US 2026/0019285 A1 · EFFICIENT MUTUAL AUTHENTICATION OF SERVER AND CLIENT

Abstract

Password based authentication is one of the common forms of authentication used in practice. However, when a user/client device enrolls with a server using password information, the authentication process exposes hash of password information to the server which is prone to various types of passwords guessing attacks. Present disclosure provides a system and a method that authenticates a user without revealing his/her password information to a third-party identity provider. This is done by using bilinear parings to authenticate user without sending password information to the server and by way generating client shared secret, server secret, public key, private key and the like. This eliminates the need for storing any keys on multiple devices/third parties or storing password information on the server side.

Claims20

Dependent claims

A processor implemented method, comprising:

invoking, at a client device, a key-pair technique via one or more hardware processors, for selection of a private key for a user;
computing, by using the key-pair technique via the one or more hardware processors, a public key based on the selected private key;
selecting, at the client device, a username for the user;
and
obtaining, at the client device, an encrypted shared secret generated by a server based on at least one of the username and the computed public key, wherein the shared secret is unique and specific to the user, wherein the encrypted shared secret is indicative of a successful registration of the user at the server, and wherein the shared secret is computed based on a randomly selected server secret.

2 more elements

A client device, comprising:

a memory storing instructions;
one or more communication interfaces;
and
one or more hardware processors coupled to the memory via the one or more communication interfaces, wherein the one or more hardware processors are configured by the instructions to:
invoke a key-pair technique for selection of a private key for a user;
compute, by using the key-pair technique, a public key based on the selected private key;
select a username for the user;
and
obtain an encrypted shared secret generated by a server based on at least one of the username and the computed public key, wherein the shared secret is unique and specific to the user, wherein the encrypted shared secret is indicative of a successful registration of the user at the server, and wherein the shared secret is computed based on a randomly selected server secret.

6 more elements

One or more non-transitory machine-readable information storage mediums comprising one or more instructions which when executed by one or more hardware processors cause:

invoking, at a client device, a key-pair technique for selection of a private key for a user;
computing, by using the key-pair technique via the one or more hardware processors, a public key based on the selected private key;
selecting, at the client device, a username for the user;
and
obtaining, at the client device, an encrypted shared secret generated by a server based on at least one of the username and the computed public key, wherein the shared secret is unique and specific to the user, wherein the encrypted shared secret is indicative of a successful registration of the user at the server, and wherein the shared secret is computed based on a randomly selected server secret.

2 more elements

Dependencies are inferred from the claim text.

Efficient mutual authentication of server and client

Life of this patent

Efficient mutual authentication of server and client

Life of this patent

Abstract

Claims20