Authenticated communication using a shared unpredictable secret
AssigneeSymantec Corporation
InventorWarwick Ford
Life of this patent
Estimating the term…
Abstract
Systems, methods and computer readable media for authenticating one or more client devices (1) to a server (5). A shared unpredictable secret (50) is generated. The shared unpredictable secret (50) is stored in the client device (1) and in the server device (5). The client device (1) proves possession of the correct shared unpredictable secret (50) to the server (5). The shared unpredictable secret (50) is replaced by a new shared unpredictable secret (54) each time the client device (1) logs in to the server device (5).
Claims18
A method for validating a client device by a server device, said method comprising the steps of:
- generating a shared unpredictable secret;
- storing the shared unpredictable secret in the client device and in the server device;
- requiring the client device to prove that it holds a correct secret as a precondition to the server device validating the client device;
- and
- replacing the shared unpredictable secret by a new shared unpredictable secret when the server device validates the client device, wherein:
- the server device sends update data to the client device;
- the client device applies the update data to the shared unpredictable secret to generate a new secret;
- and
- the client device replaces the shared unpredictable secret with the new secret.
A system for enabling a server device to validate a client device, said system comprising:
- at least one client device;
- a server device;
- a shared unpredictable secret;
- means for storing the shared unpredictable secret in the client device;
- means for storing the shared unpredictable secret in the server device;
- coupled to the client device and to the server device, means for determining whether the client device holds a correct secret;
- coupled to the determining means, means for allowing the server device to validate the client device when the client device proves that it holds a correct secret;
- and
- coupled to the client device and to the server device, means for replacing the original shared unpredictable secret with a new shared unpredictable secret when the server device validates the client device, said means for replacing further comprising:
- means for the server device to send update data to the client device;
- means for the client device to apply the update data to the shared unpredictable secret to generate a new secret;
- and
- means for the client device to replace the shared unpredictable secret with the new secret.
A computer readable medium containing computer program instructions for enabling a server device to validate a client device, said computer program instructions causing the execution of the following steps:
- generating a shared unpredictable secret;
- storing the shared unpredictable secret in the client device and in the server device;
- requiring the client device to prove that it holds a correct secret as a precondition to allowing the client device to be validated by the server device;
- and
- replacing the shared unpredictable secret by a new shared unpredictable secret when the client device is validated by the server device, wherein:
- the server device sends update data to the client device;
- the client device applies the update data to the shared unpredictable secret to generate a new secret;
- and
- unpredictable secret with the new secret.
Dependencies are inferred from the claim text.