Protected resource access control utilizing credentials based on message authentication codes and hash chain values

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the processing device being configured to receive authentication information from a user, to generate a message authentication code based at least in part on the received authentication information, to associate intermediate values of a hash chain with respective ones of a plurality of access control intervals, to generate a credential for a particular one of the plurality of access control intervals based at least in part on the message authentication code and the intermediate value of the hash chain associated with the particular access control interval, and to provide the credential to a user in order to allow the user to access a protected resource in the particular access control interval.

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the processing device being configured to receive a credential from a user attempting to access a protected resource in a particular one of a plurality of access control intervals, to generate a message authentication code based at least in part on the credential, to utilize the generated message authentication code to identify an intermediate value of a hash chain in the credential, and if the identified intermediate value of the hash chain matches an expected intermediate value of the hash chain associated with the particular access control interval, granting the user access to the protected resource in the particular access control interval, wherein intermediate values of the hash chain are associated with respective ones of the plurality of access control intervals.