US 8,621,580 B2 · Retrieving access information in a dispersed storage network

Abstract

A method begins by a processing module obtaining a set of recovered random numbers, decoding encrypted share slices to produce a set of encrypted shares, and obtaining a set of personalized authenticating values regarding user access to data. The method continues with the processing module generating a set of hidden passwords based on the set of personalized authenticating values, generating a set of blinded passwords based on the set of hidden passwords and a set of blinded random numbers, and generating a set of passkeys based on the set of blinded passwords and the set of recovered random numbers. The method continues with the processing module generating a set of decryption keys based on the set of blinded random numbers and the set of passkeys, decrypting the set of encrypted shares to produce a set of shares, and decoding the set of shares to reproduce the data.

Claims22

Dependent claims

A method comprises:

decoding at least a decode threshold number of stored random number slices to produce a set of recovered random numbers;
decoding at least a decode threshold number of encrypted share slices to produce a set of encrypted shares;
obtaining a set of personalized authenticating values regarding user access to data;
generating a set of hidden passwords based on the set of personalized authenticating values;
generating a set of blinded passwords based on the set of hidden passwords and a set of blinded random numbers;
generating a set of passkeys based on the set of blinded passwords and the set of recovered random numbers;
generating a set of decryption keys based on the set of blinded random numbers and the set of passkeys;
decrypting the set of encrypted shares utilizing the set of decryption keys to produce a set of shares;
and
decoding the set of shares to reproduce the data.

7 more elements

A computer comprises:

an interface;
a memory;
and
a processing module operable to:
decode at least a decode threshold number of stored random number slices to produce a set of recovered random numbers;
decode at least a decode threshold number of encrypted share slices to produce a set of encrypted shares;
obtain a set of personalized authenticating values regarding user access to data;
generate a set of hidden passwords based on the set of personalized authenticating values;
generate a set of blinded passwords based on the set of hidden passwords and a set of blinded random numbers;
generate a set of passkeys based on the set of blinded passwords and the set of recovered random numbers;
generate a set of decryption keys based on the set of blinded random numbers and the set of passkeys;
decrypt the set of encrypted shares utilizing the set of decryption keys to produce a set of shares;
and
decode the set of shares to reproduce the data.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application

13/197,998Filed 4 Aug 2011 · continuation in part

Priority

19 May 2010

Published

US 2011/0286594 A124 Nov 2011

Granted

31 Dec 2013

Term ends

Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
G06F 21/10
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting distributed…
H04L 9/085
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…
H04L 9/0863
Generation of secret information including derivation or calculation of cryptographic keys or passwords: involving passwords or one-time passwords

Family

Application61/346,173Us provisional application · filed 19 May 2010

Application61/377,413Us provisional application · filed 26 Aug 2010

Application13/097,396Parent of this continuation-in-part · filed 29 Apr 2011

US 2011/0289565 A1Pre-grant publication · published 24 Nov 2011

US 2011/0286594 A1Published application

US 8,861,727 B2Related patent

US 8,621,580 B2This patent

From the US filing history. Foreign family members aren’t listed.

Retrieving access information in a dispersed storage network

Life of this patent

Retrieving access information in a dispersed storage network

Life of this patent

Abstract

Claims22