Storage and retrieval of dispersed storage network access information
A method includes affiliating an authentication token with user information of a user. The method further includes generating a private/public key pairing associated with the user information. The method further includes applying a share encoding function on a private key of the private/public key pairing to produce a set of encoded shares. The method further includes generating a set of random numbers and generating a set of hidden passwords based on the user information. The method further includes generating a set of encryption keys based on the set of hidden passwords and the set of random numbers. The method further includes encrypting the set of encoded shares utilizing the set of encryption keys to produce a set of encrypted shares. The method further includes outputting the set of encrypted shares to the authentication token for storage therein and outputting the set of random numbers to a set of authenticating units.
1. A method comprises:
affiliating an authentication token with user information of a user;
generating a private/public key pairing associated with the user information;
applying a share encoding function on a private key of the private/public key pairing to produce a set of encoded shares;
generating a set of random numbers;
generating a set of hidden passwords based on the user information;
generating a set of encryption keys based on the set of hidden passwords and the set of random numbers;
encrypting the set of encoded shares utilizing the set of encryption keys to produce a set of encrypted shares;
outputting the set of encrypted shares to the authentication token for storage therein; and
outputting the set of random numbers to a set of authenticating units.
2. The method of claim 1 , wherein the share encoding function comprises at least one of:
a dispersed storage error encoding function; and
a secret sharing function.
3. The method of claim 1 , wherein the generating the set of random numbers comprises:
obtaining a set of base random numbers; and
expanding each base random number of the set of base random numbers based on security parameters to produce the set of random numbers.
4. The method of claim 1 , wherein the generating the set of hidden passwords comprises:
transforming a set of personalized authenticating values of the user information in accordance with a set of transformation functions to produce a set of transformed personalized authenticating values; and
for each password of the set of hidden passwords:
combining, in accordance with a combining function, one of the set of transformed personalized authenticating values with at least one of a constant and another one of the set of transformed personalized authenticating values to produce the password.
5. The method of claim 1 further comprises:
for each encoded share of the set of encoded shares:
generating an encryption key based on a corresponding one of the set of hidden passwords and a corresponding one of the set of random numbers; and
encrypting the encoded share utilizing the encryption key to produce an encrypted share.
6. A managing unit comprises:
a first module, when operable within a computing device, causes the computing device to:
affiliate an authentication token with user information of a user;
generate a private/public key pairing associated with the user information; and
apply a share encoding function on a private key of the private/public key pairing to produce a set of encoded shares;
a second module, when operable within a computing device, causes the computing device to:
generate a set of random numbers;
a third module, when operable within a computing device, causes the computing device to:
generate a set of hidden passwords based on the user information;
a fourth module, when operable within a computing device, causes the computing device to:
generate a set of encryption keys based on the set of hidden passwords and the set of random numbers; and
encrypt the set of encoded shares utilizing the set of encryption keys to produce a set of encrypted shares; and
a fifth module, when operable within a computing device, causes the computing device to:
output the set of encrypted shares to the authentication token for storage therein; and
output the set of random numbers to a set of authenticating units.
7. The managing unit of claim 6 , wherein the share encoding function comprises at least one of:
a dispersed storage error encoding function; and
a secret sharing function.
8. The managing unit of claim 6 , wherein the second module, when operable, generates the set of random numbers by:
obtaining a set of base random numbers; and
expanding each base random number of the set of base random numbers based on security parameters to produce the set of random numbers.
9. The managing unit of claim 6 , wherein the third module, when operable, generates the set of hidden passwords by:
transforming a set of personalized authenticating values of the user information in accordance with a set of transformation functions to produce a set of transformed personalized authenticating values; and
for each hidden password of the set of hidden passwords:
combining, in accordance with a combining function, one of the set of transformed personalized authenticating values with at least one of a constant and another one of the set of transformed personalized authenticating values to produce the hidden password.
10. The managing unit of claim 6 further comprises:
the fourth module is further operable to, for each encoded share of the set of encoded shares:
generate an encryption key based on a corresponding one of the set of hidden passwords and a corresponding one of the set of random numbers; and
encrypt the encoded share utilizing the encryption key to produce an encrypted share.