Granted Patent B2

US 12,489,617 · App. 18/428,461 · Granted Dec 2, 2025

Inventors: Chaitanya Gali Kumar (Bangalore, IN); Amit Prajapati (Bangalore, IN); Ancitta Alphonse (Bangalore, IN)

Assignee: Hewlett Packard Enterprise Development LP

H04L9/0863H04L9/0869H04L9/0897

Abstract

Claims (28)

1 . A computer platform comprising:

a security processor comprising:

a memory to store a cryptographic key, wherein the security processor associates the cryptographic key with a key handle; and

a keyed-hash generator; and

a hardware processor to:

responsive to a request to access the computer platform, access a password and a user identification associated with the request;

access an authentication record that corresponds to the user identification;

determine, from the authentication record, a key handle and a first cryptographic hash;

provide the key handle and the password to the security processor and initiate an operation of the security processor in which the keyed-hash generator generates a second cryptographic hash based on the password and the cryptographic key; and

regulate whether the request is allowed based on a comparison of the second cryptographic hash to the first cryptographic hash.

2 . The computer platform of claim 1 , wherein the hardware processor to further, in response to a creation of the password:

initiate an operation of the security processor to load an object into the secure storage; and

pass the cryptographic key to the operation as the object.

3 . The computer platform of claim 2 , wherein the operation of the security processor to load the object into the secure storage causes the security processor to designate the cryptographic key as a transient object and return a transient handle that the security processor associates with the cryptographic key.

4 . The computer platform of claim 3 , wherein the hardware processor to further:

initiate an operation of the security processor to cause the security processor to designate the cryptographic key as a persistent object and return a persistent handle that the security processor associates with the cryptographic key; and

store the persistent handle in the authentication record as the key handle.

5 . The computer platform of claim 1 , wherein:

the security processor further comprises a random number generator;

the hardware processor to further, in response to a creation of the password:

initiate an operation of the security processor in which the random number generator generates a number;

designate the number as the cryptographic key;

initiate an operation of the security processor to load an object into the secure storage; and

pass the cryptographic key as the object to the operation to load the object into the secure storage.

6 . The computer platform of claim 1 , wherein the hardware processor to further, responsive to the password changing to a second password:

provide the key handle and the second password to the security processor and initiate an operation of the security processor in which the keyed-hash generator generates a third cryptographic hash based on the second password and the cryptographic key; and

modify the authentication record responsive to the password changing, including replacing the first cryptographic hash with the third cryptographic hash.

7 . The computer platform of claim 1 , wherein the security processor comprises a trusted platform module (TPM).

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (14)