Mechanism for multi-factor authentication based on data
AssigneeEMC IP Holding Company LLC
InventorsYossef Saad, Itay Glick
Life of this patent
Estimating the term…
Abstract
A request is received from a client seeking to access files stored at a backup server. A first tree is received for the request. The first tree represents hashes of files stored at the client. A second tree is generated representing hashes of the files stored at the backup server. The first and second trees are compared to assess a degree of similarity between the files stored at the client and the files stored at the backup server. The user is denied access to the files stored at the backup server when the degree of similarity is below a threshold.
Claims18
A method of authenticating a user at a client to a backup server comprising:
- receiving, from the client, a request to access one or more files of a set of files stored at the backup server;
- receiving, for the request, a first tree representing hashes of a set of files stored at the client;
- generating a second tree representing hashes of the set of files stored at the backup server;
- comparing the first tree against the second tree to assess a degree of similarity between the set of files stored at the client and the set of files stored at the backup server;
- and
- denying the user access to the set of files stored at the backup server when the degree of similarity is below a threshold.
A system for authenticating a user at a client to a backup server comprising:
- a processor;
- and memory configured to store one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of:
- receiving, from the client, a request to access one or more files of a set of files stored at the backup server;
- receiving, for the request, a first tree representing hashes of a set of files stored at the client;
- generating a second tree representing hashes of the set of files stored at the backup server;
- comparing the first tree against the second tree to assess a degree of similarity between the set of files stored at the client and the set of files stored at the backup server;
- and
- denying the user access to the set of files stored at the backup server when the degree of similarity is below a threshold.
A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, the computer-readable program code adapted to be executed by one or more processors to implement a method of authenticating a user at a client to a backup server, the method comprising:
- receiving, from the client, a request to access one or more files of a set of files stored at the backup server;
- receiving, for the request, a first tree representing hashes of a set of files stored at the client;
- generating a second tree representing hashes of the set of files stored at the backup server;
- comparing the first tree against the second tree to assess a degree of similarity between the set of files stored at the client and the set of files stored at the backup server;
- and
- denying the user access to the set of files stored at the backup server when the degree of similarity is below a threshold.
Dependencies are inferred from the claim text.