METHOD FOR SERVER-SIDE DETECTION OF MAN-IN-THE-MIDDLE ATTACKS
First Claim
1. A method to detect a man-in-the-middle attack against a communication session over a channel between a client and a server, where said communication session is initiated by said client and said server, said method comprising (1) said server receiving an authentication credential from said client created by applying a cryptographic function to at least a secret shared between said client and said server;
- and (2) said server performing verification of said authentication credential using at least said secret, characterized in that said cryptographic function and said verification operate on distinctive information respecting said channel.
1 Assignment
0 Petitions
Accused Products
Abstract
Problem The combination of a tendency towards permissivity when verifying certificate authenticity and the use of in-band client authentication opens up an opportunity for attackers to mount man-in-the-middle attacks on SSL connections.
Solution The invention exposes any discrepancy between the intended recipient of the client credential and the actual recipient of the client credential by cryptographically including parameters that are uniquely linked to the channel (i.e., the communication session, as characterized by the parameters of the protocols that are being used), preferably the channel end points, in the calculation of the client credential. This links the process that provides the secure channel (e.g., the SSL protocol session) to the process that provides the authentication credential (e.g., the OTP token operation), thus exposing any attack that would break up the client-server channel. This is achieved without the requirement for an additional encrypted tunnel and allowing the continued use of existing components such as existing browsers.
119 Citations
62 Claims
-
1. A method to detect a man-in-the-middle attack against a communication session over a channel between a client and a server, where said communication session is initiated by said client and said server, said method comprising (1) said server receiving an authentication credential from said client created by applying a cryptographic function to at least a secret shared between said client and said server;
- and (2) said server performing verification of said authentication credential using at least said secret, characterized in that said cryptographic function and said verification operate on distinctive information respecting said channel.
- View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
14. A method to allow detection of a man-in-the-middle attack against a communication session over a channel between a client and a server, where said communication session is initiated by said client and said server and said man-in-the-middle attack may be detected by said server performing a verification on an authentication credential created by said client, said method comprising (1) said client creating an authentication credential by applying a cryptographic function to at least a secret shared between said client and said server;
- and (2) said client transmitting said authentication credential to said server, characterized in that said cryptographic function operates on distinctive information respecting said channel.
- View Dependent Claims (15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26)
- 27. An apparatus adapted to generate or verify a client authentication credential for authenticating said client in a client-server transaction over a communication channel, said apparatus comprising an agent for performing a cryptographic function using a secret shared between said client and said server as part of said generating or verifying, characterized in that said cryptographic function also operates on or reproduces distinctive information respecting said channel.
- 40. A computer-readable storage medium containing a program for a computer which when executed generates or verifies a client authentication credential for authenticating said client in a client-server transaction over a communication channel wherein said credential is generated using at least a cryptographic function employing a secret shared between said client and said server, characterized in that said cryptographic function also operates on distinctive information respecting said channel.
Specification
-
- Resources
-
Current AssigneeVasco Data Security Incorporated (OneSpan, Inc.)
-
Original AssigneeVasco Data Security Incorporated (OneSpan, Inc.)
-
InventorsFort, Nicolas
-
Application NumberUS12/033,462Publication NumberTime in Patent OfficeDaysField of SearchUS Class Current713/175CPC Class CodesH04L 63/1441 Countermeasures against mal...H04L 63/1466 Active attacks involving in...H04L 9/0838 Key agreement, i.e. key est...H04L 9/3263 involving certificates, e.g...
