System and method of secure authentication information distribution
View Patent ↗A system and method of distributing authentication information for remotely accessing a computer resource. A request for authentication information, including identity information, is received from a user of a remote device. When the user is authenticated based on the identity information, requested authentication information is retrieved and returned to the remote device. The authentication information, or information generated from the authentication information, is then used for remotely accessing the computer resource.
1. A communications device comprising:
a processor configured to transmit a seed request to a network device, the seed request including an access code, identity information corresponding to a particular seed associated with a user, user authentication information, and a digital signature, wherein the access code is configured to match a second access code calculable using the particular seed,
wherein the processor is further configured to receive the particular seed from the network device and use the particular seed to access a network.
2. The communications device of claim 1 , wherein the seed request comprises a Hypertext Transfer Protocol (HTTP) connection request.
3. The communications device of claim 1 , wherein the identity information comprises user information and account information.
4. The communications device of claim 1 , wherein the identity information is used by the communications device for two-factor authentication.
5. The communications device of claim 4 , wherein the identity information comprises a network password entered by the user of the communications device and wherein the digital signature is generated based on a transformation of at least a portion of the information in the seed request, a signature key, and a signature algorithm.
6. The communications device of claim 1 , wherein the communications device uses the retrieved seed to gain access to a corporate local area network (LAN).
7. The communications device of claim 1 , wherein the remote device comprises a wireless mobile communication device.
8. A network device comprising a processor configured to:
receive authentication information comprising a first access code and identity information corresponding to a particular seed associated with a user;
authenticate the received authentication information;
retrieve the particular seed corresponding to the user associated with the first access code after authenticating the received authentication information;
generate a second access code using the particular seed;
compare the first access code and the second access code; and
responsive to the first and second access codes matching, cause the particular seed to be transmitted to a remote device, wherein the particular seed is configured to allow the remote device to access a network.
9. The network device of claim 8 wherein the network is a wireless communications network.
10. A method implemented in a communications device comprising a processor, the method comprising:
transmitting a seed request, the seed request including an access code, identity information corresponding to a particular seed associated with a user, user authentication information, and a digital signature, wherein the access code is configured to match a second access code calculable using the particular seed,
receiving the particular seed; and
using the particular seed to access a network.
11. A method implemented in a network device comprising a processor, the method comprising:
receiving authentication information comprising a first access code and identity information corresponding to a particular seed associated with a user;
authenticating the authentication information;
retrieving the particular seed corresponding to the user associated with the first access code when the authentication information is authenticated;
generating a second access code using the particular seed;
comparing the first access code and the second access code; and
responsive to the first and second access codes matching, transmitting the particular seed to a remote device, wherein the particular seed is configured to allow the remote device to access a network.
12. The method of claim 11 wherein the network is a wireless communications network.