Lightweight extensible authentication protocol password preprocessing
OwnerGlen W. Zorn, David E. Halaszinventors
Life of this patent
Estimating the term…
Abstract
A wireless authentication protocol for handling alternative hash functions in a Lightweight Extensible Authentication Protocol (LEAP) environment. Authentication between a network and a client is managed according to LEAP authentication. With advance knowledge of the alternative encoding scheme in both the client and network, the alternatively encoded data can be synchronized. Implementation is by way of providing an alternative database on the network such that the alternative database can be accessed during the LEAP authentication process.
Claims23
A method for an authentication server to process a password in a Lightweight Extensible Authentication Protocol Environment, the steps comprising:
- receiving authentication request data from a client;
- accessing an alternative accounts database;
- retrieving an alternatively-hashed user Unicode password associated with a client username provided during login;
- performing an MD4 hash of the alternatively hashed user Unicode password, thereby creating an MD4 hashed password;
- and
- authenticating the client via the Lightweight Extensible Authentication Protocol using the MD4 hashed password;
- wherein the authentication request data comprises a password that is not an MD4 hashed password.
A method for an authentication server to process a password in a Lightweight Extensible Authentication Protocol Environment, the steps comprising:
- receiving authentication request data from a client;
- determining how the request data is encoded;
- accessing an alternative accounts database when the request data is not encoded by an MD4 hash;
- retrieving an alternatively-hashed user Unicode password associated with a client username provided during login when the request data is not encoded by an MD4 hash;
- performing an MD4 hash of the alternatively hashed user Unicode password, thereby creating an MD4 hashed password when the request data is not encoded by an MD4 hash;
- and
- authenticating the client via the Lightweight Extensible Authentication Protocol using the MD4 hashed password.
Computer readable instructions for an authentication server to process a password in a Lightweight Extensible Authentication Protocol Environment stored on a computer readable medium, comprising:
- instructions for receiving authentication request data from a client;
- instructions for accessing an alternative accounts database;
- instructions for retrieving an alternatively-hashed user Unicode password associated with a client username provided during login;
- instructions for performing an MD4 hash of the alternatively hashed user Unicode password, thereby creating an MD4 hashed password;
- and
- instructions for authenticating the client via the Lightweight Extensible Authentication Protocol using the MD4 hashed password;
- wherein the authentication request data comprises a password that is not an MD4 hashed password.
A computer-readable medium of instructions, comprising:
- means for receiving authentication request data from a client;
- means for accessing an alternative accounts database;
- means for retrieving an alternatively-hashed user Unicode password associated with a client username provided during login;
- means for performing an MD4 hash of the alternatively hashed user Unicode password, thereby creating an MD4 hashed password;
- and
- means for authenticating the client via the Lightweight Extensible Authentication Protocol using the MD4 hashed password;
- wherein the authentication request data comprises a password that is not an MD4 hashed password.
A method for a client using a non-MD4 encoding scheme to be authenticated on a network using an MD4 encoding scheme, the steps comprising:
- associating with an access point;
- responding to an access point identity request;
- encoding a client password;
- and
- performing an MD-4 hash of the encoded client password, thereby creating an MD-4 hashed password.
Computer readable instructions stored on a computer-readable medium thereon, comprising:
- instructions for a client to associate with an access point;
- instructions for responding to an access point identity request;
- instructions for encoding a client password;
- and
- instructions for performing an MD-4 hash of the encoded client password, thereby creating an MD-4 hashed password.
A computer-readable medium of instructions, comprising:
- means for associating with an access point;
- means for responding to an access point identity request;
- means for encoding a client password;
- and
- means for performing an MD-4 hash of the encoded client password, thereby creating an MD-4 hashed password;
- wherein the encoding means performs a non-MD4 hash of the password.
An authentication server, comprising:
- means for receiving an authentication request from a client;
- preprocessing means for preprocessing the authentication request, communicatively coupled to the authentication server;
- and
- an MD4 database;
- wherein the authentication request is verified via the MD4 database.
A network, comprising
- an access point;
- an authentication server;
- a database comprising passwords;
- a first communications network connecting the access point to the authentication server and the database;
- wherein the access point receives an authentication request comprising a password, the access point relaying the communication request to the authentication server;
- wherein the authentication server accesses the database, the database verifying the password, and
- wherein the password is not MD4 compliant
An 802.11 compatible client comprising
- means for generating a password;
- means for preprocessing the password;
- wherein the password is converted to an MD4 password.
Dependencies are inferred from the claim text.