Automatic reset for time-based credentials on a mobile device

• US 9,106,645 B1
• Filed: 01/26/2012
• Issued: 08/11/2015
• Est. Priority Date: 01/26/2011
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Vadlamani, Ananta Krishna
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): Giddins, Nelson
• Application Number:
  US13/358,749
• Time in Patent Office: 1,293 Days
• Field of Search: 726/6
• US Class Current: 1/1
• CPC Class Codes: G06F 1/12 Synchronisation of different clock signals provided by a plurality of clock generators
• CPC Class Codes: G06F 1/14 Time supervision arrangements, e.g. real time clock
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: G06F 9/4825 Interrupt from clock, e.g. time of day
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords

Abstract

Embodiments of the present disclosure may provide methods and devices capable of synchronizing time between a credential device and an authentication service. In an embodiment, a change in a time value on a device may be detected. A time value may be retrieved from an authentication service, and a new time value generated based upon at least the time value retrieved from the authentication service. The new time value may be used to set a time value at the device, and/or to generate a time-based credential.

Claims

1. A method of synchronizing time between a device and an authentication service, the method comprising:

detecting, by an event handler executing on a processor on the device, a change in a time value on the device on a periodic basis and the periodic basis is set to reduce a battery drain of the device, wherein;

the detecting comprises capturing an adjustment to the time value on the device through a callback to the event handler when the change in the time value occurs;

accumulating a plurality of time changes to the time value on the device;

determining a total time difference based on the plurality of time changes to the time value on the device;

determining that the total time difference exceeds a credential mismatch time value; and

retrieving, by the processor, a time value from an authentication service when the total time difference in the time value on the device exceeds the credential mismatch time value;

generating, by the processor, a new time value based on at least the time value retrieved from the authentication service; and

generating, by a software-based credential application executing by the processor, a time-based credential based on the new time value.

2. A method as recited in claim 1, wherein the new time value is based on the time value on the device, and a difference between the time value on the device and the time value retrieved from the authentication service.

3. A method as recited in claim 1, further comprising setting the time value of the device based on the new time value.

4. A method as recited in claim 1, wherein the new time value is equal to the time value retrieved from the authentication service, the method further comprising setting the time value of the device to be equal to the new time value.

5. A method as recited in claim 1, wherein the change in the time value on the device is detected based on a call to a registered event handler associated with the time value on the device.

6. A method as recited in claim 1, wherein the time-based credential is a time-based one-time password.

7. A device comprising:

memory to store a clock storing a time value, an event handler, a communication module and a credential generator; and

a processor coupled to the memory, wherein the processor is configured to execute the event handler, the communication module and the credential generator, wherein;

the event handler is to detect a change in the time value on a periodic basis and the periodic basis is set to reduce a battery drain of the device, wherein;

the event handler is to capture an adjustment to the time value on the device through a callback to the event handler when the change in the time value occurs;

accumulate a plurality of time changes to the time value on the device;

determine a total time difference based on the plurality of time changes to the time value on the device;

determine that the total time difference exceeds a credential mismatch time value; and

the communication module is to retrieve a time value from an authentication service when the total time difference in the time value on the device exceeds the credential mismatch time value;

the processor is configured to generate a new time value based on at least the time value retrieved from the authentication service; and

the credential generator is to generate a time-based credential based on the new time value.

8. A device as recited in claim 7, wherein the new time value is based on the time value on the device, and a difference between the time value on the device and the time value retrieved from the authentication service.

9. A device as recited in claim 7, the processor is configured to set the clock with the time value of the device based on the new time value.

10. A device as recited in claim 7, wherein the new time value is equal to the time value retrieved from the authentication service, the processor is configured to set the time value of the device to be equal to the new time value.

11. A device as recited in claim 7, wherein the change in the time value on the device is detected based on a call to the event handler.

12. A device as recited in claim 7, wherein the time-based credential is a time-based, one-time password.

13. A non-transitory computer-readable medium storing a plurality of instructions which when executed cause a processor to perform operations comprising:

detect, by an event handler executing on a processor on the device, a change in a time value on the device on a periodic basis and the periodic basis is set to reduce a battery drain of the device, wherein;

the event handler is to capture an adjustment to the time value on the device through a callback to the event handler when the change in the time value occurs;

accumulate a plurality of time changes to the time value on the device;

determine a total time difference based on the plurality of time changes to the time value on the device;

determine that the total time difference exceeds a credential mismatch time value; and

retrieve, by the processor, a time value from an authentication service when the total time difference in the time value on the device exceeds the credential mismatch time value;

generate, by the processor, a new time value based on at least the time value retrieved from the authentication service; and

generate, by a software-based credential application executing by the processor, a time-based credential based on the new time value.