Token based one-time password security
AssigneeAmazon Technologies, Inc.
InventorsGregory Branchek Roth, Graeme David Baer, Brian Irl Pratt
Life of this patent
Estimating the term…
Abstract
A one-time password (OTP) based security scheme is described, where a provider pre-generates a number of verification codes (e.g., OTP codes) which will be valid for a predetermined interval. The provider then encodes the verification codes (e.g., by hashing each code with a time value), and stores the verification codes into a data structure. The data structure can be provided to a verification system that can use the set of pre-generated OTP codes to authenticate requests received from users having personal security tokens.
Claims20
A computer implemented method, comprising:
- obtaining a set of pre-generated one-time password (OTP) codes to form a set of OTP codes;
- encoding each OTP code of the set of pre-generated OTP codes to generate an encoded set of pre-generated OTP codes for a first predetermined interval;
- storing the encoded set of pre-generated OTP codes into a data structure;
- providing the data structure containing the encoded set of pre-generated OTP codes to a verification system, wherein the verification system is configured to:
- receive at least one access request containing a purported OTP code;
- and
- attempt to authenticate the access request based at least in part on matching the purported OTP code to an OTP code of the encoded set of pre-generated OTP codes;
- generating a renewal set of OTP codes for a second predetermined interval prior to expiration of the first predetermined interval;
- and
- providing the renewal set of OTP codes to the verification system.
A computing system, comprising:
- at least one processor;
- and
- memory including instructions that, when executed by the at least one processor, cause the computing system to:
- obtain a set of pre-generated one-time password (OTP) codes to form a set of OTP codes;
- encode each OTP code of the set of pre-generated OTP codes to generate an encoded set of pre-generated OTP codes for a first predetermined interval;
- store the encoded set of pre-generated OTP codes into a data structure;
- provide the data structure containing the encoded set of pre-generated OTP codes to a verification system;
- generate a renewal set of OTP codes for a second predetermined interval prior to expiration of the first predetermined interval;
- and
- provide the renewal set of OTP codes to the verification system.
A non-transitory computer readable storage medium storing one or more sequences of instructions executable by one or more processors to perform a set of operations comprising:
- obtaining a set of pre-generated one-time password (OTP) codes to form a set of OTP codes;
- encoding each OTP code of the set of pre-generated OTP codes to generate an encoded set of pre-generated OTP codes for a first predetermined interval;
- storing the encoded set of pre-generated OTP codes into a data structure;
- providing the data structure containing the encoded set of pre-generated OTP codes to a verification system;
- generating a renewal set of OTP codes for a second predetermined interval prior to expiration of the first predetermined interval, the first predetermined interval and the second predetermined interval not being active at the same time;
- and
- providing the renewal set of OTP codes to the verification system.
The non-transitory computer readable medium of claim 18, wherein the first predetermined interval includes at least one of:
- a predefined period of time, or
- a predefined number of event-based counter values.
Dependencies are inferred from the claim text.