IP Library › Granted Patent US 11,297,064
Granted Patent B2
US 11,297,064 · App. 16/595,361 · Granted Apr 5, 2022

Blockchain authentication via hard/soft token verification

Inventors: Luis Angel D. Bathen (Placentia, CA); Gabor Madl (San Jose, CA); Ramani Routray (San Jose, CA)
Assignee: International Business Machines Corporation
H04L63/102H04L9/0866H04L9/30H04L9/3231H04L9/3234H04L9/3239H04L9/3247H04L9/3271H04L63/0428H04L63/083H04L63/0838H04L63/0853H04L63/101H04L63/20H04L2209/38H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,297,064
App. No.
16/595,361
Granted
Apr 5, 2022
Kind
B2
Abstract

An example operation may include one or more of storing a public key and one or more corresponding addresses associated with a user profile in a blockchain, creating a credential for the user profile based on the public key, forwarding the credential to the one or more addresses, receiving a request for access to a site from a user device associated with the user profile, and retrieving the credential based on the one or more addresses from the blockchain.

Claims (44)

1. A method, comprising:

creating a smart contract based credential for a user authentication factor associated with a public key stored at an address in a blockchain, the address associated with a user device; and

executing, in response to a request to access a site from the user device associated with the user authentication factor, a smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address.

2. The method of claim 1 , wherein the executing a smart contract includes determining a subset of authentication factors.

3. The method of claim 1 , further comprising:

creating the smart contract based credential within a limited time window.

4. The method of claim 1 , comprising:

storing one or more addresses associated with the user authentication factor, wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

5. The method of claim 1 , wherein the request to access to a site comprises the plurality of addresses locations.

6. The method of claim 1 , further comprising:

responsive to receiving the request, transmitting an encrypted message to the user device; and

receiving a decrypted message based on the encrypted message.

7. The method of claim 6 , further comprising:

comparing decrypted message content of the decrypted message to encrypted message content of the encrypted message; and

verifying the smart contract based credential is valid based on the decrypted message content matching the encrypted message content, and if so, granting access to the user device.

8. An apparatus, comprising:

a hardware processor configured to:

create a smart contract based credential for a user authentication factor associated with a public key stored at an address in a blockchain, the address associated with a user device; and

execute, in response to a request to access a site from the user device associated with the user authentication factor, a smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address.

9. The apparatus of claim 8 , wherein, when the processor is configured to execute the smart contract, the processor is further configured to:

determine a subset of authentication factors.

10. The apparatus of claim 8 , the processor is further configured to:

create the smart contract based credential within a limited time window.

11. The apparatus of claim 8 , wherein the processor is configured to:

store one or more addresses associated with the user authentication factor, wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

12. The apparatus of claim 11 , wherein the request to access to a site comprises the plurality of addresses locations.

13. The apparatus of claim 8 , wherein the processor is further configured to:

responsive to the request being received, forward an encrypted message to the user device; and

receive a decrypted message based on the encrypted message.

14. The apparatus of claim 13 , wherein the processor is further configured to:

compare decrypted message content of the decrypted message to encrypted message content of the encrypted message; and

verify the smart contract based credential is valid based on the decrypted message content matching the encrypted message content.

15. A non-transitory computer readable storage medium configured to store one or more instructions that when executed by a processor cause the processor to perform:

creating a smart contract based credential for a user authentication factor associated with a public key stored at an address in a blockchain; the address associated with a user device; and

executing, in response to a request to access a site from the user device associated with the user authentication factor, a smart contract corresponding with the smart contract based credential to determine a type of access credential required for access to the site based on the address.

16. The non-transitory computer readable storage medium of claim 15 , wherein the executing a smart contract includes determining a subset of authentication factors.

17. The non-transitory computer readable storage medium of claim 15 , wherein the one or more instructions further cause the processor to perform:

creating the smart contract based credential within a limited time window.

18. The non-transitory computer readable storage medium of claim 17 , wherein the one or more instructions further cause the processor to perform:

storing one or more addresses associated with the user authentication factor, wherein the one or more addresses comprise a plurality of address locations corresponding to a plurality of smart contract based credentials over a plurality of access attempt iterations.

19. The non-transitory computer readable storage medium of claim 15 , wherein the request to access to a site comprises the plurality of addresses locations.

20. The non-transitory computer readable storage medium of claim 15 , wherein the one or more instructions further cause the processor perform:

responsive to receiving the request, transmitting an encrypted message to the user device; and

receiving a decrypted message based on the encrypted message.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 7, 2019
From: BATHEN, LUIS ANGEL D.; MADL, GABOR; ROUTRAY, RAMANI
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050646/0370 →
Continuity (2)
Continuation 15660756 · Jul 26, 2017
Related Publication 20200045051A1 · Feb 6, 2020
Cited By (1)
US 12,744,774