Device authentication via high-entropy token
Briefly, example methods, apparatuses, and/or articles of manufacture may be implemented to authenticate a communicating device via a communications network. One embodiment may include obtaining, at the communicating device, signals representative of one or more high-entropy tokens via the communications network, the one or more high-entropy tokens including one or more component tokens. The method may additionally include encrypting one or more parameters utilizing a first encryption key derived from at least one component token of the one or more component tokens and transmitting, via the communications network, one or more signals representative of the encrypted one or more parameters. The method may further include obtaining, at the communicating device, one or more signals indicating an outcome of a comparison between the one or more encrypted parameters with one or more similar parameters encrypted by an identity verifier.
1. A method of authenticating a communicating device via a communications network, the method comprising:
obtaining, at the communicating device, signals representative of one or more high-entropy tokens via the communications network, the one or more high-entropy tokens comprising one or more component tokens;
encrypting one or more parameters utilizing a first encryption key derived from at least one component token of the one or more component tokens;
transmitting, via the communications network, one or more signals representative of the encrypted one or more parameters; and
obtaining, at the communicating device, one or more signals indicating an outcome of a comparison between the one or more encrypted parameters with one or more similar parameters encrypted by an identity verifier.
2. The method of claim 1 , further comprising generating an additional encryption key based, at least in part, on at least one fresh component token.
3. The method of claim 2 , wherein generating the additional encryption key is based, at least in part, on at least one component token of the one or more component tokens in combination with the at least one fresh component token.
4. The method of claim 3 , wherein transmitting the one or more signals is to indicate that at least one expiring component token, of the one or more component tokens, is expiring within a predetermined time period.
5. The method of claim 4 , further comprising generating at least one fresh high-entropy token based, at least in part, on the at least one fresh component token.
6. The method of claim 5 , wherein generating the at least one fresh high-entropy token comprises:
appending the at least one fresh component token to a high-entropy token of the one or more high-entropy tokens; and
discarding the at least one expiring component token.
7. The method of claim 1 , further comprising:
transmitting one or more signals to indicate at least one expiring component token; and
transmitting a signal representative of a parameter specific to the communicating device.
8. A method of authenticating a communicating device via a communications network, comprising:
determining, via a subscriber identifier, whether the communicating device is a known communicating device operating within the communications network;
transmitting signals representative of one or more high-entropy tokens to the communicating device, the one or more high-entropy tokens comprising one or more component tokens;
obtaining one or more encrypted parameters, the one or more encrypted parameters generated utilizing at least one of the one or more component tokens; and
compare the one or more obtained encrypted parameters with one or more similar parameters encrypted via an identity verifier.
9. The method of claim 8 , further comprising
determining that at least one component token is to expire based, at least in part, on one or more indications from the communicating device that a time-to-live parameter is scheduled to expire within a predetermined time period.
10. The method of claim 9 , further comprising:
responsive to determining that at least one component token has expired, generating a fresh high-entropy token by:
appending at least one fresh component token to a portion of a high-entropy token of the one or more high-entropy tokens; and
discarding the at least one expired component token.
11. The method of claim 9 , wherein the one or more indications from the communicating device are received within a period of no more than 10 days.
12. The method of claim 11 , further comprising:
generating an upgraded trustworthiness score responsive to receiving the one or more indications received within the period of no more than 10 days.
13. The method of claim 9 , further comprising:
revoking a bind between or among the identity verifier and the communicating device responsive to passage of a threshold number of consecutive intervals without receipt of at least one indication, of the one or more indications, from the communicating device.
14. The method of claim 13 , further comprising:
generating a degraded trustworthiness score corresponding to the communicating device responsive to revoking the bind between or among the identity verifier and the communicating device.
15. The method of claim 8 , further comprising:
in response to detecting that a high-entropy token is currently in use by more than one communicating device:
invalidating the high-entropy token.
16. The method of claim 15 , further comprising:
transmitting a one-time password exclusively to a communicating device of the more than one communicating devices; and
transmitting a previously unused high-entropy token to the communicating device of the more than one communicating devices.
17. The method of claim 15 , further comprising:
accessing a data store comprising the subscriber identifier and an Internet protocol address corresponding to the communicating device.
18. The method of claim 8 , further comprising:
authenticating one or more additional communicating devices via:
transmitting a one-time password to the one or more additional communicating devices or to the known communicating device;
establishing a communications link between the one or more additional communicating devices; and
obtaining the one-time password via the established communication link.
19. The method of claim 18 further comprising:
transmitting signals representative of one or more additional high-entropy tokens to the one or more additional communicating devices responsive to authenticating, wherein the one or more additional communicating devices correspond to devices having a universally unique identifier (UUID) assigned by the identity verifier.
20. An apparatus comprising:
a processor coupled to at least one memory device to:
obtain, at a communicating device, signals representative of one or more high-entropy tokens transmitted via a communications network, the one or more high-entropy tokens comprising one or more component tokens;
encrypt, utilizing a first encryption key derived from at least one component token of the one or more component tokens, one or more parameters to be transmitted from the communicating device to an identity verifier;
transmit, via the communications network, one or more signals representative of the encrypted one or more parameters; and
obtain, at the communicating device, one or more signals indicating an outcome of a comparison between the encrypted one or more parameters with one or more similar parameters encrypted by the identity verifier.
21. The apparatus of claim 20 , wherein the processor coupled to the at least one memory is additionally to:
transmit, within a period of no greater than 10 days, one or more indications that at least one component token of the one or more component tokens is to expire within a predetermined time period.
22. The apparatus of claim 20 , wherein the processor coupled to the at least one memory device to transmit one or more signals to indicate at least one expiring component token is additionally to:
transmit a signal representative of a parameter specific to the communicating device.
23. The apparatus of claim 20 , wherein the processor coupled to the at least one memory is additionally to:
generate an additional encryption key based, at least in part, on at least one fresh component token obtained at the communicating device responsive to expiration of at least one component token of the one or more component tokens.
24. The apparatus of claim 23 , wherein the processor coupled to the at least one memory is additionally to:
generate at least one fresh high-entropy token based, at least in part, on the at least one fresh component token.
25. An apparatus to authenticate a communicating device via a communications network, comprising:
a processor coupled to at least one memory to:
recognize, via a subscriber identifier, the communicating device as a known device operating within the communications network;
transmit signals representative of one or more high-entropy tokens to the communicating device, the one or more high-entropy tokens comprising one or more component tokens;
obtain one or more encrypted parameters, the one or more encrypted parameters generated utilizing at least one of the one or more component tokens; and
compare the one or more obtained encrypted parameters with one or more similar parameters encrypted via an identity verifier.
26. The apparatus of claim 25 , wherein the processor coupled to the at least one memory is additionally to:
receive, within a period of no more than 10 days, one or more indications of at least one expiring component token.
27. The apparatus of claim 26 , wherein the processor coupled to the at least one memory is additionally to:
generate an upgraded trustworthiness score responsive to receipt of the one or more indications.
28. The apparatus of claim 26 , wherein the processor coupled to the at least one memory is additionally to:
responsive to detecting expiration of at least one component token of the one or more component tokens, generate a fresh high-entropy token by appending the at least one fresh component token to a portion of a high-entropy token of the one or more high-entropy tokens.
29. The apparatus of claim 25 , wherein the processor coupled to the at least one memory is additionally to:
revoke a bind between or among the identity verifier and the communicating device responsive to passage of a time period greater a threshold number of days without receipt of one or more indications of at least one expiring token.
30. The apparatus of claim 29 , wherein the threshold number of days corresponds to no more than 10 days.