Protected resource access control utilizing intermediate values of a hash chain

A method comprising:

• associating intermediate values of a hash chain with respective access control intervals;
• providing a given one of the intermediate values to a user in order to allow the user to access a protected resource in the corresponding access control interval;
• providing a final value of the hash chain to an access control module associated with the protected resource;
• storing an initial value of the hash chain in a secure manner inaccessible to the access control module;
• generating one or more additional final values for one or more respective additional hash chains having respective distinct initial values;
• and
• providing the one or more additional final values to respective additional access control modules associated with respective protected resources;
• wherein said associating, providing the given one of the intermediate values, providing the final value, storing, generating and providing the one or more additional final values are performed by at least one processing device comprising a processor coupled to a memory.

A method comprising:

• receiving a given intermediate value of a hash chain from a user attempting to access a corresponding protected resource;
• hashing the intermediate value a particular number of times determined based on a current access control interval in order to obtain a result;
• and
• if the result matches a final value of the hash chain, granting the user access to the protected resource;
• wherein the hash chain comprises an initial value, the final value and a plurality of intermediate values including the given intermediate value;
• wherein the final value is provided to each of a plurality of access control modules associated with respective protected resources and the initial value is stored in a secure manner inaccessible to the access control modules;
• wherein the intermediate values of the hash chain are associated with respective access control intervals;
• and
• wherein said receiving, hashing, and granting are performed by at least one processing device comprising a processor coupled to a memory.

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the processing device being configured to receive a given intermediate value of a hash chain from a user attempting to access a corresponding protected resource, to hash the intermediate value a particular number of times determined based on a current access control interval in order to obtain a result, and if the result matches a final value of the hash chain, to grant the user access to the protected resource;
• wherein the hash chain comprises an initial value, the final value and a plurality of intermediate values including the given intermediate value;
• wherein the final value is provided to each of a plurality of access control modules associated with respective protected resources and the initial value is stored in a secure manner inaccessible to the access control modules;
• and
• wherein the intermediate values of the hash chain are associated with respective access control intervals.

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the processing device being configured to:
• associate intermediate values of a hash chain with respective access control intervals;
• provide a given one of the intermediate values to a user in order to allow the user to access a protected resource in the corresponding access control interval;
• provide a final value of the hash chain to an access control module associated with the protected resource;
• store an initial value of the hash chain in a secure manner inaccessible to the access control module;
• generate one or more additional final values for one or more respective additional hash chains having respective distinct initial values;
• and
• provide the one or more additional final values to respective additional access control modules associated with respective protected resources.