Back to results
US 11,444,938 B2Granted
Authentication based on one-time usernames
AssigneeMicro Focus LLC
InventorUmar Ashraf
Life of this patent
Estimating the term…
Abstract
An apparatus may include a processor that may be caused to receive an authentication request to authenticate a user. The authentication request may include a one-time username associated with an identity of the user and a secret credential of the user. The processor may further identify, in a user registry, a unique user identifier based on the one-time username, and authenticate the user based on the unique user identifier and the secret credential. The apparatus may update the user registry to prevent the one-time username from being used again to identify the user for authentication.
Claims20
An apparatus comprising:
- a database storing authentication information of a user, the authentication information including a unique user identifier of the user and a reference key, wherein the reference key is provided to the user and the unique user identifier is not provided to the user;
- a processor, and
- a non-transitory machine-readable medium storing instructions that when executed by the processor, cause the processor to:
- receive a first request for a one-time username from a user device, wherein the first request includes the reference key;
- identify, in the database, the unique user identifier that corresponds to the reference key included in the first request;
- in response to the unique user identifier being identified in the database, generate the one-time username to the user;
- receive a second request to authenticate the user, the second request comprising the one-time username and a secret credential of the user;
- identify, in a user registry, the unique user identifier based on the one-time username included in the second request;
- authenticate the user based on the unique user identifier identified in the user registry and the secret credential included in the second request;
- and
- update the user registry to prevent the one-time username from being used again to authenticate the user.
8 more elements
A non-transitory machine-readable medium storing instructions that when executed by a processor, cause the processor to:
- store, in a database, authentication information of a user, the authentication information including a unique user identifier of the user and a reference key, wherein the reference key is provided to the user and the unique user identifier is not provided to the user;
- receive a first request for a one-time username, the first request comprising the reference key associated with the user;
- identify, in the database, the unique user identifier of the user based on the reference key included in the first request;
- in response to the unique user identifier being identified in the database, generate the one-time username responsive to the first request;
- receive a second request to authenticate the user, the second request comprising the one-time username and a secret credential of the user;
- identify, in a user registry, the unique user identifier based on the one-time username included in the second request;
- and
- authenticate the user based on the unique user identifier identified in the user registry and the secret credential included in the second request.
5 more elements
A method, comprising:
- storing, in a database, authentication information of a user, the authentication information including a unique user identifier of the user and a reference key, wherein the reference key is provided to the user and the unique user identifier is not provided to the user;
- receiving, by a processor, a first request for a one-time username from a user device, the first request comprising the reference key associated with the user;
- identifying, by the processor, the unique user identifier in the database based on the reference key included in the first request;
- and
- in response to the unique user identifier being identified in the database, generating, by the processor, the one-time username to the user;
- receiving a second request to authenticate the user, the second request comprising the one-time username and a secret credential;
- identifying the unique user identifier in a user registry based on the one-time username included in the second request;
- and
- authenticate the user based on the unique user identifier identified in the user registry and the secret credential included in the second request.
6 more elements
Dependencies are inferred from the claim text.