Distributed / multi-level server authentication
OwnerVictor Salamon, Paul Berubeinventors
Life of this patent
Estimating the term…
Abstract
Methods, system, and non-transitory processor-readable storage medium for distributed and multi-level server authentication are provided herein. An example method includes receiving, by a plurality of second servers, a plurality of authentication secret slices, where a first server transmits each of the plurality of authentication secret slices to a respective second server of the plurality of second servers, receiving, by the first server, an authentication confirmation from each of the plurality of second servers and confirming, by the first server to a client, that an authentication request has succeeded.
Claims18
A method, comprising:
- receiving, by a plurality of second servers, a plurality of authentication secret slices, wherein a first server transmits each of the plurality of authentication secret slices to a respective second server of the plurality of second servers;
- receiving, by the first server, an authentication confirmation from each of the plurality of second servers;
- confirming, by the first server to a client, that an authentication request has succeeded;
- processing, by the client, a request input into a secret;
- splitting, by the client, the secret into a plurality of secret slices;
- transmitting the plurality of secret slices from the client to the first server in a random order;
- and
- maintaining, on the first server, a sequence number associated with each of the plurality of secret slices, and identification of a respective second server of the plurality of second servers to which each of the plurality of secret slices is transmitted.
A system comprising:
- at least one processing device comprising a processor coupled to a memory;
- the at least one processing device being configured:
- to receive, by a plurality of second servers, a plurality of authentication secret slices, wherein a first server transmits each of the plurality of authentication secret slices to a respective second server of the plurality of second servers;
- to receive, by the first server, an authentication confirmation from each of the plurality of second servers;
- to confirm, by the first server to a client, that an authentication request has succeeded;
- to process, by the client, the request input into a secret;
- to split, by the client, the secret into a plurality of secret slices;
- to transmit the plurality of secret slices from the client to the first server in a random order;
- and
- to maintain, on the first server, a sequence number associated with each of the plurality of secret slices, and identification of a respective second server of the plurality of second servers to which each of the plurality of secret slices is transmitted.
A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device:
- to receive, by a plurality of second servers, a plurality of authentication secret slices, wherein a first server transmits each of the plurality of authentication secret slices to a respective second server of the plurality of second servers;
- to receive, by the first server, an authentication confirmation from each of the plurality of second servers;
- to confirm, by the first server to a client, that an authentication request has succeeded;
- to receive, by the client, a registration request or an authentication request along with request input;
- to process, by the client, the request input into a secret;
- to split, by the client, the secret into a plurality of secret slices;
- to transmit the plurality of secret slices from the client to the first server in a random order and to maintain, on the first server, a sequence number associated with each of the plurality of secret slices, and identification of a respective second server of the plurality of second servers to which each of the plurality of secret slices is transmitted.
Dependencies are inferred from the claim text.