Two factor authentication scheme
AssigneeCompuware Corporation
InventorDavid C. Miller
Life of this patent
Estimating the term…
Abstract
An improved method is provided for generating an authentication factor for authenticating a user. The method includes: assigning a unique identifier to a user of the computing resource; determining a value for a challenge to the user, where the value is determined by a random determination method; concatenating the identifier with the value to form an input string; encrypting the input string using a one-way hash function to yield an output string of characters; and selecting a subset of characters from the output string to serve as the authentication factor for the user. This improved method may be used to generate grids used in a grid authentication scheme.
Claims23
A method for generating an authentication factor for authenticating access to a computing resource;
- comprising:
- assigning a unique identifier to a user of the computing resource;
- determining a value for a challenge to the user, where the value is determined by a random determination method;
- concatenating the identifier with the value to form an input string;
- encrypting the input string using a one-way hash function to yield an output string of characters;
- selecting a subset of characters from the output string to serve as the authentication factor for the user;
- and
- granting the user access to the computing resource upon receipt of the authentication factor from user.
A method for authenticating a user to access a computing resource, comprising:
- generating a grid having spatial positions and values assigned to each spatial position, where values in the grid are derived in part from an identifier for its spatial position in grid;
- distributing the grid from an authenticator to the user;
- prompting the user for a value at a particular spatial position of the grid;
- receiving by the authenticator an input from the user in response to the prompt;
- authenticating the user when the input matches the value at the particular spatial position of the grid.
A method for authenticating a user to access a computing resource, comprising:
- distributing a software application from an authenticator to a computing device distinct from the authenticator and associated with the user, wherein the software application is configured with a unique identifier assigned to the user;
- determining by the authenticator a value for generating an authentication factor using a random determination method;
- prompting the user to input the value into the software application;
- generating an authentication factor for the user based in part on the value input into the software application by the user;
- and
- authenticating the user upon receipt of the authentication factor by the authenticator.
Dependencies are inferred from the claim text.