Performing authentication
AssigneeRavenWhite Security, Inc.
InventorBjorn Markus Jakobsson
Life of this patent
Estimating the term…
Abstract
Preference data is received. The received preference data is compared to stored preference data associated with a user with which the received preference data is associated. A determination is made whether to authorize an action based at least on the comparison. The preference data is received as a selection.
Claims14
A system that operatively utilizes a computer-readable tamper-evident log to manage an action to be performed by the system, the tamper-evident log accessible via a network interface that is communicatively coupled to a communications network, the system comprising:
- a processor configured to:
- before the action is allowed to be performed, update the tamper-evident log by appending information about the action to the tamper-evident log;
- obtain an attestation value based on which tampering of the tamper-evident log is detectable, the attestation value having been generated using a cryptographic digital signature function, the attestation value based at least in part on the information about the action;
- and
- after appending the information about the action to the tamper-evident log, cause the action to be performed;
- the network interface, the network interface communicatively coupled to the processor;
- and
- a memory coupled to the processor and configured to store instructions for the processor;
- wherein:
- the attestation value is based, at least in part, on a nonce, a time, and a date;
- and
- performance of the action is associated with a state change being made.
A method for operatively utilizing a computer-readable tamper-evident log to manage an action to be performed by at least one computer device, the tamper-evident log accessible via a network interface that is communicatively coupled to a communications network, the method comprising:
- before the action is allowed to be performed, updating the tamper-evident log by appending information about the action to the tamper-evident log;
- obtaining an attestation value based on which tampering of the tamper-evident log is detectable, the attestation value having been generated using a cryptographic digital signature function, the attestation value based at least in part on the information about the action;
- and
- after appending the information about the action to the tamper-evident log, causing the action to be performed;
- wherein:
- the attestation value is based, at least in part, on a nonce, a time, and a date;
- and
- performance of the action is associated with a state change being made.
Dependencies are inferred from the claim text.