Electronic interaction authentication and verification, and related systems, devices, and methods
AssigneeUledger, Inc.
InventorsJoshua R. McIver, Taulant Ramabaja
Life of this patent
Estimating the term…
Abstract
Systems, devices, and methods are disclosed for exchanging electronic information over a communication network and, more specifically, to authenticating and verifying data integrity between two or more interacting users exchanging information. A client computing device generates a split secret that is transmitted to a server via two distinct communication channels. The split secret is generated based on a public key of a public-private key pair generated by the client computing device based on a unique identifier. Validity of the public key can authenticate source identity.
Claims20
A method for authenticating a communication between two parties, comprising:
- generating, by a first client computing device, a cryptographic key based on a unique identifier corresponding to the first client computing device, the cryptographic key comprising a public key;
- transmitting a first portion of the public key to an authentication server via a first communication channel;
- transmitting a second portion of the public key to the authentication server via a second communication channel;
- receiving, from the authentication server, an identity certificate comprising a private key of the authentication server and indicating that the public key is registered in a content addressable storage system;
- and
- transmitting, to the authentication server, an authentication request corresponding to a communication message generated by the first client computing device, wherein the authentication request comprises a cryptographic checksum and wherein the cryptographic checksum is based at least on the communication message generated by the first client computing device and the identity certificate.
A system for authenticating a communication between two parties, the system comprising:
- one or more processors and memory to:
- generate a cryptographic key based on a unique identifier corresponding to a first client computing device, the cryptographic key comprising a public key;
- transmit a first portion of the public key to an authentication server via a first communication channel;
- transmit a second portion of the public key to the authentication server via a second communication channel;
- receive, from the authentication server, an identity certificate comprising a private key of the authentication server and indicating that the public key is registered in a content addressable storage system;
- and
- transmit, to the authentication server, an authentication request corresponding to a communication message generated by the first client computing device, the authentication request comprising a cryptographic checksum based at least on the communication message generated by the first client computing device and the identity certificate.
A method for authenticating a communication between two parties, comprising:
- receiving, by an authentication server, a first portion of a public key via a first communication channel, the public key corresponding to a cryptographic key generated by a first client computing device based on a unique identifier of the first client computing device;
- receiving, by the authentication server, a second portion of the public key via a second communication channel;
- transmitting, by the authentication server, an identity certificate comprising a private key of the authentication server and indicating that the public key is registered in a content addressable storage system;
- and
- receiving, by the authentication server, an authentication request corresponding to a communication message generated by the first client computing device, the authentication request comprising a cryptographic checksum based at least on the communication message generated by the first client computing device and the identity certificate.
Dependencies are inferred from the claim text.