Steganographic authentication
Various embodiments pertain to steganographically authenticating identities and authorizing transactions based on the authenticated identities.
1. A computer-implemented authentication method comprising:
defining an authentication network having a plurality of authentication paths;
receiving steganographic communication from an identity that is to be authenticated, the steganographic communication having a purpose that appears to be unrelated to authentication;
using the steganographic communication from the identity to follow an authentication path through the authentication network; and
authenticating the identity if the authentication path leads to a valid authentication state for the identity, wherein said acts of receiving, using and authenticating are performed independent of any encryption/decryption procedures.
2. The method of claim 1 , wherein the steganographic communication that is used to follow the authentication path comprises content which is in the clear, and wherein said content is used to follow said authentication path.
3. The method of claim 2 , wherein said content comprises multiple commands.
4. The method of claim 2 , wherein said content comprises multiple commands, at least some of which are not inherently related to authentication.
5. The method of claim 2 , wherein said content comprises multiple commands, at least some of which are data processing or data handling commands and are not inherently related to authentication.
6. The method of claim 2 , wherein said content comprises multiple commands, at least some of which are ISO 7816-4 or ISO 7816-9 data processing or data handling commands and are not inherently related to authentication.
7. A computer-implemented authentication method comprising:
receiving steganographic communication from an identity that is to be authenticated, the steganographic communication comprising content which is in the clear and which appears unrelated to authentication, said steganographic communication also comprising content that is false cryptographic content;
using the content of said steganographic communication to authenticate an identity.
8. The method of claim 7 , wherein said false cryptographic content comprises at least one cryptographic command.
9. The method of claim 7 , wherein said content that is in the clear comprises multiple commands.
10. The method of claim 7 , wherein said content that is in the clear comprises multiple data processing or data handling commands.
11. The method of claim 7 , wherein said content that is in the clear comprises multiple commands, and said act of using is performed by authenticating said identity based on an order of said commands.
12. The method of claim 7 , wherein said content that is in the clear comprises multiple commands, and wherein said commands have an apparent function that is not associated with an authentication function.
13. The method of claim 7 , wherein said false cryptographic content comprises a false cryptographic protocol.
14. One or more computer-readable storage media having computer-readable instructions stored thereon which, when executed, perform a method comprising:
receiving steganographic communication from an identity that is to be authenticated, the steganographic communication comprising content which is in the clear and which appears unrelated to authentication, said steganographic communication also comprising content that is false cryptographic content;
using the content of said steganographic communication to authenticate an identity.
15. The computer-readable media of claim 14 , wherein said false cryptographic content comprises at least one cryptographic command.
16. The computer-readable media of claim 14 , wherein said content that is in the clear comprises multiple commands.
17. The computer-readable media of claim 14 , wherein said content that is in the clear comprises multiple data processing or data handling commands.
18. The computer-readable media of claim 14 , wherein said content that is in the clear comprises multiple commands, and said act of using is performed by authenticating said identity based on an order of said commands.
19. The computer-readable media of claim 14 , wherein said content that is in the clear comprises multiple commands, and wherein said commands have an apparent function that is not associated with an authentication function.
20. The computer-readable media of claim 14 , wherein said false cryptographic content comprises a false cryptographic protocol.