One time passwords with IPsec and IKE version 1 authentication

A system comprising:

• at least one processor coupled to a network, the at least one processor implementing:
• an authentication service
• a one-time-password service;
• a certificate authority;
• wherein:
• the authentication service is adapted to receive over the network a first communication from a client, the first communication containing credentials associated with the client and a one-time-password,
• the authentication service is adapted to validate the credentials associated with the client and convey the one-time-password to the one-time-password service;
• the one-time-password service is adapted to validate the one-time-password and return to the authentication service an indication of results of validation of the one-time-password;
• the certificate authority is adapted to receive over the network a second communication from the client, the second communication including the indication of results of validation of the one-time-password from the client and to selectively issue a certificate when the results received from the client indicate that the one-time-password was successfully validated by the one-time password service wherein the certificate includes an indication that the one-time password was successfully validated.

At least one non-transitory computer-readable storage medium comprising computer-executable instructions that, when executed by a processor of a client computer, perform a method of forming an IPsec session, the method comprising:

• sending a first communication to an authentication service, the first communication containing credentials of a user of the client computer and a one-time-password;
• receiving from the authentication service in response to the first commutation a reply comprising an indication that the one-time-password was successfully validated;
• sending a second communication to the authentication service, the second communication comprising a request for a certificate from a certificate authority and containing the indication that the one-time password was successfully validated in the first communication;
• receiving from the authentication service in response to the second communication the certificate, the certificate comprising an indication that the one-time-password successfully validated;
• and
• establishing the IPsec session with the certificate used in an Internet Key Exchange version 1 (IKEv1) protocol.