Electronic authentication infrastructure
AssigneeCryptium Corporation
InventorJonathan Buhacoff
Life of this patent
Estimating the term…
Abstract
Briefly, example methods, apparatuses, and/or articles of manufacture are disclosed that may be implemented, in whole or in part, using one or more computing devices to facilitate and/or support one or more operations and/or techniques for electronic authentication infrastructure, such as implemented, at least in part, via one or more electronic communications.
Claims34
A method for mitigating an on-line phishing attack, the method comprising:
- electronically receiving a login request;
- and
- initiating an electronic authentication process based, at least in part, on said login request.
An apparatus comprising:
- a communication interface to communicate with an electronic communications network and one or more processors coupled to a memory and to the communication interface, the communication interface and the one or more processors to:
- electronically receive a login request;
- and
- initiate an electronic authentication process based, at least in part, on said login request.
A non-transitory storage medium having instructions executable by a processor to:
- electronically receive a login request;
- and
- initiate an electronic authentication process based, at least in part, on said login request.
An electronic authentication infrastructure, the electronic authentication infrastructure comprising:
- at least one client device communicatively coupled to at least one authenticator;
- at least one service communicatively coupled to the at least one client device, wherein the at least one service is accessed by the at least one client device,
- wherein the at least one service is communicatively coupled to the at least one authenticator,
- wherein the at least one client device is programmed with instructions to:
- generate a user credential to comprise at least one asymmetric key pair for authentication, wherein the at least one asymmetric key pair further comprises a user credential private key and a user credential public key;
- associate the user credential with the at least one service;
- wherein the service is programmed with instructions to:
- authenticate the user by issuing a challenge, wherein the challenge comprises a large random number and additional information provided by the service;
- and
- check that the challenge response is a digital signature of the challenge by the user credential private key that is verifiable with the user credential public key.
Dependencies are inferred from the claim text.