Default account authentication
One embodiment provides a method, including: receiving, at a remote device and from a user, a request to generate a one-time password for accessing a default account of a device, wherein the remote device comprises a device public key corresponding to the device and an account public/private key pair corresponding to the default account; generating, at the remote device, the one-time password utilizing the account private key and the device public key; and providing, from the remote device, the one-time password to the user. Other aspects are described and claimed.
1. A method, comprising:
receiving, at a remote device and from a user, a request to generate a one-time password for accessing a default account of a device, wherein the remote device comprises a device public key corresponding to the device and an account public/private key pair corresponding to the default account;
generating, at the remote device, the one-time password utilizing the account private key and the device public key; and
providing, from the remote device, the one-time password to the user.
2. The method of claim 1 , wherein the receiving a request comprises receiving user credentials associated with the remote device and authenticating the user at the remote device.
3. The method of claim 1 , wherein the generating the one-time password utilizes a timestamp.
4. The method of claim 1 , wherein the remote device stores device public keys for a plurality of devices.
5. The method of claim 1 , wherein the receiving a request comprises receiving an identification of the device; and
wherein the device public key utilized in the generating comprises a public key corresponding to the identified device.
6. The method of claim 1 , wherein the receiving a request comprises receiving an identification of the default account; and
wherein the account private key utilized in the generating comprises a private key corresponding to the identified default account.
7. The method of claim 1 , wherein each of the device public key and the account private key comprise elliptic curve cryptography keys.
8. The method of claim 1 , wherein the device public key is exported to the remote device during manufacture of the device.
9. The method of claim 1 , wherein the generating the one-time password comprises utilizing at least one one-time password algorithm selected from the group consisting of: Elliptic Curve Diffie-Hellman key agreement algorithm, time based one-time password algorithm, and hash based one-time password algorithm.
10. The method of claim 1 , wherein the one-time password is not stored on either the remote device or the device.
11. An information handling device, comprising:
a processor;
a memory device that stores instructions executable by the processor to:
receive, at a remote device and from a user, a request to generate a one-time password for accessing a default account of a device, wherein the remote device comprises a device public key corresponding to the device and an account public/private key pair corresponding to the default account;
generate, at the remote device, the one-time password utilizing the account private key and the device public key; and
provide, from the remote device, the one-time password to the user.
12. The information handling device of claim 11 , wherein the instructions to receive a request comprise instructions to receive user credentials associated with the remote device and authenticating the user at the remote device.
13. The information handling device of claim 11 , wherein the instructions to generate the one-time password utilizes a timestamp.
14. The information handling device of claim 11 , wherein the remote device stores device public keys for a plurality of devices;
wherein the receiving a request comprises receiving an identification of the device; and
wherein the device public key utilized in the generating comprises a public key corresponding to the identified device.
15. The information handling device of claim 11 , wherein the instructions to receive a request comprises instructions to receive an identification of the default account; and
wherein the account private key utilized in the generating comprises a private key corresponding to the identified default account.
16. The information handling device of claim 11 , wherein each of the device public key and the account private key comprise elliptic curve cryptography keys.
17. The information handling device of claim 11 , wherein the device public key is exported to the remote device during manufacture of the device.
18. The information handling device of claim 11 , wherein the instructions to generate the one-time password comprises utilizing at least one one-time password algorithm selected from the group consisting of: Elliptic Curve Diffie-Hellman key agreement algorithm, time based one-time password algorithm, and hash based one-time password algorithm.
19. The information handling device of claim 11 , wherein the one-time password is not stored on either the remote device or the device.
20. A product, comprising:
a storage device that stores code, the code being executable by a processor and comprising:
code that receives, at a remote device and from a user, a request to generate a one-time password for accessing a default account of a device, wherein the remote device comprises a device public key corresponding to the device and an account public/private key pair corresponding to the default account;
code that generates, at the remote device, the one-time password utilizing the account private key and the device public key; and
code that provides, from the remote device, the one-time password to the user.