server comprising:
- a least one processor;
- and
- a memory communicably coupled to the at least one processor, the memory comprising computer-executable instructions, which when executed by the at least one processor perform a method comprising:
- receiving, at the service provider server, from the user device, an identifier and a first timestamp, wherein the user device is remote to the service provider server,
- validating, at the service provider server, the first timestamp,
- generating, at the service provider server, a first validation code,
- sending, from the service provider server, the first validation code to the user device,
- receiving, at the service provider server from the user device, the first validation code and the first timestamp to the user device,
- validating, at the service provider server, the first timestamp,
- generating, at the service provider server, the second validation code by same procedure as used to generate the first validation code,
- comparing, at the service provider server, the first validation code and the second validation code, and
- authenticating, at the service provider server, the user device, if the first validation code and the second validation code are a match within a predefined time threshold,
- wherein the user device comprises at least two distinct devices, at least one of which authenticates with the service provider server and the other is used to open an email message.
An non-transitory computer readable storage medium comprising computer-executable instructions, which when executed by at least one processor, are configured to perform a method comprising:
- receiving, at the service provider server, from the user device, an identifier and a first timestamp, wherein the user device is remote to the service provider server;
- validating, at the service provider server, the first timestamp;
- generating, at the service provider server, a first validation code;
- sending, from the service provider server, the first validation code to the user device;
- receiving, at the service provider server from the user device, the first validation code and the first timestamp to the user device;
- validating, at the service provider server, the first timestamp;
- generating, at the service provider server, the second validation code by same procedure as used to generate the first validation code,
- comparing, at the service provider server, the first validation code and the second validation code, and
- authenticating, at the service provider server, the user device, if the first validation code and the second validation code are a match within a predefined time threshold,
- wherein the user device comprises at least two distinct devices, at least one of which authenticates with the service provider server and the other is used to open an email message.
Dependencies are inferred from the claim text.