Time-based one time password (TOTP) for network authentication
AssigneeNetIQ Corporation
InventorsLloyd Leon Burch, Duane Fredrick Buss, Larry Hal Henderson
Life of this patent
Estimating the term…
Abstract
A Time-based One-Time Password (TOTP) validator is interposed between a principal and a network service. The validator interacts with a mobile application (app) on the mobile device associated with the principal to dynamically supply a validator secret. The secret and, perhaps, other information are processed by the app to generate a TOTP when the principal attempts to access a protected resource of the network service. The validator independently generates the TOTP and compares the app generated TOTP, and on a successful match, a principal's access device is redirected for access to the protected resource.
Claims20
A system, comprising:
- a processor;
- a non-transitory computer-readable storage medium comprising executable instructions;
- the executable instructions when executed by the processor from the non-transitory computer-readable storage medium cause the processor to perform operations comprising:
- sending a Time-based One-Time Only Password (TOTP) token to a server;
- obtaining a TOTP secret back from the server based on the sending;
- detecting a principal engaged in a first factor authentication process for accessing a network service;
- obtaining a unique identifier for the principal provided by the network service based on the first factor authentication process;
- generating a TOTP using the TOTP secret and the unique identifier;
- and
- providing the TOTP to the principal for use during a second factor authentication process with the network service for the principal to access the network service.
A method, comprising:
- sending a Time-based One-Time Only Password (TOTP) token to a server;
- obtaining a TOTP secret back from the server based on the sending;
- detecting a principal engaged in a first factor authentication process for accessing a network service;
- obtaining a unique identifier for the principal provided by the network service based on the first factor authentication process;
- generating a TOTP using the TOTP secret and the unique identifier;
- and
- providing the TOTP to the principal for use during a second factor authentication process with the network service for the principal to access the network service.
A non-transitory computer-readable storage medium comprising executable instructions that when executed by a processor of a device cause the processor to perform operations comprising:
- sending a Time-based One-Time Only Password (TOTP) token to a server;
- obtaining a TOTP secret back from the server based on the sending;
- detecting a principal engaged in a first factor authentication process for accessing a network service;
- obtaining a unique identifier for the principal provided by the network service based on the first factor authentication process;
- generating a TOTP using the TOTP secret and the unique identifier;
- and
- providing the TOTP to the principal for use during a second factor authentication process with the network service for the principal to access the network service.
Dependencies are inferred from the claim text.