Patent · US Expired

Efficient and secure authentication of computing systems

US7549048B2 · kind B2 · utility

31Cited by
26References
22Claims
0Family size

Assignee

Inventors

Key dates

Filing dateMar 19, 2004
Grant dateJun 16, 2009
Priority date
Expiry dateFeb 8, 2026

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/166
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

The principles of the present invention relate to systems, methods, and computer program products for more efficiently and securely authenticating computing systems. In some embodiments, a limited use credential is used to provision more permanent credentials. A client receives a limited-use (e.g., a single-use) credential and submits the limited-use credential over a secure link to a server. The server provisions an additional credential (for subsequent authentication) and sends the additional credential to the client over the secure link. In other embodiments, computing systems automatically negotiate authentication methods using an extensible protocol. A mutually deployed authentication method is selected and secure authentication is facilitated with a tunnel key that is used encrypt (and subsequently decrypt) authentication content transferred between a client and a server. The tunnel key is derived from a shared secret (e.g., a session key) and nonces.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.