RESETTING AUTHENTICATION TOKENS BASED ON IMPLICIT FACTORS

• US 20150281218A1
• Filed: 03/31/2014
• Published: 10/01/2015
• Est. Priority Date: 03/31/2014
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Bowser, Robert A., Cheston, Richard Wayne, Locker, Howard, Wibran, Goran Hans, Springfield, Randall Scott
• Granted Patent: US 10,075,427 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

For resetting authentication tokens based on implicit credentials, a method is disclosed that includes receiving, by use of a processor, an authentication request, the request requiring an authentication token, the request not including the authentication token, verifying an implicit credential, and resetting the authentication token in response to the implicit credential matching a predefined credential.

Claims

1. An apparatus comprising:

a processor;

a memory that stores code executable by the processor, the code comprising;

code that receives an authentication request, the request requiring an authentication token, the request not including the authentication token;

code that verifies an implicit credential; and

code that resets the authentication token in response to the implicit credential matching a predefined credential.

2. The apparatus of claim 1, wherein the implicit credential is selected or combined from the group consisting of an authentication time, authentication time window, a machine address code, an Internet protocol address, a reset token, authorization from an authority, geographic location, presence of another device and sensor input.

3. The apparatus of claim 2, wherein the sensor input is selected or combined from the group consisting of a microphone, a biometric scanner, RFID reader, and a camera image.

4. The apparatus of claim 2, the code further comprising code that transmits the authentication request to the authority, the predefined credential matches the authorization from the authority.

5. The apparatus of claim 2, wherein the reset token is selected or combined from the group consisting of a name, an identification number, a location, a mascot, and a cryptographic token.

6. The apparatus of claim 1, the code further allows temporary access in response to the authentication request.

7. The apparatus of claim 6, wherein temporary access is limited to a threshold value, the threshold value selected from the group consisting of a threshold number of authentication requests and a threshold amount of time.

8. A method comprising:

receiving, by use of a processor, an authentication request, the request requiring an authentication token, the request not including the authentication token;

verifying an implicit credential; and

resetting the authentication token in response to the implicit credential matching a predefined credential.

9. The method of claim 8, wherein the implicit credential is selected or combined from the group consisting of an authentication time, authentication time window, a machine address code, an Internet protocol address, a reset token, a response from an authority, geographic location, presence of a another device, and sensor input.

10. The method of claim 9, wherein the sensor is selected or combined from the group consisting of a microphone, a biometric scanner, RFID reader and a camera.

11. The method of claim 9, further comprising transmitting the authentication request to the authority and receiving a response from the authority, wherein the predefined credential matches the response from the authority.

12. The method of claim 8, further comprising allowing temporary access in response to the authentication request.

13. The method of claim 12, wherein the temporary access is limited to a threshold value, the threshold value selected from the group consisting of a threshold number of authentication requests and a threshold amount of time.

14. The method of claim 9, wherein the reset token is selected or combined from the group consisting of an identifying name, an identification number, a location, and a cryptographic token.

15. The method of claim 8, wherein before receiving the authentication request, the method further includes learning the implicit credential.

16. A program product comprising a computer readable storage medium that stores code executable by a processor to perform:

receiving an authentication request, the request requiring an authentication token, the request not including the authentication token;

verifying an implicit credential; and

resetting the authentication token in response to the implicit credential matching a predefined credential.

17. The program product of claim 16, wherein the implicit credential is selected or combined from the group consisting of an authentication time, authentication time window, a machine address code, an Internet protocol address, a reset token, a response from an authority, geographic location, presence of a another device, and sensor input.

18. The program product of claim 17, wherein the reset token is selected or combined from the group consisting of an identifying name, an identification number, a location, and a cryptographic token.

19. The program product of claim 17, wherein the sensor is selected or combined from the group consisting of a microphone, a biometric scanner, RFID reader and a camera.

20. The program product of claim 16, the code further allows temporary access in response to the authentication request.