Systems and methods for dual hash rolling patch secure authentication
AssigneeDell Products L.P.
InventorChristopher Abella Poblete
Life of this patent
Estimating the term…
Abstract
Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a password comprising a first plurality of characters, concatenate a second plurality of characters to the hashed password to form a patched password, encrypt the patched password, and send the hashed patched password to a server IHS for authentication. The second characters are configured to continually change value over time.
Claims17
A client Information Handling System (IHS) comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the client IHS to:
- receive a password comprising a first plurality of characters;
- generate a hashed password from the password;
- concatenate a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
- encrypt the patched password;
- and
- send the patched password to a server IHS for authentication;
- wherein the server IHS comprises:
- at least one other processor, and
- another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the server IHS to:
- obtain a stored version of the first plurality of characters from a data store configured in the server IHS;
- concatenate a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters;
- encrypt the another patched password;
- and
- compare the patched password against the another patched password to determine whether to authenticate the client IHS.
A method comprising:
- receiving, by a client Information Handling System (IHS), a password comprising a first plurality of characters;
- generating a hashed password from the password;
- concatenating, by the client IHS, a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
- encrypting, by the client IHS, the patched password;
- sending, by the client IHS, the patched password to a server Information Handling System (IHS) for authentication;
- obtaining, by a server IHS, a stored version of the first plurality of characters from a data store configured in the server IHS;
- concatenating, by the server IHS, a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters;
- encrypting, by the server IHS, the another patched password;
- and
- comparing, by the server IHS, the patched password against the another patched password to determine whether to authenticate the client IHS.
A server Information Handling System (IHS) comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the server IHS to:
- obtain a stored version of a first plurality of characters from a data store configured in the server IHS, the first characters comprising a password;
- generate a hashed password from the password;
- concatenate a stored version of a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
- encrypt the patched password;
- and
- compare the patched password against another patched password obtained from a client IHS to determine whether to authenticate the client IHS;
- wherein the client IHS comprises:
- at least one other processor;
- and
- another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the client HIS to:
- receive the first plurality of characters;
- concatenate a third plurality of characters to the first plurality of characters to form another patched password, wherein the third characters are similar to the second characters;
- encrypt the another patched password;
- and
- send the another patched password to a server IHS for authentication.
Dependencies are inferred from the claim text.