TIME-VARYING PASSWORDS FOR USER AUTHENTICATION

• US 20160292413A1
• Filed: 03/30/2015
• Published: 10/06/2016
• Est. Priority Date: 03/30/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Williams, Richard A., Aboujaoude, Roger B.
• Granted Patent: US 9,842,205 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords

Abstract

Time-varying passwords for user authentication are disclosed. Example methods disclosed herein for password generation include obtaining a base password including characters, determining a first character position of the base password at which a first time-varying data element is to be inserted to determine a time-varying password, the first time-varying data element to be computed based on a time-varying parameter, and determining a first offset to be applied to a value of the time-varying parameter to compute the first time-varying data element. Example methods disclosed herein for password evaluation include accessing a base password including characters, applying a first offset to a value of a time-varying parameter to determine a first time-varying data element to be inserted at a first character position of the base password to determine a time-varying password, and comparing the time-varying password with an input password to perform authentication based on the input password.

Claims

1. A method for password generation, the method comprising:

obtaining, with a processor, a base password including a plurality of characters;

determining, with the processor, a first character position of the base password at which a first time-varying data element is to be inserted to determine a time-varying password, the first time-varying data element to be computed by a computing device based on a time-varying parameter; and

determining, with the processor, a first offset to be applied by the computing device to a value of the time-varying parameter to compute the first time-varying data element.

2. The method of claim 1, further including determining a data format for the value of the time-varying parameter, the data format being one of a plurality of possible data formats for representing values of the time-varying parameter.

4. The method of claim 2, wherein the data format is a first data format, and further including:

determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed by the computing device based on the time-varying parameter;

determining a second offset different from the first offset to be applied by the computing device to the value of the time-varying parameter to compute the second time-varying data element; and

determining a second data format from the plurality of possible data formats to be applied by the computing device to the value of the time-varying parameter to compute the second time-varying data element.

5. The method of claim 1, wherein the time-varying parameter is a first time-varying parameter, and further including determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed by the computing device based on a second time-varying parameter different from the first time-varying parameter.

6. The method of claim 5, wherein the first time-varying parameter is a time-of-day parameter determined based on a system clock of the computing device, and the second time-varying parameter is a day-of-month parameter determined based on the system clock of the computing device.

7. The method of claim 1, wherein the value of the time-varying parameter is to be represented by a first numerical value, and the offset is a second numerical value to be added to the value of the time-varying parameter to compute the first time-varying data element.

9. The method of claim 1, further including:

presenting a user interface to permit entry of the base password, the first character position, the time-varying parameter and the first offset; and

storing the base password, the first character position, the time-varying parameter and the first offset to permit determination of the time-varying password by the computing device.

3. (canceled)

8. (canceled)

10. A tangible machine readable storage medium comprising machine readable instructions which, when executed, cause a machine to perform operations comprising:

obtaining a base password including a plurality of characters;

determining a first character position of the base password at which a first time-varying data element is to be inserted to determine a time-varying password, the first time-varying data element to be computed based on a time-varying parameter;

and determining a first offset to be applied to a value of the time-varying parameter to compute the first time-varying data element.

11. The tangible machine readable storage medium of claim 10, wherein the operations further include determining a data format for the value of the time-varying parameter, the data format being one of a plurality of possible data formats for representing values of the time-varying parameter.

13. The tangible machine readable storage medium of claim 11, wherein the data format is a first data format, and the operations further include:

determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed based on the time-varying parameter;

determining a second offset different from the first offset to be applied to the value of the time-varying parameter to compute the second time-varying data element; and

determining a second data format from the plurality of possible data formats to be applied to the value of the time-varying parameter to compute the second time-varying data element.

14. The tangible machine readable storage medium of claim 10, wherein the time-varying parameter is a first time-varying parameter, and the operations further include determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed based on a second time-varying parameter different from the first time-varying parameter.

15. The tangible machine readable storage medium of claim 14, wherein the first time-varying parameter is a time-of-day parameter determined based on a system clock, and the second time-varying parameter is a day-of-month parameter determined based on the system clock.

16. The tangible machine readable storage medium of claim 10, wherein the value of the time-varying parameter is to be represented by a first numerical value, and the offset is a second numerical value to be added to the value of the time-varying parameter to compute the first time-varying data element.

18. The tangible machine readable storage medium of claim 10, wherein the operations further include:

presenting a user interface to permit entry of the base password, the first character position, the time-varying parameter and the first offset; and

storing the base password, the first character position, the time-varying parameter and the first offset to permit determination of the time-varying password.

12. (canceled)

17. (canceled)

19. An apparatus for password generation, the apparatus comprising:

a memory including machine readable instructions; and

a processor to execute the machine readable instructions to perform operations including;

obtaining a base password including a plurality of characters;

determining a first character position of the base password at which a first time-varying data element is to be inserted to determine a time-varying password, the first time-varying data element to be computed based on a time-varying parameter; and

determining a first offset to be applied to a value of the time-varying parameter to compute the first time-varying data element.

20. The apparatus of claim 19, wherein the operations further include determining a data format for the value of the time-varying parameter, the data format being one of a plurality of possible data formats for representing values of the time-varying parameter.

22. The apparatus of claim 20, wherein the data format is a first data format, and the operations further include:

determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed based on the time-varying parameter;

determining a second offset different from the first offset to be applied to the value of the time-varying parameter to compute the second time-varying data element; and

determining a second data format from the plurality of possible data formats to be applied to the value of the time-varying parameter to compute the second time-varying data element.

23. The apparatus of claim 19, wherein the time-varying parameter is a first time-varying parameter, and the operations further include determining a second character position of the base password at which a second time-varying data element is to be inserted to determine the time-varying password, the second time-varying data element to be computed based on a second time-varying parameter different from the first time-varying parameter.

24. The apparatus of claim 23, wherein the first time-varying parameter is a time-of-day parameter determined based on a system clock, and the second time-varying parameter is a day-of-month parameter determined based on the system clock.

27. The apparatus of claim 19, wherein the operations further include:

presenting a user interface to permit entry of the base password, the first character position, the time-varying parameter and the first offset; and

storing the base password, the first character position, the time-varying parameter and the first offset to permit determination of the time-varying password.

21. (canceled)

25. (canceled)

26. (canceled)

28-57. -57. (canceled)