Agile OTP generation
OwnerDaniel V Bailey, John G. Brainard +3inventors
InventorsDaniel V Bailey, John G. Brainard, William M. Duane, Michael J. O'Malley, Robert S. Phipott
Life of this patent
Estimating the term…
Abstract
A method, system, and apparatus for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a token generator comprising a token generator algorithm and a validator, the method comprising generating a OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques, receiving the OTP at a validator, determining, at the validator, the variance technique used by the token generator to generate the OTP, and determining whether to validate the OTP based on the OTP and variance technique.
Claims12
A method for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a validator and a token generator comprising a token generator algorithm, the method comprising:
- generating a client OTP at the token generator according to a variance technique;
- wherein the variance technique is selected from a set of variance techniques;
- receiving the client OTP at a validator, wherein the validator is different from the token generator;
- determining, at the validator, the variance technique used by the token generator to generate the client OTP;
- determining whether to validate the client OTP based on the client OTP and variance technique;
- validating the client OTP based on the determination;
- and
- where the variance technique is given by a function OTP=H(F(SKC, SKPC),InputSet), wherein H is a Hash and wherein the InputSet is a set comprising K and Time, wherein Time is the time for the OTP;
- wherein K is a key, SKC is a Symmetric Key certificate containing information about the key, F is a function or algorithm which switches among a plurality of OTP generation algorithms for each OTP generation, SKPC is a Symmetric Key Policy Certificate containing policy information about the key.
A system for agile generation of one time passcodes (OTPs) in a security environment, the system comprising:
- a token generator comprising a token generator algorithm;
- wherein the token generator algorithm generates a client OTP at the token generator according to a variance technique;
- wherein the variance technique is selected from a set of variance techniques;
- a validator comprising a processor configured to execute computer-executable program code stored in memory, wherein the computer-executable program code upon execution is configured to enable execution of:
- receiving the client OTP at a validator wherein the validator is different from the token generator;
- determining, at the validator, the variance technique used by the token generator to generate the OTP;
- and
- determining whether to validate the client OTP based on the client OTP and variance technique;
- validating the client OTP based on the determination;
- and
- where the variance technique is given by a function OTP=H(F(SKC, SKPC),InputSet), wherein H is a Hash and wherein the InputSet is a set comprising K and Time, wherein Time is the time for the OTP;
- wherein K is a key, SKC is a Symmetric Key certificate containing information about the key, F is a function or algorithm which switches among a plurality of OTP generation algorithms for each OTP generation, SKPC is a Symmetric Key Policy Certificate containing policy information about the key.
Dependencies are inferred from the claim text.