DYNAMICALLY PROVIDING ALGORITHM-BASED PASSWORD/CHALLENGE AUTHENTICATION

• US 20130055366A1
• Filed: 08/29/2012
• Published: 02/28/2013
• Est. Priority Date: 08/31/2011
• Status: Active Grant

• Current Assignee: Daedalus Blue LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Chao, Winson CW, Lin, Ta-Wei, Suen, Wei-Shiau, Wu, Ming-Hsun, Yu, Ying-Hung
• Granted Patent: US 8,745,712 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Provided are a computer program product, method and system for dynamically providing algorithm-based password/challenge authentication. A page is generated including selectable conversion operators to enable generation of an algorithm that applies at least one selected conversion operator of the selectable conversion operators on a string to generate a password. A created algorithm created using the at least one selected conversion operator in the page is received. The created algorithm is associated with a username for use in authenticating access by a presenter of the username to a computer service.

Claims

1. A computer program product comprising a computer readable storage medium having code executed to perform operations, the operations comprising:

generating a page including selectable conversion operators to enable generation of an algorithm that applies at least one selected conversion operator of the selectable conversion operators on a string to generate a password;

receiving a created algorithm created using the at least one selected conversion operator in the page; and

associating the created algorithm with a username for use in authenticating access by a presenter of the username to a computer service.

2. The computer program product of claim 1, wherein the selectable conversion operators are selected by one of a user at a client computer receiving the page from a server including the computer program product or a user at a computer including the computer program product.

3. The computer program product of claim 1, wherein the page further includes selectable portions of a string, wherein the created algorithm applies the at least one selected conversion operator to at least one selected portion of the selectable portions to generate the password.

4. The computer program product of claim 3, wherein the page further includes selectable destinations to which the selectable portions to which the at least one selected conversion operator are applied are moved in the password.

5. The computer program product of claim 3, wherein the conversion operators to perform on the selected portions of the string include at least one of move, append, convert, add, subtract and square.

6. The computer program product of claim 3, wherein the selectable portions of the string include at least one of all, first, last, and nth of characters, numbers, alphabets, symbols, upper case, or lower case in the string.

7. The computer program product of claim 1, wherein the page comprises a first page, wherein the operations further comprise:

generating a second page including information on the created algorithm and fields to enable confirmation of an operation of the algorithm; and

receiving confirmation of the created algorithm through the second page, wherein the created algorithm is associated with the username in response to receiving confirmation through the second page.

8. The computer program product of claim 7, wherein the fields to enable the confirmation of the operation of the algorithm include a seed value and a field for entry of an entered password, and a generated password resulting from applying the user created algorithm to the seed value, and information indicating whether the entered password matches the generated password.

9. A system, comprising:

a processor; and

a computer readable storage medium having code executed by the processor to perform operations, the operations comprising;

generating a page including selectable conversion operators to enable generation of an algorithm that applies at least one selected conversion operator of the selectable conversion operators on a string to generate a password;

receiving a created algorithm created using the at least one selected conversion operator in the page; and

associating the created algorithm with a username for use in authenticating access by a presenter of the username to a computer service.

10. The system of claim 9, wherein the selectable conversion operators are selected by a user at a computer in communication with the system over a network or a user operating the system.

11. The system of claim 9, wherein the page further includes selectable portions of a string, wherein the created algorithm applies the at least one selected conversion operator to at least one selected portion of the selectable portions to generate the password.

12. The system of claim 11, wherein the page further includes selectable destinations to which the selectable portions to which the at least one selected conversion operator are applied are moved in the password.

13. The system of claim 11, wherein the conversion operators to perform on the selected portions of the string include at least one of move, append, convert, add, subtract and square.

14. The system of claim 11, wherein the selectable portions of the string include at least one of all, first, last, and nth of characters, numbers, alphabets, symbols, upper case, or lower case in the string.

15. The system of claim 9, wherein the page comprises a first page, wherein the operations further comprise:

generating a second page including information on the created algorithm and fields to enable confirmation of an operation of the algorithm; and

receiving confirmation of the created algorithm through the second page, wherein the created algorithm is associated with the username in response to receiving confirmation through the second page.

16. The system of claim 15, wherein the fields to enable the confirmation of the operation of the algorithm include a seed value and a field for entry of an entered password, and a generated password resulting from applying the user created algorithm to the seed value, and information indicating whether the entered password matches the generated password.

17. A method implemented in a computer system, comprising:

generating a page including selectable conversion operators to enable generation of an algorithm that applies at least one selected conversion operator of the selectable conversion operators on a string to generate a password;

receiving a created algorithm created using the at least one selected conversion operator in the page; and

associating the created algorithm with a username for use in authenticating access by a presenter of the username to a computer service.

18. The method of claim 17, wherein the selectable conversion operators are selected by one of a user at a client computer receiving the page from a server that generates the page, receives the created algorithm, and associates the created algorithm or a user at a computer including a computer program that generated the page, received the created algorithm, and associated the created algorithm.

19. The method of claim 17, wherein the page further includes selectable portions of a string, wherein the created algorithm applies the at least one selected conversion operator to at least one selected portion of the selectable portions to generate the password.

20. The method of claim 19, wherein the page further includes selectable destinations to which the selectable portions to which the at least one selected conversion operator are applied are moved in the password.

21. The method of claim 19, wherein the conversion operators to perform on the selected portions of the string include at least one of move, append, convert, add, subtract and square.

22. The method of claim 19, wherein the selectable portions of the string include at least one of all, first, last, and nth of characters, numbers, alphabets, symbols, upper case, or lower case in the string.

23. The method of claim 17, wherein the page comprises a first page, further comprising:

generating a second page including information on the created algorithm and fields to enable confirmation of an operation of the algorithm; and

receiving confirmation of the created algorithm through the second page, wherein the created algorithm is associated with the username in response to receiving confirmation through the second page.

24. The method of claim 23, wherein the fields to enable the confirmation of the operation of the algorithm include a seed value and a field for entry of an entered password, and a generated password resulting from applying the user created algorithm to the seed value, and information indicating whether the entered password matches the generated password.