Identity authentication using credentials
AssigneeComcast Cable Communications, LLC
InventorsKris Bransom, Christopher Zarcone
Life of this patent
Estimating the term…
Abstract
A method and system may allow for authenticating a computing device. A computing device may send an authentication request over a network to an authentication computing device. The authentication request may include a user name and a password. The user name may include a credential and the password may be a digitally signed version of the user name. The authentication computing device may authenticate the requesting computing device by decrypting the password and comparing the received user name to the decrypted password.
Claims48
A method comprising:
- receiving, from a computing device, an authentication request comprising first authentication information and second authentication information, wherein:
- the first authentication information is associated with a credential issued by a trusted authority;
- and
- the second authentication information is encrypted based on the credential;
- decrypting the second authentication information, based on a public key associated with the first authentication information, to create a decrypted second authentication information;
- and
- determining, based on the decrypted second authentication information and a validity of the credential, whether to grant the authentication request.
A method comprising:
- receiving, by a computing device and from a trusted authority, a credential issued to the computing device;
- generating, by the computing device, first authentication information that is associated with the credential;
- generating, by the computing device, second authentication information, wherein the second authentication information is encrypted based on the credential;
- sending, from the computing device and to an authentication device, an authentication request comprising the first authentication information and the second authentication information;
- and
- receiving, based on the authentication request and based on a validity of the credential, approval of the authentication request.
An apparatus comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- receive, from a computing device, an authentication request comprising first authentication information and second authentication information, wherein:
- the first authentication information is associated with a credential issued by a trusted authority;
- and
- the second authentication information is encrypted based on the credential;
- decrypt the second authentication information, based on a public key associated with the first authentication information, to create a decrypted second authentication information;
- and
- determine, based on the decrypted second authentication information and a validity of the credential, whether to grant the authentication request.
An apparatus comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
- receive, from a trusted authority, a credential issued to the apparatus;
- generate first authentication information that is associated with the credential;
- generate second authentication information, wherein the second authentication information is encrypted based on the credential;
- send, to an authentication device, an authentication request comprising the first authentication information and the second authentication information;
- and
- receive, based on the authentication request and based on a validity of the credential, approval of the authentication request.
A system comprising:
- a first computing device and a second computing device;
- wherein the first computing device comprises:
- one or more first processors;
- and
- memory storing first instructions that, when executed by the one or more first processors, cause the first computing device to:
- send an authentication request comprising first authentication information and second authentication information, wherein:
- the first authentication information is associated with a credential issued by a trusted authority;
- and
- the second authentication information is encrypted based on the credential;
- and
- wherein the second computing device comprises:
- one or more second processors;
- and
- memory storing second instructions that, when executed by the one or more second processors, cause the second computing device to:
- receive, from the first computing device, the authentication request;
- decrypt the second authentication information, based on a public key associated with the first authentication information, to create a decrypted second authentication information;
- and
- determine, based on the decrypted second authentication information and a validity of the credential, whether to grant the authentication request.
A system comprising:
- a first computing device and a second computing device;
- wherein the first computing device comprises:
- one or more first processors;
- and
- memory storing first instructions that, when executed by the one or more first processors, cause the first computing device to:
- receive, from a trusted authority, a credential issued to the first computing device;
- generate first authentication information that is associated with the credential;
- generate second authentication information, wherein the second authentication information is encrypted based on the credential;
- send, to the second computing device, an authentication request comprising the first authentication information and the second authentication information;
- and
- receive, based on the authentication request and based on a validity of the credential, approval of the authentication request;
- and
- wherein the second computing device comprises:
- one or more second processors;
- and
- memory storing second instructions that, when executed by the one or more second processors, cause the second computing device to:
- receive the authentication request.
One or more non-transitory computer readable media storing instructions that, when executed, cause:
- receiving an authentication request comprising first authentication information and second authentication information, wherein:
- the first authentication information is associated with a credential issued by a trusted authority;
- and
- the second authentication information is encrypted based on the credential;
- decrypting the second authentication information, based on a public key associated with the first authentication information, to create a decrypted second authentication information;
- and
- determining, based on the decrypted second authentication information and a validity of the credential, whether to grant the authentication request.
One or more non-transitory computer readable media storing instructions that, when executed, cause:
- receiving, from a trusted authority, a credential issued to a computing device;
- generating first authentication information that is associated with the credential;
- generating second authentication information, wherein the second authentication information is encrypted based on the credential;
- sending, to an authentication device, an authentication request comprising the first authentication information and the second authentication information;
- and
- receiving, based on the authentication request and based on a validity of the credential, approval of the authentication request.
Dependencies are inferred from the claim text.