Method for authenticating with a password comprising a salt
AssigneeOrange
InventorLoic Ferreira
Life of this patent
Estimating the term…
Abstract
A method for authenticating a user by a verifier device. The method includes: receiving a password entered by a user and a first piece of context information entered by the user; calculating a current fingerprint, by applying a one-way function to the password and to the first piece of context information; and verifying that the current calculated fingerprint is equal to a reference fingerprint of a secret, calculated during a preceding authentication of the user, the authentication being successful when the current fingerprint is equal to the reference fingerprint.
Claims10
A method for authentication of a user by a verifier, said method comprising:
- receiving a password input by the user and a first piece of context information input by the user, said piece of context information being changed on each authentication,
- computing a current fingerprint, by applying a one-way function to the password and to the first piece of context information, and
- verifying that the computed current fingerprint is equal to a reference fingerprint of a secret, which was calculated during a preceding authentication of the user, the authentication being successful when the current fingerprint is equal to the reference fingerprint.
A verifier device arranged to authenticate a user, said verifier device comprising:
- a processor;
- and
- a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the verifier device to perform acts comprising:
- receiving a password and a first piece of context information that are input by the user, said piece of context information being changed on each authentication,
- computing a current fingerprint, by applying a one-way function to the password and to the first piece of context information, and
- verifying that the computed current fingerprint is equal to a reference fingerprint of a secret, which was calculated during a preceding authentication of the user, the authentication being successful when the current fingerprint is equal to the reference fingerprint.
(canceled)
(canceled)
A user terminal, arranged to allow a user of the terminal to be authenticated by a verifier device, the user terminal comprising:
- a processor;
- and
- a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the user terminal to perform acts comprising:
- receiving a password and a first piece of context information input to the terminal by the user, said piece of context information being changed on each authentication by the verifier device;
- transmitting the password and the first piece of context information to the verifier device to compute a current fingerprint by applying a one-way function to the password and to the first piece of context information, and to authenticate the user by using the current fingerprint;
- receiving a second piece of context information input to the terminal by the user when the authentication of the user by the verifier device has succeeded;
- and
- transmitting said second piece of context information to the verifier device to be used to construct a new reference fingerprint, by applying the one-way function to the password and to the second piece of context information, said new reference fingerprint replacing the current fingerprint.
Dependencies are inferred from the claim text.