BRPI0404490A - Autenticação com base em desafio sem necessitar conhecimento de dados de autenticação secretos - Google Patents

Autenticação com base em desafio sem necessitar conhecimento de dados de autenticação secretos

Info

Publication number
BRPI0404490A
BRPI0404490A BR0404490-8A BRPI0404490A BRPI0404490A BR PI0404490 A BRPI0404490 A BR PI0404490A BR PI0404490 A BRPI0404490 A BR PI0404490A BR PI0404490 A BRPI0404490 A BR PI0404490A
Authority
BR
Brazil
Prior art keywords
authentication
challenge
entity
compute
authenticator
Prior art date
Application number
BR0404490-8A
Other languages
English (en)
Inventor
Christopher G Kaler
Max G Morris
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Publication of BRPI0404490A publication Critical patent/BRPI0404490A/pt

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3271—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using challenge-response
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Collating Specific Patterns (AREA)

Abstract

"AUTENTICAçãO COM BASE EM DESAFIO SEM NECESSITAR CONHECIMENTO DE DADOS DE AUTENTICAçãO SECRETOS". Um mecanismo de autenticação com base em desafio que não exige que as entidades de computação de autenticação estejam a par dos dados secretos usados para a autenticação inicial. Uma entidade de computação do autenticador é para autenticar a entidade de computação do cliente da autenticação. Primeiro, a entidade de computação do cliente da autenticação adquire um desafio de uma entidade de computação do cliente da autenticação suplementar. A entidade de computação do cliente da autenticação provê o desafio à entidade de computação do autenticador, que tem uma entidade de computação do autenticador suplementar para solucionar o problema. A entidade de computação do autenticador transmite a resposta à entidade de computação do cliente da autenticação, que usa a resposta para autenticar a entidade de computação do autenticador.
BR0404490-8A 2003-10-29 2004-10-20 Autenticação com base em desafio sem necessitar conhecimento de dados de autenticação secretos BRPI0404490A (pt)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US51546103P 2003-10-29 2003-10-29
US10/917,786 US7519815B2 (en) 2003-10-29 2004-08-13 Challenge-based authentication without requiring knowledge of secret authentication data

Publications (1)

Publication Number Publication Date
BRPI0404490A true BRPI0404490A (pt) 2005-06-21

Family

ID=34426330

Family Applications (1)

Application Number Title Priority Date Filing Date
BR0404490-8A BRPI0404490A (pt) 2003-10-29 2004-10-20 Autenticação com base em desafio sem necessitar conhecimento de dados de autenticação secretos

Country Status (17)

Country Link
US (1) US7519815B2 (pt)
EP (1) EP1528707A3 (pt)
JP (1) JP4807944B2 (pt)
KR (1) KR20050040705A (pt)
CN (1) CN1612522B (pt)
AU (1) AU2004218603A1 (pt)
BR (1) BRPI0404490A (pt)
CA (1) CA2482696A1 (pt)
CO (1) CO5630046A1 (pt)
IL (1) IL164320A (pt)
MX (1) MXPA04010160A (pt)
MY (1) MY141019A (pt)
NO (1) NO20044126L (pt)
NZ (1) NZ536222A (pt)
RU (1) RU2363985C2 (pt)
SG (1) SG111217A1 (pt)
TW (1) TW200518552A (pt)

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060294383A1 (en) * 2005-06-28 2006-12-28 Paula Austel Secure data communications in web services
EP1873674B1 (en) * 2005-12-19 2019-09-04 Nippon Telegraph And Telephone Corporation Terminal identification method, authentication method, authentication system, server, terminal, radio base station, program, and recording medium
US8301897B2 (en) * 2006-08-23 2012-10-30 Cisco Technology, Inc. Challenge-based authentication protocol
KR101511805B1 (ko) * 2007-09-11 2015-04-13 엘지전자 주식회사 보안 서명 방법, 보안 인증 방법 및 ｉｐｔｖ 시스템
US8943560B2 (en) * 2008-05-28 2015-01-27 Microsoft Corporation Techniques to provision and manage a digital telephone to authenticate with a network
US8484708B2 (en) * 2009-12-11 2013-07-09 Canon Kabushiki Kaisha Delegating authentication using a challenge/response protocol
FR2955682B1 (fr) * 2010-01-28 2012-03-16 Paycool Int Ltd Procede de fourniture d'un code dynamique par l'intermediaire d'un telephone
WO2011094869A1 (en) * 2010-02-05 2011-08-11 Lipso Systèmes Inc. Secure authentication system and method
US8839357B2 (en) * 2010-12-22 2014-09-16 Canon U.S.A., Inc. Method, system, and computer-readable storage medium for authenticating a computing device
US8856954B1 (en) * 2010-12-29 2014-10-07 Emc Corporation Authenticating using organization based information
US8839390B2 (en) * 2011-03-08 2014-09-16 Microsoft Corporation Grouping personal accounts to tailor a web service
US9294267B2 (en) * 2012-11-16 2016-03-22 Deepak Kamath Method, system and program product for secure storage of content
US10764068B2 (en) * 2018-01-30 2020-09-01 EMC IP Holding Company LLC Computer system employing challenge/response protocol with detection of non-unique incorrect responses
CN108449182B (zh) * 2018-04-09 2021-10-01 南京网觉软件有限公司 基于显示设备电磁辐射通信的手机验证登录系统及方法

Family Cites Families (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5148479A (en) * 1991-03-20 1992-09-15 International Business Machines Corp. Authentication protocols in communication networks
US5544322A (en) * 1994-05-09 1996-08-06 International Business Machines Corporation System and method for policy-based inter-realm authentication within a distributed processing system
US5668876A (en) * 1994-06-24 1997-09-16 Telefonaktiebolaget Lm Ericsson User authentication method and apparatus
US6948070B1 (en) 1995-02-13 2005-09-20 Intertrust Technologies Corporation Systems and methods for secure transaction management and electronic rights protection
US5991407A (en) * 1995-10-17 1999-11-23 Nokia Telecommunications Oy Subscriber authentication in a mobile communications system
US5815665A (en) 1996-04-03 1998-09-29 Microsoft Corporation System and method for providing trusted brokering services over a distributed network
US6335927B1 (en) 1996-11-18 2002-01-01 Mci Communications Corporation System and method for providing requested quality of service in a hybrid network
US5930804A (en) 1997-06-09 1999-07-27 Philips Electronics North America Corporation Web-based biometric authentication system and method
US6263446B1 (en) * 1997-12-23 2001-07-17 Arcot Systems, Inc. Method and apparatus for secure distribution of authentication credentials to roaming users
BR9914035A (pt) * 1998-09-22 2001-06-19 Infineon Technologies Ag Processo para a autenticação de, pelo menos, um assinante durante uma troca de dados
US6772336B1 (en) 1998-10-16 2004-08-03 Alfred R. Dixon, Jr. Computer access authentication method
US6487665B1 (en) 1998-11-30 2002-11-26 Microsoft Corporation Object security boundaries
US7209889B1 (en) 1998-12-24 2007-04-24 Henry Whitfield Secure system for the issuance, acquisition, and redemption of certificates in a transaction network
FR2788909B1 (fr) * 1999-01-27 2004-02-20 France Telecom Procede d'authentification ou de signature a nombre de calculs reduit
ATE347131T1 (de) * 1999-03-08 2006-12-15 Software Ag Verfahren zur zugriffsprüfung eines anwenders
US6851051B1 (en) * 1999-04-12 2005-02-01 International Business Machines Corporation System and method for liveness authentication using an augmented challenge/response scheme
US6760841B1 (en) 2000-05-01 2004-07-06 Xtec, Incorporated Methods and apparatus for securely conducting and authenticating transactions over unsecured communication channels
KR100769482B1 (ko) * 2000-06-05 2007-10-24 피닉스 테크놀로지 리미티드 다중 서버를 사용하는 원격 패스워드 인증을 위한 시스템, 방법 및 소프트웨어
US7020773B1 (en) 2000-07-17 2006-03-28 Citrix Systems, Inc. Strong mutual authentication of devices
US6879690B2 (en) * 2001-02-21 2005-04-12 Nokia Corporation Method and system for delegation of security procedures to a visited domain
US6947902B2 (en) 2001-05-31 2005-09-20 Infonox On The Web Active transaction generation, processing, and routing system
US7191151B1 (en) 2001-08-23 2007-03-13 Paypal, Inc. Instant availability of electronically transferred funds
CA2356420A1 (en) 2001-08-30 2003-02-28 Wmode Inc. Authentication and non-repudiation of a subscriber on a public network
EP1444581A4 (en) 2001-11-14 2006-11-22 Igt Reno Nev METHOD FOR VERIFYING THE AUTHORIZATION TO PARTICIPATE FROM A PLACED PLACE FROM A GAME EVENT
US20030096595A1 (en) * 2001-11-21 2003-05-22 Michael Green Authentication of a mobile telephone
US20030110046A1 (en) 2001-12-06 2003-06-12 Nokia Corporation Method and device for dispensing electronic information
US20030120920A1 (en) 2001-12-20 2003-06-26 Svensson Sven Anders Borje Remote device authentication
US20030157925A1 (en) 2002-02-21 2003-08-21 Sorber Russell E. Communication unit and method for facilitating prepaid communication services
US7221935B2 (en) * 2002-02-28 2007-05-22 Telefonaktiebolaget Lm Ericsson (Publ) System, method and apparatus for federated single sign-on services
US20040104807A1 (en) 2002-10-16 2004-06-03 Frank Ko Networked fingerprint authentication system and method
WO2004077208A2 (en) 2003-02-27 2004-09-10 Rand Afrikaans University Authentication system and method
US7233664B2 (en) 2003-03-13 2007-06-19 New Mexico Technical Research Foundation Dynamic security authentication for wireless communication networks
US7765153B2 (en) 2003-06-10 2010-07-27 Kagi, Inc. Method and apparatus for verifying financial account information
US7657745B2 (en) 2003-10-29 2010-02-02 Microsoft Corporation Secure electronic transfer without requiring knowledge of secret data
US20050289082A1 (en) 2003-10-29 2005-12-29 Microsoft Corporation Secure electronic transfer without requiring knowledge of secret data
US8615487B2 (en) 2004-01-23 2013-12-24 Garrison Gomez System and method to store and retrieve identifier associated information content

Also Published As

Publication number Publication date
TW200518552A (en) 2005-06-01
RU2363985C2 (ru) 2009-08-10
CA2482696A1 (en) 2005-04-29
EP1528707A3 (en) 2009-07-15
AU2004218603A1 (en) 2005-05-19
US20050097325A1 (en) 2005-05-05
MY141019A (en) 2010-02-25
US7519815B2 (en) 2009-04-14
JP2005137011A (ja) 2005-05-26
RU2004131500A (ru) 2006-04-10
KR20050040705A (ko) 2005-05-03
MXPA04010160A (es) 2005-07-05
EP1528707A2 (en) 2005-05-04
CN1612522A (zh) 2005-05-04
CO5630046A1 (es) 2006-04-28
NO20044126L (no) 2005-05-02
IL164320A0 (en) 2005-12-18
IL164320A (en) 2010-04-15
JP4807944B2 (ja) 2011-11-02
SG111217A1 (en) 2005-05-30
CN1612522B (zh) 2010-05-12
NZ536222A (en) 2006-10-27

Similar Documents

Publication Publication Date Title
BRPI0404490A (pt) Autenticação com base em desafio sem necessitar conhecimento de dados de autenticação secretos
BRPI0517261A (pt) sistema e método para fornercer um protocolo de autenticação multicredencial
WO2010060704A3 (en) Method and system for token-based authentication
BRPI0711042A8 (pt) Sistema, método para possibilitar um emissor de direitos criar dados de autenticação relacionados à um objeto e/ou criptografar o objeto usando uma chave diversificada e dispositivo
BRPI0417326A (pt) sistema de autenticação para aplicativos de computadores em rede
BRPI0406777A (pt) Sistema de proteção de conteúdo, aparelho de geração de dados de chave e aparelho terminal
BR112018010287A2 (pt) método para autenticação de um usuário, dispositivo para a autenticação de um usuário, e servidor para a autenticação de um usuário
BR0108090A (pt) Processo e disposição para a autenticação recìproca de duas unidades de processamento de dados
BRPI0415916A (pt) método e equipamento para prover credenciais de aplicativo
TW200519583A (en) Projection of trustworthiness from a trusted environment to an untrusted environment
BR0306630A (pt) Resolução de uma topologia distribuìda para afluir dados
BRPI0710257A8 (pt) Método para autenticar uma aplicação com uma aplicação de servidor e terminal móvel para autenticação de uma aplicação
BR112013016835A2 (pt) sistema de plataforma de tunelamento seguro e método
BR112015000175A2 (pt) método, uma ou mais mídias de armazenamento não transitório legíveis por computador e um dispositivo, em particular, relacionado a recursos de computação resources e/ou computação de confiança com base em dispositivo móvel
BR112015030544A2 (pt) sistemas de autenticação eletrônica
WO2002017555A3 (en) Countering credentials copying
BR0309523A (pt) Autenticação, autorização, contabilidade transitiva na inter-operação entre redes de acesso
BR112015027175A2 (pt) sincronizando hashes de credencial entre serviços de diretório
BR112017003018A2 (pt) fornecimento seguro de uma credencial de autenticação
BRPI0519184A2 (pt) mÉtodos para autenticar um serviÇo remoto para um usuÁrio, e para autenticar mutuamente um usuÁrio de serviÇo remoto e um serviÇo remoto, arquitetura de software, dispositivo de autenticaÇço, e, mÉtodos para autenticar a identidade e/ou credenciais de um segundo usuÁrio para um primeiro usuÁrio, para criar um dispositivo de autenticaÇço, e, para autenticar um usuÁrio para um serviÇo remoto
BR112018071634A2 (pt) utilização de região isolada de segurança baseada em hardware para impedir pirataria e fraude em dispositivos eletrônicos
WO2007047440A3 (en) Method and apparatus for re-authentication of a computing device using cached state
EA200970201A1 (ru) Способ и система для обеспечения специфических для доступа ключей
WO2007026228A3 (en) Secure delegation of trust
WO2007011637A3 (en) User mapping information extension for protocols

Legal Events

Date Code Title Description
B08F Application dismissed because of non-payment of annual fees [chapter 8.6 patent gazette]

Free format text: REFERENTE A 9A ANUIDADE.

B08K Patent lapsed as no evidence of payment of the annual fee has been furnished to inpi [chapter 8.11 patent gazette]

Free format text: REFERENTE AO DESPACHO 8.6 PUBLICADO NA RPI 2259 DE 22/04/2014.