Interactions between a client device and an authentication server providing security and privacy to stored passphrases
OwnerMihail PLESA, Robert POENARU +2inventors
InventorsMihail PLESA, Robert POENARU, Simona DAVID, Sebastian IRIMIA
Life of this patent
Estimating the term…
Abstract
A method for enabling a client device to interact with an authentication server over a network. The method is performed by a singularization server and includes: receiving an encrypted passphrase and a user identifier from a stateless proxy; determining a singularization value for the user identifier; applying a hash function to a combination of the encrypted passphrase and the singularization value, the encryption function being associated with an encryption scheme homomorphic with respect to the hash function; and transmitting the result and the user identifier to the stateless proxy.
Claims14
A method for enabling a client device to interact with an authentication server over a network, the method being implemented by a stateless proxy on at least one device and comprising:
- receiving an authentication request, comprising a user identifier and an original passphrase,
- applying an encryption function to the original passphrase, and transmitting the encrypted passphrase and the user identifier to a distant singularization server;
- receiving from the singularization server the user identifier and a result of an application of a hash function to a combination of the encrypted passphrase and a singularization value, the encryption function being associated with an encryption scheme homomorphic with respect to the hash function;
- and
- applying a decryption function to the result to get a new passphrase, and transmitting the new passphrase with the user identifier to the authentication server.
A method for enabling a client device to interact with an authentication server over a network, the method being implemented by a singularization server and comprising:
- receiving an encrypted passphrase and a user identifier from a stateless proxy;
- determining a singularization value for the user identifier;
- and
- applying a hash function to a combination of the encrypted passphrase and the singularization value to generate a result, the encryption function being associated with an encryption scheme homomorphic with respect to the hash function, and transmitting the result and the user identifier to the stateless proxy.
A stateless proxy for enabling a client device to interact with an authentication server over a network, the stateless proxy comprising:
- at least one processor configured to implement at least:
- receiving an authentication request comprising a user identifier and an original passphrase,
- applying an encryption function to the original passphrase, and transmitting the encrypted passphrase and the user identifier to a distant singularization server;
- receiving from the singularization server the user identifier and a result of an application of a hash function to a combination of the encrypted passphrase and a singularization value, the encryption function being associated with an encryption scheme homomorphic with respect to the hash function;
- and
- applying a decryption function to the result to get a new passphrase, and transmitting the new passphrase with the user identifier to the authentication server.
A singularization server for enabling a client device to interact with an authentication server over a network, the singularization server comprising:
- at least one processor configured to implement at least:
- receiving an encrypted passphrase and a user identifier from a stateless proxy;
- determining a singularization value for the user identifier;
- and
- applying a hash function to a combination of the encrypted passphrase and the singularization value to generate a result, the encryption function being associated with an encryption scheme homomorphic with respect to the hash function, and transmitting the result and the user identifier to the stateless proxy.
Dependencies are inferred from the claim text.