Privacy preserving knowledge and factor possession tests for persistent authentication
AssigneeGoogle Inc.
InventorsOmer Berkman, Marcel M. M. Yung
Life of this patent
Estimating the term…
Abstract
Example implementations described herein are directed to authentication based on the user's private factors, while not revealing at the server side information allowing the server (or anyone with the server's information) to deduce the private answers. In example implementations, the user answers a questionnaire with authentication factors, wherein the answers are transformed in a one-way fashion and the transformed answers are provided to the server side. Example implementations facilitate authentication based on polynomial interpolation or other methods to permit a user to authenticate, even if the user does not answer all of the questions correctly.
Claims16
A device, comprising:
- a processor, configured to:
- generate a plurality of hashes from a plurality of responses to a plurality of questions;
- generate an authentication hash from a polynomial interpolation of the plurality of hashes and algebraic operations over the plurality of hashes by use of a noisy interpolation algorithm, and adjust a threshold of the noisy interpolation algorithm by introduction of one of:
- one or more erroneous points for the polynomial interpolation, and one or more points for the polynomial interpolation;
- and
- authenticate with the authentication hash;
- and
- a memory configured to store the authentication hash.
A non-transitory computer readable storage medium storing instructions for executing a process, the instructions comprising:
- generating a plurality of hashes from a plurality of responses to a plurality of questions;
- generating an authentication hash from a polynomial interpolation of the plurality of hashes and algebraic operations over the plurality of hashes by use of a noisy interpolation algorithm, and adjust a threshold of the noisy interpolation algorithm by introduction of one of:
- one or more erroneous points for the polynomial interpolation, and one or more points for the polynomial interpolation;
- and
- authenticating with the authentication hash.
A server, comprising:
- a processor configured to:
- transmit a plurality of questions;
- and grant access when an authentication hash responsive to the transmitted plurality of questions matches a secret authentication hash;
- and deny access when the authentication hash does not match the secret authentication hash;
- wherein the authentication hash is generated from a polynomial interpolation of the plurality of hashes and algebraic operations over the plurality of hashes by use of a noisy interpolation algorithm, and adjust a threshold of the noisy interpolation algorithm by introduction of one of:
- one or more erroneous points for the polynomial interpolation, and one or more points for the polynomial interpolation;
- and
- a memory configured to store the authentication hash.
Dependencies are inferred from the claim text.