Password-Based Generation and Management of Secret Cryptographic Keys

• US 20170373846A1
• Filed: 08/18/2017
• Published: 12/28/2017
• Est. Priority Date: 08/26/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: CAMENISCH, Jan, ENDERLEIN, Robert, KRENN, Stephan, LEHMANN, Anja, NEVEN, Gregory
• Granted Patent: US 10,057,060 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067

Abstract

A user computer generates a secret cryptographic key through communication with a server. A secret user value is provided at the user computer. A secret server value is provided at the server with a check value which encodes the secret user value and a user password. In response to input of an input password, the user computer encodes the secret user value and the input password to produce a first value corresponding to said check value, and communicates the first value to the server. The server compares the first value and check value to check whether the input password equals the user password. If so, the server encodes the first value and secret server value to produce a second value and communicates the second value to the user computer. The user computer generates the secret cryptographic key by encoding the second value, the input password and the secret user value.

Claims

1. A user computer, comprising:

a memory having computer readable program instructions;

a processor, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising;

communicating by the user computer with a server via a network to generate a secret cryptographic key of the user computer, the server storing a secret server value and a check value which encodes a secret user value of the user computer and a user password, the communicating comprising;

encoding, in response to input via the user interface of an input password, the secret user value and the input password to produce a first value corresponding to the check value, and to communicate the first value to the server via the communications interface;

generating, in response to communication by the server of a second value produced by encoding the first value and the secret server value, the secret cryptographic key by encoding the second value, the input password and the secret user value; and

performing, using the secret cryptographic key, a cryptographic operation on data.

2. The user computer of claim 1, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform deleting the input password, the first value, the second value and the secret cryptographic key after performing the cryptographic operation on the data.

3. The user computer of claim 2, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising:

regenerating, after deleting, the input password, the first value, the second value and the secret cryptographic key, the regenerating using the encoding, the secret user value and the input password to produce a first value corresponding to the check value, communicating the first value to the server via the communications interface, and the generating, in response to communication by the server of a second value produced by encoding the first value and the secret server value, the secret cryptographic key by encoding the second value, the input password and the secret user value; and

decrypting the data previously encrypted using the regenerated secret cryptographic key.

4. The user computer of claim 1, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising:

providing a user identifier for uniquely identifying the user computer to the server, communicating the user identifier to the server with the first value; and

encoding the user identifier in the first value.

5. The user computer of claim 4, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising:

retrieving a server identifier and encoding the server identifier in the first value; and

encoding the server identifier in the cryptographic key.

6. The user computer of claim 1, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising:

providing a user identifier for uniquely identifying the user computer to the server, and

encoding the user identifier in the cryptographic key.

7. The user computer of claim 1, wherein the communicating by the user computer with a server via a network to generate a secret cryptographic key of the user computer further comprises:

establishing, via interaction of the user computer and the server, a secure channel over the network, wherein the communicating by the user computer and server is conducted over the secure channel.

8. The user computer of claim 1, wherein:

encoding the secret user value and the input password is performed using a hash function to perform the encoding; and

generating the secret cryptographic key is performed by encoding the second value, the input password and the secret user value via the hash function.

17. The method of claim 2, further comprising:

regenerating, after deleting, the input password, the first value, the second value and the secret cryptographic key, the regenerating using the encoding, the secret user value and the input password to produce a first value corresponding to the check value, communicating the first value to the server via the communications interface, and the generating, in response to communication by the server of a second value produced by encoding the first value and the secret server value, the secret cryptographic key by encoding the second value, the input password and the secret user value; and

decrypting the data previously encrypted using the regenerated secret cryptographic key.

9. A server, comprising:

a memory having computer readable program instructions and storing a secret user value, a secret server value and a check value which encodes the secret user value and a user password;

a processor, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the user computer to perform operations comprising;

communicating by the server with a user computer for use in generating a secret cryptographic key of the user computer, which is connectable to the server via a network, the communicating comprising;

comparing, in response to receipt from the user computer of a first value which corresponds to the check value and encodes the secret user value and an input password, the first value and the check value to check whether the input password equals the user password;

encoding, in response to the input password equaling the user password, the first value and the secret server value to produce a second value; and

communicating the second value to the user computer, the second value to be used by the user computer for use in generating the secret cryptographic key of the user computer.

10. The server of claim 9, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the server to perform operations comprising:

receiving from the user computer a user identifier for uniquely identifying the user computer to the server, and

encoding the user identifier in the second value.

11. The server of claim 9, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the server to perform operations comprising:

providing a server identifier for uniquely identifying the server to the user computer;

encoding the server identifier in the second value.

12. The server of claim 9, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the server to perform operations comprising:

establishing, via interaction of the server and the user computer, a secure channel over the network, wherein the communicating by the server and user computer is conducted over the secure channel.

13. The server of claim 9, wherein the processor, in response to retrieval and execution of the computer readable program instructions, causes the server to perform operations comprising:

implementing a throttling mechanism in dependence on whether the input password equals the user password.

14. The server of claim 9, wherein:

the check value encodes the secret user value and the user password via a hash function; and

encoding the second value is performed by encoding the first value and the secret server value via the hash function.

15. A method, comprising:

communicating by a user computer with a server via a network to generate a secret cryptographic key of the user computer, the server storing a secret server value and a check value which encodes a secret user value of the user computer and a user password, the communicating comprising;

encoding, in response to input via the user interface of an input password, the secret user value and the input password to produce a first value corresponding to the check value, and to communicate the first value to the server via the communications interface;

generating, in response to communication by the server of a second value produced by encoding the first value and the secret server value, the secret cryptographic key by encoding the second value, the input password and the secret user value; and

performing, using the secret cryptographic key, a cryptographic operation on data.

16. The method of claim 15, further comprising deleting the input password, the first value, the second value and the secret cryptographic key after performing the cryptographic operation on the data.

18. The method of claim 15, further comprising:

providing a user identifier for uniquely identifying the user computer to the server, communicating the user identifier to the server with the first value; and

encoding the user identifier in the first value.

19. The method of claim 18, further comprising:

retrieving a server identifier and encoding the server identifier in the first value; and

encoding the server identifier in the cryptographic key.

20. The method of claim 15, further comprising:

providing a user identifier for uniquely identifying the user computer to the server; and

encoding the user identifier in the cryptographic key.