Time-based one time password (totp) for network authentication
AssigneeNetIQ Corporation
InventorsLloyd Leon Burch, Duane Fredrick Buss, Larry Hal Henderson
Life of this patent
Estimating the term…
Abstract
A Time-based One-Time Password (TOTP) validator is interposed between a principal and a network service. The validator interacts with a mobile application (app) on the mobile device associated with the principal to dynamically supply a validator secret. The secret and, perhaps, other information are processed by the app to generate a TOTP when the principal attempts to access a protected resource of the network service. The validator independently generates the TOTP and compares the app generated TOTP, and on a successful match, a principal's access device is redirected for access to the protected resource.
Claims21
(canceled)
A method, comprising:
- providing, by a mobile device, an invitation token to a Time-based One-Time Only Password (TOTP) manager;
- obtaining, by the mobile device, a TOTP secret generated but not stored by the TOTP manager;
- acquiring, by the mobile device, a request to generate a TOTP for a principal;
- and
- generating, by the mobile device, the TOTP by hashing the TOTP secret and a current Time-Of-Day (TOD) for accessing a protected resource of a network service.
A method, comprising:
- receiving, by a mobile device, an invitation token for authenticated access to a Time-based One-Time Password (TOTP) manager over a network;
- initiating, on the mobile device, a mobile application in response to receipt of the invitation token;
- requesting, by the mobile application, access to a protected network service by providing the TOTP manager the invitation token;
- receiving, by the mobile application, a TOTP secret from the TOTP manager for authenticated access to the protected network resource;
- and
- producing, by the mobile application, a TOTP from the TOTP secret for the authenticated access to the protected network resource.
A system, comprising:
- a mobile device having one or more processors;
- a mobile application executing on the one or more processors;
- wherein the mobile application is configured to:
- i) receive an invitation token generated by a Time-based One-Time Password (TOTP) manager, ii) request a TOTP secret from the TOTP manager in response to providing the TOTP manager with the invitation token, iii) derive a TOTP from the TOTP secret, and iv) provide the TOTP to a protected network resource for authenticated access to the protected network resource.
Dependencies are inferred from the claim text.