Authentication with massively pre-generated one-time passwords
AssigneeComputer Associates Think, Inc.
InventorGeoffrey Hird
Life of this patent
Estimating the term…
Abstract
Embodiments of the invention provide systems and methods for the storage of One-Time Passwords (OTPs) on a device (principal) that needs to authenticate from time to time. It utilizes recent availability of data storage capacity not previously exploited in this arena. Also disclosed is the means to initialize and modify the system (all principals) in a secure manner, and the means to store the OTP production means on a device in a secure manner, even if the device has no built-in protected storage.
Claims20
A system for utilizing pre-generated one-time passwords, the system comprising:
- a password server executing one or more applications which cause the password server to generate a list of One-Time Passwords (OTPs) comprising multiple OTPs and package the list of OTPs for delivery;
- and
- a client device, the client device comprising a memory, wherein the password server downloads the list of OTPs to the client device in response to a request, and wherein the client device saves the downloaded list of OTPs to the memory of the client device for use in accessing a resource requiring authentication.
A method of generating and providing One-Time Passwords (OTPs), the method comprising:
- enrolling a client device with a password server;
- generating by the password server a list of One-Time Passwords (OTPs), wherein the size of the list of OTPs depends on at least one of a size of an available memory of a client device and a speed of a network connection of the client device;
- saving the lists of OTPs by the password server;
- receiving at the password server a request for the list of OTPs from the client device;
- and
- providing the list of OTPs from the password server to the client device over the network connection.
A machine-readable memory having stored thereon a sequence of instructions which, when executed by a processor, cause the processor to generate and provide One-Time Passwords (OTPs) by:
- enrolling a client device;
- generating a list of One-Time Passwords (OTPs), wherein the size of the list of OTPs depends on at least one of a size of an available memory of a client device and a speed of a network connection of the client device;
- saving the lists of OTPs;
- receiving a request for the list of OTPs from the client device;
- and
- providing the list of OTPs to the client device over the network connection.
Dependencies are inferred from the claim text.