IP Library › Granted Patent US 10,476,879
Granted Patent B2
US 10,476,879 · App. 15/660,756 · Granted Nov 12, 2019

Blockchain authentication via hard/soft token verification

Inventors: Luis Angel D. Bathen (Placentia, CA); Gabor Madl (San Jose, CA); Ramani Routray (San Jose, CA)
Assignee: International Business Machines Corporation
H04L63/102H04L9/30H04L9/3234H04L9/3239H04L63/0428H04L63/083H04L63/0838H04L63/0853H04L63/101H04L63/20H04L2209/38H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,476,879
App. No.
15/660,756
Filed
Jul 26, 2017
Granted
Nov 12, 2019
Kind
B2
Art Unit
2432
USPC
726/4
Abstract

An example operation may include one or more of storing a public key and one or more corresponding addresses associated with a user profile in a blockchain, creating a credential for the user profile based on the public key, forwarding the credential to the one or more addresses, receiving a request for access to a site from a user device associated with the user profile, and retrieving the credential based on the one or more addresses from the blockchain.

Claims (39)

1. A method, comprising:

storing a public key and one or more corresponding addresses associated with a user authentication factor in a blockchain;

creating a smart contract based credential for the user authentication factor associated with the public key;

receiving a request for access to a site from a user device associated with the user authentication factor; and

executing the smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address being used on the blockchain.

2. The method of claim 1 , wherein the executing the smart contract includes determining a subset of authentication factors.

3. The method of claim 1 , wherein the smart contract based credential is created within a limited time window.

4. The method of claim 3 , wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

5. The method of claim 4 , wherein the request comprises the plurality of addresses locations.

6. The method of claim 1 , further comprising:

responsive to receiving the request, transmitting an encrypted message to the user device; and

receiving a decrypted message based on the encrypted message.

7. The method of claim 6 , further comprising:

comparing decrypted message content of the decrypted message to encrypted message content of the encrypted; and

when the decrypted message content matches the encrypted message content, then verifying the smart contract based credential is valid, and if so, granting access to the user device.

8. An apparatus, comprising: a hardware processor configured to: store a public key and one or more corresponding addresses associated with a user authentication factor in a blockchain; create a smart contract based credential for the user authentication factor associated with the public key; a receiver configured to receive a request for access to a site from a user device associated with the user authentication factor; and wherein the processor is further configured to execute the smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address being used on the blockchain.

9. The apparatus of claim 8 , wherein the processor configured to execute the smart contract includes the processor being configured to determine a subset of authentication factors.

10. The apparatus of claim 8 , wherein the smart contract based credential is created within a limited time window.

11. The apparatus of claim 10 , wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

12. The apparatus of claim 11 , wherein the request comprises the plurality of addresses locations.

13. The apparatus of claim 8 , wherein the processor is further configured to:

responsive to the request being received, forward an encrypted message to the user device, and wherein the receiver is further configured to receive a decrypted message based on the encrypted message.

14. The apparatus of claim 13 , wherein the processor is further configured to:

compare decrypted message content of the decrypted message to encrypted message content of the encrypted; and

when the decrypted message content matches the encrypted message content, then verify the smart contract based credential is valid, and if so, granting access to the user device.

15. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:

storing a public key and one or more corresponding addresses associated with a user authentication factor in a blockchain;

creating a smart contract based credential for the user authentication factor associated with the public key;

receiving a request for access to a site from a user device associated with the user authentication factor; and

executing the smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address being used on the blockchain.

16. The non-transitory computer readable storage medium of claim 15 , wherein the executing the smart contract includes determining a subset of authentication factors.

17. The non-transitory computer readable storage medium of claim 15 , wherein the smart contract based credential is created within a limited time window.

18. The non-transitory computer readable storage medium of claim 17 , wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

19. The non-transitory computer readable storage medium of claim 18 , wherein the request comprises the plurality of addresses locations.

20. The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:

responsive to receiving the request, transmitting an encrypted message to the user device;

receiving a decrypted message based on the encrypted message;

comparing decrypted message content of the decrypted message to encrypted message content of the encrypted; and

when the decrypted message content matches the encrypted message content, then verifying the smart contract based credential is valid, and if so, granting access to the user device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 26, 2017
From: BATHEN, LUIS ANGEL D.; MADL, GABOR; ROUTRAY, RAMANI
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 043106/0141 →
Continuity (1)
Related Publication 20190036932A1 · Jan 31, 2019
Cited By (1)
US 12,423,700