Authorizing a Login Request of a Remote Device

• US 20100250921A1
• Filed: 03/27/2009
• Published: 09/30/2010
• Est. Priority Date: 03/27/2009
• Status: Abandoned Application

• Current Assignee: Ironkey Incorporated (Proofpoint Incorporated)
• Original Assignee: Ironkey Incorporated (Proofpoint Incorporated)
• Inventors: Pandev, Manish, Jevans, David, Simon, Dan, Spencer, Gil, Holland, Shannon
• Application Number:
  US12/412,801
• Publication Number:
  US 20100250921A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

Exemplary systems and methods for managed authorization of a login request of a remote device are provided. A user of the remote device may be authorized to login by an authentication server before attempting to login. Upon receipt of a login request from the remote device, an authorization process is performed. Subsequently, a concatenation of data from the login request and a server response based on the determination of whether the remote device is authorized to login is generated. The server response may comprise instructions to authorize the login request, instructions to deny the login request, or instructions to destroy data stored by the remote device. Furthermore, the authentication server or the remote device may log the server response.

Claims

1. A computer-implemented method for authorizing a login request of a remote device, comprising:

receiving the login request from the remote device at an authentication server;

determining if the remote device is authorized to login by the authentication server;

concatenating data from the login request and a server response based on the determination of whether the remote device is authorized to login; and

sending the concatenation to the remote device.

2. The method of claim 1 wherein the data from the login request comprises a server challenge generated by the remote device.

3. The method of claim 1 further comprising encrypting the concatenation.

4. The method of claim 3 further comprising generating a tag comprising the encrypted concatenation.

5. The method of claim 4, wherein the tag comprises a message authentication code.

6. The method of claim 3, wherein the encrypting is symmetric.

7. The method of claim 3, wherein the encrypting is asymmetric.

8. The method of claim 1, further comprising logging the server request.

9. The method of claim 1, wherein the server response comprises instructions to authorize the login request.

10. The method of claim 9 further comprising receiving a login password and using the login password in a login process.

11. The method of claim 1, wherein the server response comprises instructions to deny the login request.

12. The method of claim 1, wherein the server response comprises instructions to destroy data stored by the remote device.

13. The method of claim 1, wherein determining if the remote device is authorized to login comprises determining a device identifier of the remote device and reviewing a status associated with the device identifier.

14. A system for authorizing a login request of a remote device, comprising:

a verification module configured to determine, in part, if the remote device is authorized to login;

an instruction module configured to concatenate data from the login request and a server response based on the determination from the verification module; and

a communication interface configured to receive the login request from the remote device and configured to send the concatenation to the remote device.

15. The system of claim 14 further comprising a device identifier module configured to determine a device identifier associated with the remote device.

16. The system of claim 15 further comprising at least one database storing remote device information, the device identifier being used to look up status of the remote device in the at least one database.

17. The system of claim 14 further comprising a challenge module configured to generate a device challenge to the remote device.

18. The system of claim 14 further comprising a device status module configured to maintain and access remote device status information stored in one or more databases.

19. The system of claim 14 wherein the server response comprises instructions to allow login of the remote device.

20. The system of claim 14 wherein the server response comprises instruction to not allow login of the remote device.

21. The system of claim 14 wherein the server response comprises instructions to destroy data on the remote device.

22. A machine-readable medium having embodied thereon a program, the program comprising instructions operable by a processor for providing a method for authorizing a login request of a remote device, comprising:

receiving the login request from the remote device at an authentication server;

determining if the remote device is authorized to login by the authentication server;

concatenating data from the login request and a server response based on the determination of whether the remote device is authorized to login; and

sending the concatenation to the remote device.