Systems and methods for validating client authentication using protected timing data

A computing device configured to validate client authentication using timing data, comprising:

• a processor;
• memory in electronic communication with the processor;
• and
• instructions stored in the memory, the instructions being executable by the processor to:
• authenticate credentials entered by a user on a client;
• upon authenticating the credentials entered by the user, validate the client authentication using timing data, comprising:
• receive a connection request from the client, the connection request comprising a request to connect the client to an Internet-based resource, the credentials being authenticated and the client authentication being validated using timing data to determine whether to allow the client to connect to the Internet-based resource;
• receive a validation token with the connection request;
• verify the received validation token with an issuing server by matching the received validation token with a validation token generated by the issuing server;
• calculate timing data that indicate a time to transmit the data to the client and receive the retransmitted data from the client;
• apply a protective element to the timing data;
• transmit data to the client, wherein the client retransmits the data, and wherein the data comprises the digitally signed timing data;
• receive the retransmitted data from the client;
• and
• transmit the digitally signed timing data to a timing verification server, wherein the timing verification server determines whether the timing data fall within a predetermined range of timing data.

A computer-program product to validate client authentication using timing data, the computer-program product comprising a non-transitory computer-readable medium having instructions thereon, the instructions being executable by a processor to:

• authenticate credentials entered by a user on a client;
• upon authenticating the credentials entered by the user, validate the client authentication using timing data, comprising:
• receive a connection request from the client, the connection request comprising a request to connect the client to an Internet-based resource, the credentials being authenticated and the client authentication being validated using timing data to determine whether to allow the client to connect to the Internet-based resource;
• receive a validation token with the connection request;
• verify the received validation token with an issuing server by matching the received validation token with a validation token generated by the issuing server;
• calculate timing data that indicate a time to transmit the data to the client and receive the retransmitted data from the client;
• apply a protective element to the timing data;
• transmit data to the client, wherein the client retransmits the data, and wherein the data comprises the digitally signed timing data;
• receive the retransmitted data from the client;
• and
• transmit the digitally signed timing data to a timing verification server, wherein the timing verification server determines whether the timing data fall within a predetermined range of timing data.