US 12,118,550 B1Granted

Computer implemented method for zero trust authentication and session management

AssigneeAuthln LLC

InventorsJames Michael Siers, Maxwell Dignan

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention comprises a computer-implemented method for zero-trust authentication and session management utilizing the Bitcoin Lightning Network. A user requests access to the resource of a service provider and the user provides authentication material to securely access the service provider. The service provider initiates a Hold Invoice via a cryptographic function to generate a pre-image hash instructing the user to authorize release a specified amount of Bitcoin. Bitcoin is then moved into the Hold Invoice where it remains during an authentication attempt. A successful attempt issues an access token to log into an authenticated session. The Hold Invoice remains in place until the session ends, then the Hold Invoice is canceled and Bitcoin is released to the user. An unsuccessful attempt or a violations of terms of use, reveals the pre-image, denies the user access, and Bitcoin is transferred to the service provider as a settled payment transaction.

Claims21

Dependent claims

A computer implemented method for zero-trust authentication and session management utilizing the Bitcoin Lightning Network layered atop the Bitcoin Proof-of-Work Network, the method comprising:

a user requests access to a resource from a service provider via an access management interface;
and
the service provider receives the user's request for access;
and
a cryptographic hash function is initiated to generate a pre-image hash for creation of a Hold Invoice, whereby the pre-image hash functions as a smart contract script that provides instructions to the user;
and
the user receives instructions to leverage Bitcoin to meet conditions of the Hold Invoice;
and
the user pre-authorizes movement of Bitcoin into the Hold Invoice to meet the conditions of the Hold Invoice;
and
the Hold Invoice holds the Bitcoin;
and
the user is prompted to initiate an authentication attempt by inputting authentication material;
and
when a successful authentication is achieved, the service provider issues an access token unique to the user via the access management interface, the user logs into the service provider resource, and the user begins a session;
and
upon manual prompt or automated procedure to end the session, the Hold Invoice is cancelled, and the Bitcoin is returned to the user;
or
when an unsuccessful authentication occurs, whereby the access management interface is not able to verify the authentication material and issue an access token, the pre-image hash of the Hold Invoice is revealed, transferring the Bitcoin to the service provider as a settled payment transaction, and at the same time the user is denied access to service provider resource;
and
the zero-trust authentication ends;
and
the user must restart the zero-trust authentication using new Bitcoin.

20 more elements

A computer implemented method for zero-trust authentication and session management utilizing the Bitcoin Lightning Network layered atop the Bitcoin Proof-of-Work Network, the method comprising:

a user requests access to a resource from a service provider via an access management interface;
and
the service provider receives the user's request for access;
and
a Hash Time Locked Contract (HTLC) function is initiated to generate a pre-image hash for creation of a HTLC Hold Invoice, whereby the pre-image hash functions as a smart contract script that provides instructions to the user;
and
the user receives instructions to leverage Bitcoin to meet conditions of the HTLC Hold Invoice;
and
the user pre-authorizes movement of Bitcoin into the HTLC Hold Invoice to meet the conditions of the HTLC Hold Invoice;
and
the HTLC Hold Invoice holds the Bitcoin;
and
the user is prompted to initiate an authentication attempt by inputting authentication material;
and
when a successful authentication is achieved, the service provider issues an access token unique to the user via the access management interface, the user logs into the service provider resource, and the user begins a session;
and
upon manual prompt or automated procedure to end the session, the Hold Invoice is cancelled, and the Bitcoin is returned to the user;
or
when an unsuccessful authentication occurs, whereby the access management interface is not able to verify the authentication material and issue an access token, the pre-image hash of the HTLC Hold Invoice is revealed, transferring the Bitcoin to the service provider as a settled payment transaction, and at the same time the user is denied access to service provider resource;
and
the zero-trust authentication ends;
and
the user must restart zero-trust authentication using new Bitcoin.

20 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/416,868Filed 18 Jan 2024 · continuation in part
Priority: 28 Oct 2023
Granted: 15 Oct 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G06Q 20/401
Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check…:…
H04L 9/3213
Involving a third party or a trusted authority: using tickets or tokens, e.g. Kerberos
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/33
User authentication: using certificates

Family

Application18/496,870Parent of this continuation-in-part · filed 28 Oct 2023
US 11,956,366 B1Parent of this continuation-in-part
US 12,118,550 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key