Hashing method and system

• US 20070157028A1
• Filed: 01/03/2006
• Published: 07/05/2007
• Est. Priority Date: 01/03/2006
• Status: Active Grant

• Current Assignee: Twitter Inc (X Holdings Corp.)
• Original Assignee: International Business Machines Corporation
• Inventors: Lott, David
• Granted Patent: US 7,694,147 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A hashing method and system. The method comprises receiving by a computing system, a user password. The computing system generates a first hash for the user password. The computing system generates a second hash for a system parameter and performs an operation relating the first hash to the second hash to generate a first combination value. The computing system generates a third hash for the first combination value. The computing system receives a specific password for requesting access to the computing system. The computing system generates a fourth hash for said specific password and performs an operation relating the fourth hash to the second hash to generate a second combination value. The computing system generates a fifth hash for the second combination value. The third hash is compared to the fifth hash to determine that the third hash matches the fifth hash. Access is enabled to the computing system.

Claims

1. A method, comprising:

receiving by a computing system, a user password, said user password for enabling access to a computing system;

generating by said computing system, a first hash (H1) for said user password;

storing said first hash (H1) within a memory device of said computing system;

generating by said computing system, a second hash (H2) for a system parameter;

storing said second hash (H2) within said memory device;

performing by said computing system, an operation relating said first hash (H1) to said second hash (H2) to generate a first combination value;

generating by said computing system, a third hash (H3) for said first combination value; and

storing within said memory device, said third hash (H3).

2. The method of claim 1, further comprising:

receiving by said computing system, a specific password for requesting access to said computing system;

generating by said computing system, a fourth hash (H4) for said specific password;

performing by said computing system, an operation relating said fourth hash (H4) to said second hash (H2) to generate a second combination value; and

generating by said computing system, a fifth hash (H5) for said second combination value.

3. The method of claim 2, further comprising:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) matches said fifth hash (H5); and

enabling access to said computing system.

4. The method of claim 2, further comprising:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) does not match said fifth hash (H5); and

denying access to said computing system.

5. The method of claim 2, further comprising:

encrypting by said computing system, said third hash (H3) to generate an encrypted third hash; and

encrypting by said computing system, said fifth hash (H5) to generate an encrypted fifth hash.

6. The method of claim 5, further comprising:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash matches said encrypted fifth hash; and

enabling access to said computing system.

7. The method of claim 5, further comprising:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash does not match said encrypted fifth hash; and

denying access to said computing system.

8. The method of claim 1, further comprising:

generating by said computing system, an additional hash for an additional system parameter; and

storing said additional hash within said memory device, wherein said performing said operation further comprises relating said additional hash to said first hash (H1) and said second hash (H2) to generate said first combination value.

9. The method of claim 1, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises XORing said first hash (H1) and said second hash (H2) to form H1 XOR H2 as said first combination value.

10. The method of claim 1, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H1H2 as said first combination value.

11. The method of claim 1, wherein said performing said operation relating said said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H2H1 as said first combination value.

12. The method of claim 1, wherein said generating said first hash (H1) comprises applying as an input to a first hash function said user password to generate said first hash (H1), wherein said generating said second hash (H2) comprises applying as an input to a second hash function said system parameter to generate said second hash (H2), and wherein said generating said third hash (H3) comprises applying as an input to a third hash function said first combination value to generate said third hash (H3).

13. The method of claim 12, wherein said first hash function, said second hash function, and said third hash function each comprise a different hash function.

14. The method of claim 1, wherein said system parameter is selected from the group consisting of a serial number for any hardware within said computing system, a serial number for an operating system for said computing system, an administrator specified password, and a MAC address for said computing system.

15. A computing system comprising a processor and a computer readable memory unit coupled to the processor, said memory unit containing instructions that when executed by the processor implement a hashing method, said method comprising:

receiving by said computing system, a user password, said user password for enabling access to said computing system;

generating by said computing system, a first hash (H1) for said user password;

storing said first hash (H1) within said memory unit;

generating by said computing system, a second hash (H2) for a system parameter;

storing said second hash (H2) within said memory unit;

performing by said computing system, an operation relating said first hash (H1) to said second hash (H2) to generate a first combination value;

generating by said computing system, a third hash (H3) for said first combination value; and

storing within said memory unit, said third hash (H3).

16. The computing system of claim 15, wherein said method further comprises:

receiving by said computing system, a specific password for requesting access to said computing system;

generating by said computing system, a fourth hash (H4) for said specific password;

performing by said computing system, an operation relating said fourth hash (H4) to said second hash (H2) to generate a second combination value; and

generating by said computing system, a fifth hash (H5) for said second combination value.

17. The computing system of claim 16, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) matches said fifth hash (H5); and

enabling access to said computing system.

18. The computing system of claim 16, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) does not match said fifth hash (H5); and

denying access to said computing system.

19. The computing system of claim 16, wherein said method further comprises:

encrypting by said computing system, said third hash (H3) to generate an encrypted third hash; and

encrypting by said computing system, said fifth hash (H5) to generate an encrypted fifth hash.

20. The computing system of claim 19, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash matches said encrypted fifth hash; and

enabling access to said computing system.

21. The computing system of claim 19, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash does not match said encrypted fifth hash; and

denying access to said computing system.

22. The computing system of claim 15, wherein said method further comprises:

generating by said computing system, an additional hash for an additional system parameter; and

storing said additional hash within said computer readable memory unit, wherein said performing said operation further comprises relating said additional hash to said first hash (H1) and said second hash (H2) to generate said first combination value.

23. The computing system of claim 15, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises XORing said first hash (H1) and said second hash (H2) to form H1 XOR H2 as said first combination value.

24. The computing system of claim 15, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H1H2 as said first combination value.

25. The computing system of claim 15, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H2H1 as said first combination value.

26. The computing system of claim 15, wherein said generating said first hash (H1) comprises applying as an input to a first hash function said user password to generate said first hash (H1), wherein said generating said second hash (H2) comprises applying as an input to a second hash function said system parameter to generate said second hash (H2), and wherein said generating said third hash (H3) comprises applying as an input to a third hash function said first combination value to generate said third hash (H3).

27. The computing system of claim 26, wherein said first hash function, said second hash function, and said third hash function each comprise a different hash function.

28. The computing system of claim 15, wherein said system parameter is selected from the group consisting of a serial number for any hardware within said computing system, a serial number for an operating system for said computing system, an administrator specified password, and a MAC address for said computing system.

29. A computer program product, comprising a computer usable medium having a computer readable program code embodied therein, said computer readable program code comprising an algorithm adapted to implement a hashing method within a computing system, said method comprising:

receiving by said computing system, a user password, said user password for enabling access to said computing system;

generating by said computing system, a first hash (H1) for said user password;

storing said first hash (H1) within said computer usable medium;

generating by said computing system, a second hash (H2) for a system parameter;

storing said second hash (H2) within said computer usable medium;

performing by said computing system, an operation relating said first hash (H1) to said second hash (H2) to generate a first combination value;

generating by said computing system, a third hash (H3) for said first combination value; and

storing within said computer usable medium, said third hash (H3).

30. The computer program product of claim 29, wherein said method further comprises:

receiving by said computing system, a specific password for requesting access to said computing system;

generating by said computing system, a fourth hash (H4) for said specific password;

performing by said computing system, an operation relating said fourth hash (H4) to said second hash (H2) to generate a second combination value; and

generating by said computing system, a fifth hash (H5) for said second combination value.

31. The computer program product of claim 30, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) matches said fifth hash (H5); and

enabling access to said computing system.

32. The computer program product of claim 30, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) does not match said fifth hash (H5); and

denying access to said computing system.

33. The computer program product of claim 30, wherein said method further comprises:

encrypting by said computing system, said third hash (H3) to generate an encrypted third hash; and

encrypting by said computing system, said fifth hash (H5) to generate an encrypted fifth hash.

34. The computer program product of claim 33, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash matches said encrypted fifth hash; and

enabling access to said computing system.

35. The computer program product of claim 33, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash does not match said encrypted fifth hash; and

denying access to said computing system.

36. The computer program product of claim 29, wherein said method further comprises:

generating by said computing system, an additional hash for an additional system parameter; and

storing said additional hash within said computer readable memory unit, wherein said performing said operation further comprises relating said additional hash to said first hash (H1) and said second hash (H2) to generate said first combination value.

37. The computer program product of claim 29, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises XORing said first hash (H1) and said second hash (H2) to form H1 XOR H2 as said first combination value.

38. The computer program product of claim 29, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H1H2 as said first combination value.

39. The computer program product of claim 29, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H2H1 as said first combination value.

40. The computer program product of claim 29, wherein said generating said first hash (H1) comprises applying as an input to a first hash function said user password to generate said first hash (H1), wherein said generating said second hash (H2) comprises applying as an input to a second hash function said system parameter to generate said second hash (H2), and wherein said generating said third hash (H3) comprises applying as an input to a third hash function said first combination value to generate said third hash (H3).

41. The computer program product of claim 40, wherein said first hash function, said second hash function, and said third hash function each comprise a different hash function.

42. The computer program product of claim 29, wherein said system parameter is selected from the group consisting of a serial number for any hardware within said computing system, a serial number for an operating system for said computing system, an administrator specified password, and a MAC address for said computing system.

43. A process for integrating computing infrastructure, comprising integrating computer-readable code into a computing system, wherein the computing system comprises a computer usable medium, and wherein the code in combination with the computing system is capable of performing a hashing method comprising:

receiving by said computing system, a user password, said user password for enabling access to said computing system;

generating by said computing system, a first hash (H1) for said user password;

storing said first hash (H1) within said computer usable medium;

generating by said computing system, a second hash (H2) for a system parameter;

storing said second hash (H2) within said computer usable medium;

performing by said computing system, an operation relating said first hash (H1) to said second hash (H2) to generate a first combination value;

generating by said computing system, a third hash (H3) for said first combination value; and

storing within said computer usable medium, said third hash (H3).

44. The process of claim 43, wherein said method further comprises:

receiving by said computing system, a specific password for requesting access to said computing system;

generating by said computing system, a fourth hash (H4) for said specific password;

performing by said computing system, an operation relating said fourth hash (H4) to said second hash (H2) to generate a second combination value; and

generating by said computing system, a fifth hash (H5) for said second combination value.

45. The process of claim 44, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) matches said fifth hash (H5); and

enabling access to said computing system.

46. The process of claim 44, wherein said method further comprises:

comparing by said computing system, said third hash (H3) to said fifth hash (H5);

determining as a result of said comparing, that said third hash (H3) does not match said fifth hash (H5); and

denying access to said computing system.

47. The process of claim 44, wherein said method further comprises:

encrypting by said computing system, said third hash (H3) to generate an encrypted third hash; and

encrypting by said computing system, said fifth hash (H5) to generate an encrypted fifth hash.

48. The process of claim 47, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash matches said encrypted fifth hash; and

enabling access to said computing system.

49. The process of claim 47, wherein said method further comprises:

comparing by said computing system, said encrypted third hash to said encrypted fifth hash;

determining as a result of said comparing, that said encrypted third hash does not match said encrypted fifth hash; and

denying access to said computing system.

50. The process of claim 43, wherein said method further comprises:

generating by said computing system, an additional hash for an additional system parameter; and

storing said additional hash within said computer readable memory unit, wherein said performing said operation further comprises relating said additional hash to said first hash (H1) and said second hash (H2) to generate said first combination value.

51. The process of claim 43, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises XORing said first hash (H1) and said second hash (H2) to form H1 XOR H2 as said first combination value.

52. The process of claim 43, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H1H2 as said first combination value.

53. The process of claim 43, wherein said performing said operation relating said first hash (H1) to said second hash (H2) comprises concatenating said first hash (H1) to said second hash (H2) to form H2H1 as said first combination value.

54. The process of claim 43, wherein said generating said first hash (H1) comprises applying as an input to a first hash function said user password to generate said first hash (H1), wherein said generating said second hash (H2) comprises applying as an input to a second hash function said system parameter to generate said second hash (H2), and wherein said generating said third hash (H3) comprises applying as an input to a third hash function said first combination value to generate said third hash (H3).

55. The process of claim 54, wherein said first hash function, said second hash function, and said third hash function each comprise a different hash function.

56. The process of claim 43, wherein said system parameter is selected from the group consisting of a serial number for any hardware within said computing system, a serial number for an operating system for said computing system, an administrator specified password, and a MAC address for said computing system.