Systems and methods for dual hash rolling patch secure authentication
Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a password comprising a first plurality of characters, concatenate a second plurality of characters to the hashed password to form a patched password, encrypt the patched password, and send the hashed patched password to a server IHS for authentication. The second characters are configured to continually change value over time.
1. A client Information Handling System (IHS) comprising:
at least one processor; and
a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the client IHS to:
receive a password comprising a first plurality of characters;
generate a hashed password from the password;
concatenate a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
encrypt the patched password; and
send the patched password to a server IHS for authentication;
wherein the server IHS comprises:
at least one other processor, and
another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the server IHS to:
obtain a stored version of the first plurality of characters from a data store configured in the server IHS;
concatenate a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters;
encrypt the another patched password; and
compare the patched password against the another patched password to determine whether to authenticate the client IHS.
2. The client IHS of claim 1 , wherein the instructions, upon execution, cause the IHS to encrypt the password prior to concatenating the second plurality of characters to the password.
3. The client IHS of claim 1 , wherein the other instructions, upon execution, cause the server IHS to:
when the hashed patched password and the other hashed patched password do not match, reject authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS.
4. The client IHS of claim 1 , wherein the other instructions, upon execution, cause the server IHS to:
when the hashed patched password against the other hashed patched password match, accept authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS.
5. The client IHS of claim 1 , wherein the instructions, upon execution, cause the client IHS to encrypt the patched password by generating a hash of the password using a cryptographic hash function, wherein the cryptographic hash function comprises a one-way function.
6. The client IHS of claim 1 , wherein the second characters comprises at least one of letters, numerals, and symbols.
7. The client IHS of claim 1 , wherein the second characters comprise a timestamp generated by a real-time clock of the client IHS.
8. The client IHS of claim 1 , wherein the second characters comprise a token generated by a remotely configured certificate authority (CA).
9. A method comprising:
receiving, by a client Information Handling System (IHS), a password comprising a first plurality of characters;
generating a hashed password from the password;
concatenating, by the client IHS, a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
encrypting, by the client IHS, the patched password;
sending, by the client IHS, the patched password to a server Information Handling System (IHS) for authentication;
obtaining, by a server IHS, a stored version of the first plurality of characters from a data store configured in the server IHS;
concatenating, by the server IHS, a third plurality of characters to the stored version to form another patched password, wherein the third characters are similar to the second characters;
encrypting, by the server IHS, the another patched password; and
comparing, by the server IHS, the patched password against the another patched password to determine whether to authenticate the client IHS.
10. The method of claim 9 , further comprising encrypting the password prior to concatenating the second plurality of characters to the password.
11. The method of claim 9 , further comprising, when the hashed patched password and the other hashed patched password do not match, rejecting authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS.
12. The method of claim 9 , further comprising, when the hashed patched password against the other hashed patched password match, accepting authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS.
13. The method of claim 9 , further comprising encrypting the patched password by generating a hash of the password using a cryptographic hash function, wherein the cryptographic hash function comprises a one-way function.
14. A server Information Handling System (IHS) comprising:
at least one processor; and
a memory coupled to the at least one processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the server IHS to:
obtain a stored version of a first plurality of characters from a data store configured in the server IHS, the first characters comprising a password;
generate a hashed password from the password;
concatenate a stored version of a second plurality of characters to the hashed password to form a patched password, wherein the second characters are configured to continually change value over time;
encrypt the patched password; and
compare the patched password against another patched password obtained from a client IHS to determine whether to authenticate the client IHS;
wherein the client IHS comprises:
at least one other processor; and
another memory coupled to the at least one other processor, the other memory having other program instructions stored thereon that, upon execution by the other processor, cause the client HIS to:
receive the first plurality of characters;
concatenate a third plurality of characters to the first plurality of characters to form another patched password, wherein the third characters are similar to the second characters;
encrypt the another patched password; and
send the another patched password to a server IHS for authentication.
15. The server IHS of claim 14 , wherein the instructions, upon execution, cause the IHS to encrypt the password prior to concatenating the second plurality of characters to the password.
16. The server IHS of claim 14 , wherein the instructions, upon execution, cause the server IHS to:
when the hashed patched password and the other hashed patched password do not match, reject authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does not exist in a known sources (KS) file stored in the server IHS.
17. The server IHS of claim 14 , wherein the other instructions, upon execution, cause the server IHS to:
when the hashed patched password against the other hashed patched password match, accept authentication of the client IHS when the third plurality of characters comprises a token and when an identity of the client IHS does exist in a known sources (KS) file stored in the server IHS.