Blockchain based identity and access management
OwnerKeir Finlow-Batesinventor
Life of this patent
Estimating the term…
Abstract
Identity and access management in computer systems without the need for a central authority is provided. A user may create an identity on a blockchain, and generate a one-time pad of access passwords derived from repeated hashing of a master password and cryptographic salt. The user may publish a last access password from the one-time pad on the blockchain. The user may then provide proof of identify in response to an access challenge by revealing a prior access password from which the last access password is derived, and may receive a session token in response. The publishing of access passwords and receiving of session tokens may be associated with a transfer of tokens or digital credits of commercial value on the blockchain.
Claims24
A method for providing identity and access management, comprising:
- generating a one-time password pad derived from a master password and a salt, said one-time password pad comprising a plurality of passwords;
- publishing a last password from the one-time password pad and a user identifier on a blockchain;
- on receiving an access challenge, presenting a prior password from the one-time password pad;
- and
- publishing a message comprising the prior password on the blockchain.
A first apparatus and a second apparatus providing identity and access management, wherein the first apparatus comprises a first processor configured to issue an access challenge to the second apparatus, and the second apparatus comprises a second processor configured to:
- generate a one-time password pad derived from a master password and a salt, said one-time password pad comprising a plurality of passwords;
- publish a last password from the one-time password pad and a user identifier on a blockchain;
- on receiving the access challenge, present a prior password from the one-time password pad to the first apparatus;
- and
- publish a message comprising the prior password on the blockchain.
A first non-transitory computer readable medium embodying first instructions and a second non-transitory computer readable medium embodying second instructions, for providing identity and access management, the first instructions when executed causing a first processor to issue an access challenge to a second processor, and the second instructions when executed causing a second processor to:
- generate a one-time password pad derived from a master password and a salt, said one-time password pad comprising a plurality of passwords;
- publish a last password from the one-time password pad and a user identifier on a blockchain;
- on receiving the access challenge, present a prior password from the one-time password pad;
- and
- publish a message comprising the prior password on the blockchain.
Dependencies are inferred from the claim text.