IP Library › Granted Patent US 9,032,507
Granted Patent B2
US 9,032,507 · App. 13/778,310 · Granted May 12, 2015

Access request authentication and authorization information generation

Inventors: Chang Jie Guo (Beijing, CN); Hongbin Lin (Beijing, CN); Peng Ji (Shanghai, CN); Feng Li (Shanghai, CN); Qian Ma (Beijing, CN); Lin Yang (Beijing, CN); Yu Zhang (Beijing, CN)
Assignee: International Business Machines Corporation
G06F21/31G06F21/6218G06F2221/2137
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,032,507
App. No.
13/778,310
Granted
May 12, 2015
Kind
B2
Abstract

An access request authentication method, an authorization information generation method, an access request authentication system, and a hardware device. The access request authentication method includes: obtaining the current clock information; receiving a first access request, where the first access request includes a first input code; and determining whether to authorize the first access request based on the current clock information and the first input code.

Claims (62)

1. An access request authentication method, comprising:

receiving a first access request that includes a first input code,

wherein the first input code is generated by an authorization generation system configured to select a password from a password matrix according to a first pointer that moves randomly with time, and

wherein the first input code includes an authorization duration condition and a first password that corresponds with an authorization start time; and

determining, by an authentication system configured to generate a same password as the first password, whether to authorize the first access request by:

obtaining a current clock information;

generating a password sequence having a plurality of passwords based on the current clock information;

determining the authorization start time by searching for the first password in the password sequence;

authorizing access when a result of the search indicates that the current clock information is not earlier than the authorization start time;

providing a temporary code by the authentication system in response to determining to authorize the first access request, wherein the first input code has a first length, and the temporary input code has a second length shorter than the first length;

granting the temporary code validity while the first access request is authorized;

receiving a second access request, wherein the second access request includes a second input code; and

determining whether to authorize the second access request by comparing the temporary code with the second input code.

2. The method of claim 1 , wherein the authorization duration condition includes an authorization end time and the current clock information is not later than the authorization end time.

3. The method of claim 1 , wherein the authorization duration condition comprises:

an authorization duration and the current clock information is not later than the sum of the authorization start time and the authorization duration.

4. The method of claim 1 , wherein the authorization duration condition comprises:

a number of times of authorization, and the first access request has not used up the number of times of authorization.

5. The method of claim 1 , wherein the password matrix comprises:

a set of character strings that are randomly generated.

6. The method of claim 1 , wherein a first clock on the authentication system is synchronous with a second clock on the authorization generation system.

7. The method of claim 1 , wherein the authentication system is physically isolated from the authorization generation system.

8. An authorization information generating method, comprising:

receiving a request for generating authorization information by an authorization generation system, wherein the authorization generation system is configured to select a password from a password matrix according to a first pointer that moves randomly with time, the password matrix being a randomly generated a set of character strings, the authorization generation system being further configured to obtain clock information from a first clock;

generating, by the authorization generation system, a first input code that includes an authorization duration condition and a first password that corresponds with an authorization start time; and

generating authorization information, wherein the authorization information includes the first input code, wherein;

an authentication system is configured to receive the authorization information and to generate a same password as the first password, and

wherein the authentication system is further configured to determine whether to authorize a first access request by:

obtaining current clock information from a second clock, the second clock being synchronous with the first clock;

generating a password sequence having a plurality of passwords based on the current clock information;

determining the authorization start time by searching for the first password in the password sequence;

authorizing access when a result of the search indicates that the current clock information is not earlier than the authorization start time;

providing a temporary code by the authentication system in response to determining to authorize the first access request, wherein the first input code has a first length, and the temporary input code has a second length shorter than the first length;

granting the temporary code validity while the first access request is authorized;

receiving a second access request, wherein the second access request includes a second input code; and

determining whether to authorize the second access request by comparing the temporary code with the second input code.

9. An authentication system comprising:

a memory;

a processor communicatively coupled to the memory, the authentication system configured to perform a method comprising:

receiving a first access request that includes a first input code,

wherein the first input code is generated by an authorization generation system configured to select a password from a password matrix according to a first pointer that moves randomly with time, and

wherein the first input code includes an authorization duration condition and a first password that corresponds with an authorization start time,

wherein the authentication system is configured to generate a same password as the first password; and

determining, whether to authorize the first access request by:

obtaining a current clock information;

generating a password sequence having a plurality of passwords based on the current clock information;

determining the authorization start time by searching for the first password in the password sequence;

authorizing access when a result of the search indicates that the current clock information is not earlier than the authorization start time;

providing a temporary code by the authentication system in response to determining to authorize the first access request, wherein the first input code has a first length, and the temporary input code has a second length shorter than the first length;

granting the temporary code validity while the first access request is authorized

receiving a second access request, wherein the second access request includes a second input code; and

determining whether to authorize the second access request by comparing the temporary code with the second input code.

10. The authentication system of claim 9 wherein the authorization duration condition includes an authorization end time and the current clock information is not later than the authorization end time.

11. The authentication system of claim 9 , wherein the authorization duration condition comprises:

an authorization duration and the current clock information is not later than the sum of the authorization start time and the authorization duration.

12. The authentication system of claim 9 , wherein the authorization duration condition comprises:

a number of times of authorization, and the first access request has not used up the number of times of authorization.

13. The authentication system of claim 9 , wherein the password matrix comprises:

a set of character strings that are randomly generated.

14. The authentication system of claim 9 , wherein a first clock on the authentication system is synchronous with a second clock on the authorization generation system.

15. The authentication system of claim 9 , wherein the authentication system is physically isolated from the authorization generation system.

16. The authentication system of claim 9 , further comprising a server.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 27, 2013
From: GUO, CHANG JIE; LIN, HONGBIN; JI, PENG; LI, FENG; MA, QIAN; YANG, LIN; ZHANG, YU
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 029884/0054 →
Priority Claims (1)
CN 2012 1 0049872 · Feb 29, 2012 · national
Continuity (1)
Related Publication 20130227676A1 · Aug 29, 2013