[go: up one dir, main page]

AR102007A1 - Sistema, método implementado por computadora y dispositivo informático de autenticación para acceder a recursos en base a desafíos - Google Patents

Sistema, método implementado por computadora y dispositivo informático de autenticación para acceder a recursos en base a desafíos

Info

Publication number
AR102007A1
AR102007A1 ARP150103063A ARP150103063A AR102007A1 AR 102007 A1 AR102007 A1 AR 102007A1 AR P150103063 A ARP150103063 A AR P150103063A AR P150103063 A ARP150103063 A AR P150103063A AR 102007 A1 AR102007 A1 AR 102007A1
Authority
AR
Argentina
Prior art keywords
authentication
challenge
client
response
computer
Prior art date
Application number
ARP150103063A
Other languages
English (en)
Inventor
Nanda Arun
Unnikrishnan Mahesh
Original Assignee
Microsoft Technology Licensing Llc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Technology Licensing Llc filed Critical Microsoft Technology Licensing Llc
Publication of AR102007A1 publication Critical patent/AR102007A1/es

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2103—Challenge-response

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

Los ejemplos de la presente divulgación describen sistemas y métodos para la autenticación por parte de un componente de autenticación cuando un cliente intenta acceder a al menos un recurso protegido. A modo de ejemplo, se recibe una solicitud de acceso de un cliente en un componente de autenticación. El componente de autenticación genera un desafío de autenticación que incluye criterios para asistir al cliente en la selección de una credencial de autenticación apropiada, una solicitud de prueba de posesión de la credencial de autenticación, y datos específicos al desafío para que devuelva el cliente en una respuesta al desafío. Se recibe una respuesta al desafío del cliente. El componente de autenticación evalúa la respuesta al desafío y determina si ha de autenticar el cliente para que acceda a un recurso en base a la respuesta al desafío evaluada. También se describen otros ejemplos.
ARP150103063A 2014-09-29 2015-09-23 Sistema, método implementado por computadora y dispositivo informático de autenticación para acceder a recursos en base a desafíos AR102007A1 (es)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US201462057034P 2014-09-29 2014-09-29

Publications (1)

Publication Number Publication Date
AR102007A1 true AR102007A1 (es) 2017-01-25

Family

ID=55585720

Family Applications (1)

Application Number Title Priority Date Filing Date
ARP150103063A AR102007A1 (es) 2014-09-29 2015-09-23 Sistema, método implementado por computadora y dispositivo informático de autenticación para acceder a recursos en base a desafíos

Country Status (4)

Country Link
US (1) US20160094531A1 (es)
AR (1) AR102007A1 (es)
TW (1) TW201626273A (es)
WO (1) WO2016053816A1 (es)

Families Citing this family (49)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9565022B1 (en) * 2013-07-02 2017-02-07 Impinj, Inc. RFID tags with dynamic key replacement
US10270774B1 (en) * 2015-01-26 2019-04-23 Microstrategy Incorporated Electronic credential and analytics integration
US9749310B2 (en) * 2015-03-27 2017-08-29 Intel Corporation Technologies for authentication and single-sign-on using device security assertions
US9692757B1 (en) 2015-05-20 2017-06-27 Amazon Technologies, Inc. Enhanced authentication for secure communications
US10284567B2 (en) * 2016-05-03 2019-05-07 Paypal, Inc. Targeted authentication queries based on detected user actions
US11108562B2 (en) * 2016-05-05 2021-08-31 Neustar, Inc. Systems and methods for verifying a route taken by a communication
KR101820039B1 (ko) * 2016-06-30 2018-02-28 주식회사 수산아이앤티 Dhcp 환경에서 승인된 클라이언트를 구분하는 방법
US10313384B1 (en) * 2016-08-11 2019-06-04 Balbix, Inc. Mitigation of security risk vulnerabilities in an enterprise network
US10334434B2 (en) * 2016-09-08 2019-06-25 Vmware, Inc. Phone factor authentication
US10855465B2 (en) 2016-11-10 2020-12-01 Ernest Brickell Audited use of a cryptographic key
US10498712B2 (en) 2016-11-10 2019-12-03 Ernest Brickell Balancing public and personal security needs
US11405201B2 (en) 2016-11-10 2022-08-02 Brickell Cryptology Llc Secure transfer of protected application storage keys with change of trusted computing base
US11398906B2 (en) 2016-11-10 2022-07-26 Brickell Cryptology Llc Confirming receipt of audit records for audited use of a cryptographic key
US10574648B2 (en) * 2016-12-22 2020-02-25 Dashlane SAS Methods and systems for user authentication
CA3058677A1 (en) * 2017-05-04 2018-11-08 Ernest Brickell Assuring external accessibility for devices on a network
US10652245B2 (en) 2017-05-04 2020-05-12 Ernest Brickell External accessibility for network devices
US10348706B2 (en) 2017-05-04 2019-07-09 Ernest Brickell Assuring external accessibility for devices on a network
TWI633444B (zh) * 2017-06-13 2018-08-21 中華電信股份有限公司 Encryption and decryption communication method and system based on voucher signature verification
US11544356B2 (en) * 2017-06-19 2023-01-03 Citrix Systems, Inc. Systems and methods for dynamic flexible authentication in a cloud service
US10505916B2 (en) * 2017-10-19 2019-12-10 T-Mobile Usa, Inc. Authentication token with client key
US10587409B2 (en) 2017-11-30 2020-03-10 T-Mobile Usa, Inc. Authorization token including fine grain entitlements
US11677730B2 (en) * 2018-01-24 2023-06-13 Intel Corporation Device authentication
EP3750272A4 (en) 2018-02-06 2021-12-15 Nb Research Llc SYSTEM AND PROCEDURE FOR SECURING A RESOURCE
US10999272B2 (en) 2018-03-30 2021-05-04 Lendingclub Corporation Authenticating and authorizing users with JWT and tokenization
US11438168B2 (en) 2018-04-05 2022-09-06 T-Mobile Usa, Inc. Authentication token request with referred application instance public key
US10972455B2 (en) * 2018-04-24 2021-04-06 International Business Machines Corporation Secure authentication in TLS sessions
US11405375B2 (en) * 2018-09-27 2022-08-02 Lenovo (Singapore) Pte. Ltd. Device and method for receiving a temporary credit token
US10826909B2 (en) 2018-10-04 2020-11-03 Servicenow, Inc. Platform-based authentication for external services
JP7234699B2 (ja) * 2019-03-05 2023-03-08 ブラザー工業株式会社 アプリケーションプログラムおよび情報処理装置
US11190514B2 (en) * 2019-06-17 2021-11-30 Microsoft Technology Licensing, Llc Client-server security enhancement using information accessed from access tokens
EP3767501A1 (en) * 2019-07-18 2021-01-20 Hewlett-Packard Development Company, L.P. User authentication
US11102251B1 (en) 2019-08-02 2021-08-24 Kandji, Inc. Systems and methods for deploying configurations on computing devices and validating compliance with the configurations during scheduled intervals
US10965674B1 (en) * 2020-06-08 2021-03-30 Cyberark Software Ltd. Security protection against threats to network identity providers
US11533309B2 (en) * 2020-12-28 2022-12-20 Okta, Inc. Digital signature injection for user authentication across multiple independent systems
CN112511569B (zh) * 2021-02-07 2021-05-11 杭州筋斗腾云科技有限公司 网络资源访问请求的处理方法、系统及计算机设备
US11620363B1 (en) 2021-03-15 2023-04-04 SHAYRE, Inc. Systems and methods for authentication and authorization for software license management
US11621957B2 (en) * 2021-03-31 2023-04-04 Cisco Technology, Inc. Identity verification for network access
US11632362B1 (en) 2021-04-14 2023-04-18 SHAYRE, Inc. Systems and methods for using JWTs for information security
CN112995219B (zh) * 2021-05-06 2021-08-20 四川省明厚天信息技术股份有限公司 一种单点登录方法、装置、设备及存储介质
US11621830B1 (en) 2021-06-28 2023-04-04 SHAYRE, Inc. Systems and methods for facilitating asynchronous secured point-to-point communications
US20230004668A1 (en) * 2021-07-01 2023-01-05 Citrix Systems, Inc. Systems and methods for enforcing forceful browsing in distributed systems in real time
US12003512B2 (en) * 2021-10-21 2024-06-04 Cisco Technology, Inc. Limiting discovery of a protected resource in a zero trust access model
US12088696B2 (en) * 2021-10-27 2024-09-10 Salesforce, Inc. Protecting application private keys with remote and local security controllers and local MPC key generation
US11461459B1 (en) 2021-11-02 2022-10-04 Kandji, Inc. User device authentication gateway module
EP4432141B1 (en) * 2023-03-13 2025-07-23 Mastercard International Incorporated Credential management in a decentralized heterogeneous transaction system
US11936671B1 (en) * 2023-06-26 2024-03-19 Kolide, Inc. Zero trust architecture with browser-supported security posture data collection
US12309152B2 (en) * 2023-08-15 2025-05-20 Citibank, N.A. Access control for requests to services
US20250279987A1 (en) * 2024-03-01 2025-09-04 Cisco Technology, Inc. Systems and Methods for Orchestrating Web Authentication Requests
CN119316232B (zh) * 2024-12-17 2025-05-23 温州大学大数据与信息技术研究院 一种基于服务器集群的单点登录方法、装置、介质和设备

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7380008B2 (en) * 2000-12-22 2008-05-27 Oracle International Corporation Proxy system
US7603700B2 (en) * 2004-08-31 2009-10-13 Aol Llc Authenticating a client using linked authentication credentials
CA2640261A1 (en) * 2006-01-26 2007-08-09 Imprivata, Inc. Systems and methods for multi-factor authentication
US8276196B1 (en) * 2008-08-18 2012-09-25 United Services Automobile Association (Usaa) Systems and methods for implementing device-specific passwords
DE102009000404B4 (de) * 2009-01-26 2024-05-29 Bundesdruckerei Gmbh Verfahren zur Freischaltung einer Chipkartenfunktion, Lesegerät für eine Chipkarte und Chipkarte
US9490984B2 (en) * 2009-09-14 2016-11-08 Interdigital Patent Holdings, Inc. Method and apparatus for trusted authentication and logon
WO2012005739A1 (en) * 2010-07-09 2012-01-12 Hewlett-Packard Development Company, L.P. Responses to server challenges included in a hypertext transfer protocol header
US8819803B1 (en) * 2012-06-29 2014-08-26 Emc Corporation Validating association of client devices with authenticated clients
US9154483B1 (en) * 2013-02-21 2015-10-06 Amazon Technologies, Inc. Secure device configuration

Also Published As

Publication number Publication date
WO2016053816A1 (en) 2016-04-07
TW201626273A (zh) 2016-07-16
US20160094531A1 (en) 2016-03-31

Similar Documents

Publication Publication Date Title
AR102007A1 (es) Sistema, método implementado por computadora y dispositivo informático de autenticación para acceder a recursos en base a desafíos
CO2018012982A2 (es) Aislamiento de seguridad virtualizado con base en hardware
EA201990708A1 (ru) Системы и способы для аутентификации устройств
CN108040507A8 (zh) 物联网领域中的哨兵装备
BR112017005824A2 (pt) método, e, dispositivo móvel.
GB2533728A (en) Method for assigning an agent device from a first device registry to a second device registry
WO2015162072A3 (en) Instant messaging systems and methods
MY189956A (en) Website login method and apparatus
BR112017014135A2 (pt) métodos e sistemas para gerenciar permissões para acessar recursos de dispositivo móvel
EP4271016A3 (en) Enhanced authentication based on secondary device interactions
GB2526743A (en) Session attribute propagation through secure database server tiers
MX383704B (es) Método, dispositivo, servidor y sistema para autenticar a un usuario.
PH12019501289A1 (en) Asset transfer method and apparatus, and electronic device
BR112017003018A2 (pt) fornecimento seguro de uma credencial de autenticação
AU2014235181A8 (en) Certificate based profile confirmation
WO2014190337A3 (en) Requesting proximate resources by learning devices
BR112018068884A2 (pt) método e sistema para autenticação de usuário com segurança aprimorada
BR112016006734A2 (pt) método e aparelho para definição de conta de gerenciamento de dispositivo inteligente
MX2015011289A (es) Metodos y sistemas para acceder de forma electronica a informacion de cuenta.
MX390158B (es) Metodo y dispositivo para determinar una autoridad de control en un dispositivo de usuario.
BR112015027633A2 (pt) Autenticação de usuário
IN2015DE01659A (es)
AR090333A1 (es) Administracion de objetos en una cadena de suministro, mediante el empleo de un identificador seguro
BR112017023309A2 (pt) método, computador servidor, e, método implementado por computador
AR101574A1 (es) Métodos y nodos para la correspondencia del abono con la identidad de usuario del servicio

Legal Events

Date Code Title Description
FB Suspension of granting procedure