# US 12,225,134 B2 · Systems and methods for dual hash rolling patch secure authentication > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,134 B2 - Document ID: US12225134B2 - Status: Granted - Kind: B2 - Application number: 18/047,363 - Filed: 2022-10-18 - Published: 2024-04-18 - Granted: 2025-02-11 - Earliest claimed: 2022-10-18 - Assignees: Dell Products L.P. - Applicants: Dell Products, L.P. - Inventors: Christopher Abella Poblete - Web page: https://patentgrep.com/patent/US12225134B2 ## CPC - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a password comprising a first plurality of characters, concatenate a second plurality of characters to the hashed password to form a patched password, encrypt the patched password, and send the hashed patched password to a server IHS for authentication. The second characters are configured to continually change value over time. ## Claims ### Claim 1 A client Information Handling System (IHS) comprising: at least one processor; and a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the client IHS to: receive a password comprising a first plurality of characters; generate a hashed password from the password; concatenate a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time; encrypt the patched password; and send the patched password to a server IHS for authentication; wherein the server IHS comprises: at least one other processor, and another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the server IHS to: obtain a stored version of the first plurality of characters from a data store configured in the server IHS; concatenate a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters; encrypt the another patched password; and compare the patched password against the another patched password to determine whether to authenticate the client IHS. ### Claim 2 (depends on 1) The client IHS of claim 1, wherein the instructions, upon execution, cause the IHS to encrypt the password prior to concatenating the second plurality of characters to the password. ### Claim 3 (depends on 1) The client IHS of claim 1, wherein the other instructions, upon execution, cause the server IHS to: when the hashed patched password and the other hashed patched password do not match, reject authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS. ### Claim 4 (depends on 1) The client IHS of claim 1, wherein the other instructions, upon execution, cause the server IHS to: when the hashed patched password against the other hashed patched password match, accept authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS. ### Claim 5 (depends on 1) The client IHS of claim 1, wherein the instructions, upon execution, cause the client IHS to encrypt the patched password by generating a hash of the password using a cryptographic hash function, wherein the cryptographic hash function comprises a one-way function. ### Claim 6 (depends on 1) The client IHS of claim 1, wherein the second characters comprises at least one of letters, numerals, and symbols. ### Claim 7 (depends on 1) The client IHS of claim 1, wherein the second characters comprise a timestamp generated by a real-time clock of the client IHS. ### Claim 8 (depends on 1) The client IHS of claim 1, wherein the second characters comprise a token generated by a remotely configured certificate authority (CA). ### Claim 9 A method comprising: receiving, by a client Information Handling System (IHS), a password comprising a first plurality of characters; generating a hashed password from the password; concatenating, by the client IHS, a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time; encrypting, by the client IHS, the patched password; sending, by the client IHS, the patched password to a server Information Handling System (IHS) for authentication; obtaining, by a server IHS, a stored version of the first plurality of characters from a data store configured in the server IHS; concatenating, by the server IHS, a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters; encrypting, by the server IHS, the another patched password; and comparing, by the server IHS, the patched password against the another patched password to determine whether to authenticate the client IHS. ### Claim 10 (depends on 9) The method of claim 9, further comprising encrypting the password prior to concatenating the second plurality of characters to the password. ### Claim 11 (depends on 9) The method of claim 9, further comprising, when the hashed patched password and the other hashed patched password do not match, rejecting authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS. ### Claim 12 (depends on 9) The method of claim 9, further comprising, when the hashed patched password against the other hashed patched password match, accepting authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS. ### Claim 13 (depends on 9) The method of claim 9, further comprising encrypting the patched password by generating a hash of the password using a cryptographic hash function, wherein the cryptographic hash function comprises a one-way function. ### Claim 14 A server Information Handling System (IHS) comprising: at least one processor; and a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the server IHS to: obtain a stored version of a first plurality of characters from a data store configured in the server IHS, the first characters comprising a password; generate a hashed password from the password; concatenate a stored version of a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time; encrypt the patched password; and compare the patched password against another patched password obtained from a client IHS to determine whether to authenticate the client IHS; wherein the client IHS comprises: at least one other processor; and another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the client HIS to: receive the first plurality of characters; concatenate a third plurality of characters to the first plurality of characters to form another patched password, wherein the third characters are similar to the second characters; encrypt the another patched password; and send the another patched password to a server IHS for authentication. ### Claim 15 (depends on 14) The server IHS of claim 14, wherein the instructions, upon execution, cause the IHS to encrypt the password prior to concatenating the second plurality of characters to the password. ### Claim 16 (depends on 14) The server IHS of claim 14, wherein the instructions, upon execution, cause the server IHS to: when the hashed patched password and the other hashed patched password do not match, reject authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS. ### Claim 17 (depends on 14) The server IHS of claim 14, wherein the other instructions, upon execution, cause the server IHS to: when the hashed patched password against the other hashed patched password match, accept authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS.