Transformed one time password (OTP) for authentication
AssigneeDell Products L.P.
InventorsViral Kirtikumar Mehta, Abhidnya Sushant Joshi, Sampada Patil
Life of this patent
Estimating the term…
Abstract
A password-protected device may support transformed passwords. In one example, a one-time password (OTP) may have a time-limited validity. The transform may be known to a user, and the transform may include manipulating characters in the OTP, such as by transposing characters, incrementing characters, or the like. The user may enter a transformed password to the system, and the system may reverse the transform and then compare the OTP to a reference OTP. The transform may provide an extra level of security over and above that provided by passwords themselves.
Claims20
A method comprising:
- providing a user interface (UI), the UI including a first prompt for a user to select from a plurality of transforms;
- receiving an indication of a first transform, of the plurality of transforms, from the user;
- presenting the user with a first password, via the UI;
- receiving a transformed first password from the user, via the UI;
- confirming the first transform in response to the user entering the transformed first password in accordance with the first transform;
- providing a second prompt for a user to enter a one-time password (OTP);
- receiving the OTP via a user input to the UI, wherein the OTP comprises a quantity of alphanumeric characters;
- performing the first transform on the OTP, thereby generating a transformed OTP;
- comparing the transformed OTP to a reference OTP;
- and
- either verifying the user or not verifying the user based on results of the comparing.
An Information Handling System (IHS), comprising:
- a processor;
- and
- a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the processor to:
- provide a user interface (UI), the UI including a first prompt for a user to select from a plurality of transforms;
- receive an indication of a first transform, of the plurality of transforms, from the user;
- present the user with a first password, via the UI;
- receive a transformed first password from the user, via the UI;
- confirm the first transform in response to the user entering the transformed first password in accordance with the first transform;
- provide a second prompt for a user to enter a one-time password (OTP);
- receive the OTP via a user input to the UI, wherein the OTP comprises a quantity of alphanumeric characters;
- perform a first transform on a reference OTP, thereby generating a transformed reference OTP;
- compare the transformed reference OTP to the OTP;
- and
- either verify the user or not verify the user based on results of the comparing.
A computer-readable, non-transitory memory device having program instructions stored thereon that, upon execution by a processor of an Information Handling System (IHS), cause the processor to:
- prompt a user to indicate a first transform, selected from a plurality of transforms, for use with account verification;
- present the user with a first password, via the UI;
- receive a transformed first password from the user, via the UI;
- confirming the first transform in response to the user entering the transformed first password in accordance with the first transform;
- store, in memory, an indication of the first transform;
- prompt the user to enter a second password;
- receive the second password;
- access, from the memory, the indication of the first transform;
- determine that the user has entered the second password according to the first transform;
- and
- permit the user to access the IHS.
Dependencies are inferred from the claim text.