Recovery mechanism for fault-tolerant split-server passcode verification of one-time authentication tokens

• US 9,350,545 B1
• Filed: 06/30/2014
• Issued: 05/24/2016
• Est. Priority Date: 06/30/2014
• Status: Active Grant

• Current Assignee: RSA Security LLC (Symphony Technology Group LLC)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Triandopoulos, Nikolaos, Brainard, John
• Primary Examiner(s): Gee, Jason K.
• Assistant Examiner(s): Zhu, Zhimei
• Application Number:
  US14/319,417
• Time in Patent Office: 694 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A recovery mechanism is provided for split-server passcode verification systems. An exemplary server-centric recovery scheme enables the system to respond to authentication attempts even if an authentication server is unavailable. The exemplary server-centric recovery scheme allows a periodic exchange of encrypted partial secret states among the authentication servers. Recovery occurs by allowing the decryption of the encrypted partial secret state that corresponds to the server that is unresponsive. An exemplary token-centric recovery scheme comprises determining that a first authentication server is unavailable; applying an authentication mechanism to a message requesting a token to change to a new split-state mode; and sending the authenticated message to the token.

Claims

1. A recovery method for a split-server passcode verification system comprising a plurality of authentication servers, said recovery method comprising:

determining that a first one of said plurality of authentication servers is unavailable;

instructing a second one of said plurality of authentication servers to enter a recovery mode based on the determination that the first one of said plurality of authentication servers is unavailable, wherein prior to said first authentication server becoming unavailable, at least one of said first and second authentication servers provide a respective secret key used to protect a partial secret state to a relying party and said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server;

obtaining said encrypted partial secret state of said first authentication server from said second authentication server;

decrypting said received said encrypted partial secret state of said first authentication server to recover said partial secret state of said first authentication server; and

employing said recovered partial secret state of said first authentication server to perform a split-server passcode verification of at least one user with said second authentication server.

2. The method of claim 1, wherein said step of employing said recovered partial secret state of said first authentication server to perform said split-server passcode verification is performed until one or more of said first authentication server is available and a replacement authentication server is initiated.

3. The method of claim 1, wherein said first and second authentication servers exchange an encrypted version of said respective partial secret stat.

4. The method of claim 1, further comprising the steps of generating secret keys sk_B,t, sk_R,t for said first and second authentication servers, respectively;

obtaining a respective partial secret state σ

_B,t, σ

_R,t from said first and second authentication servers, respectively;

encrypting said respective partial secret states σ

_B,t, σ

_R,t using at least one encryption key; and

providing each of said encrypted versions c_B,t, c_R,t of said respective partial secret state σ

_B,t, σ

_R,t to the other of said authentication servers.

5. The method of claim 1, wherein said at least one of said first and second authentication servers provide a respective secret key used to protect a partial secret state to a relying party and said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server substantially simultaneously with a proactivization process.

6. The method of claim 1, wherein said first and second authentication servers provide an “

aliveness”

message to at least one other server.

7. The method of claim 1, wherein each of said encrypted partial secret states is encrypted under an independent master secret key unknown to said authentication server receiving said encrypted partial secret state.

8. The method of claim 1, wherein said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server at a recovery state update rate.

9. An apparatus in a split-server passcode verification system comprising a plurality of authentication servers, comprising:

a memory; and

at least one hardware device, coupled to the memory, operative to implement the following steps;

determining that a first one of said plurality of authentication servers is unavailable;

instructing a second one of said plurality of authentication servers to enter a recovery mode based on the determination that the first one of said plurality of authentication servers is unavailable, wherein prior to said first authentication server becoming unavailable, at least one of said first and second authentication servers provide a respective secret key used to protect a partial secret state to a relying party and said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server;

obtaining said encrypted partial secret state of said first authentication server from said second authentication server;

decrypting said received said encrypted partial secret state of said first authentication server to recover said partial secret state of said first authentication server; and

employing said recovered partial secret state of said first authentication server to perform a split-server passcode verification of at least one user with said second authentication server.

10. The apparatus of claim 9 wherein said step of employing said recovered partial secret state of said first authentication server to perform said split-server passcode verification is performed until one or more of said first authentication server is available and a replacement authentication server is initiated.

11. The apparatus of claim 9 wherein said first and second authentication servers exchange an encrypted version of said respective partial secret state.

12. The apparatus of claim 9, wherein said at least one hardware device is further configured to implement the steps of generating secret keys sk_B,t, sk_R,t for said first and second authentication servers, respectively;

obtaining a respective partial secret state σ

_B,t, σ

_R,t from said first and second authentication servers, respectively;

encrypting said respective partial secret states σ

_B,t, σ

_R,t using at least one encryption key; and

providing each of said encrypted versions C_B,t, c_R,t of said respective partial secret state σ

B,t, σ

R,t to the other of said authentication servers.

13. The apparatus of claim 9, wherein said at least one of said first and second authentication servers provide a respective secret key used to protect a partial secret state to a relying party and said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server substantially simultaneously with a proactivization process.

14. The apparatus of claim 9, wherein said first and second authentication servers provide an “

aliveness”

message to at least one other server.

15. The apparatus of claim 9, wherein each of said encrypted partial secret states is encrypted under an independent master secret key unknown to said authentication server receiving said encrypted partial secret state.

16. The apparatus of claim 9, wherein said second authentication server receives an encrypted version of said respective partial secret state of said first authentication server at a recovery state update rate.