AUTHENTICATION USING ASYMMETRIC CRYPTOGRAPHY KEY PAIRS

• US 20200136816A1
• Filed: 10/29/2018
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Prasad Nittur, Bhagya, Attaluri, Pattabhi
• Application Number:
  US16/173,544
• Publication Number:
  US 20200136816A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

An example authentication server system comprising: a processor; and a memory resource storing machine readable instructions executable by the processor to: receive an input from a device indicating a request to log into the system; verify the input from the device using an asymmetric cryptography key pair; deny access to the device in response to the input failing to correspond to the asymmetric cryptography key pair; and inactivate an account of the device based on a number of attempt failures exceeding a failure threshold.

Claims

1. An authentication server system comprising:

a processor; and

a memory resource storing machine readable instructions executable by the processor to;

receive an input from a device indicating a request to log into the system;

verify the input from the device using an asymmetric cryptography key pair;

deny access to the device in response to the input failing to correspond to the asymmetric cryptography key pair; and

inactivate an account of the device based on a number of attempt failures exceeding a failure threshold.

2. The authentication server system of claim 1, wherein the input from the device is verified without an additional authentication verification.

3. The authentication server system of claim 1, wherein the account is inactivated for a threshold period of time.

4. The authentication server system of claim 3, wherein the public key of the asymmetric cryptography key pair is copied to the authentication server system.

5. The authentication server system of claim 1, wherein the input from the device is decrypted using an authentication agent.

6. The authentication server system of claim 5, wherein the authentication agent decrypts the private keys.

7. The authentication server system of claim 3, wherein the public key includes a fingerprint box to generate a fingerprint value.

8. The authentication server system of claim 1, wherein failing to correspond to the asymmetric cryptography key pair includes the private key failing to correspond to the public key.

9. The authentication server system of claim 1, wherein the account is inactivated in response to the private key consecutively failing to correspond to the public key.

10. The authentication server system of claim 1, wherein the number of attempted failures exceeding a failure threshold triggers password based authentication.

11. A method comprising:

receiving an input from a device indicating a request to log into a system;

verifying the input from the device using only an asymmetric cryptography key;

denying access to the device in response to;

an account in locked status; and

the locked status below a threshold period of time;

logging a failed event of the asymmetric cryptography key pair in a system log;

monitoring the failed event and stamping the failed event with a failed timestamp; and

inactivating the account based on a number of failed event exceeding a failure threshold.

12. The method of claim 11, wherein the input is verified without using passphrase verification.

13. The method of claim 11, wherein the inactivated account remains inactive for the threshold period of time.

14. The method of claim 11, wherein the failed timestamp is a current time of the failed event recorded by the system.

15. The method of claim 11, wherein the timestamp is a digital timestamp.

16. The method of claim 11, wherein the system log generates a log file based on the failed event information.

17. The method of claim 11, wherein the system tracks time to reactivate the account.

18. A non-transitory machine-readable medium storing instructions executable by a processor to:

receive an input from a device indicating a request to log into a system;

verify the input from the device using only an asymmetric cryptography key pair and without using passphrase verification;

deny access to the device in response to;

an account in locked status; and

the locked status below a threshold period of time;

log a failed event of the asymmetric cryptography key pair in a system log;

monitor the failed event and stamping the failed event with a failed timestamp; and

inactivate the account based on a number of failed event exceeding a failure threshold, wherein the account is inactivated for a threshold period of time.

19. The medium of claim 18, wherein the threshold period of time is fifteen minutes.

20. The medium of claim 18, wherein the asymmetric cryptography key includes a private key to generate digital signatures.