US5751812A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Re-initialization of an iterated hash function secure password system over an insecure network connection
Assignee: Nytell Software LLC
•
Filing: 1996-08-27
•
Granted: 1998-05-12
•
Expires: 2016-08-27
Abstract
Abstract Methods and apparatus are disclosed for re-initializing a secure password series based on an iterated hash function. User login information is communicated over an insecure network connection or other transmission medium between a client and a server. The server provides an indication that a first login series based on a first password has reached a predetermined minimum number of remaining hash function iterations. This indication could also be generated by the client. In either case, the client responds to the indication by generating an initialization signal which relates the first login series based on the first password to a second login series based on a second password. The initialization signal may be generated as the exclusive-or of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password. The client transmits the initialization signal to the server, which stores it along with an encrypted password transmitted in a previous valid first series login by the same user. The server then compares a function of the stored initialization signal and an initial second series login to the previously-stored first series login to determine if the initial second series login is valid. The second password may be generated by the client using a pass phrase portion of the first password and a new seed portion which does not require additional user input. The password re-initialization process can thus be performed automatically without any need to notify the user.
Inventors
- 👤 Milton M. Anderson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 18:16
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H04L9/3236; G06F2221/00; G06F2221/21; G06F2221/2103; H04L9/50
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
123 words
A method of communicating over a transmission medium using an iterated hash function, the method comprising the steps of: determining that a first series of communications based on a first password has reached a predetermined minimum number of remaining hash function iterations; generating an initialization signal relating the first series of communications based on the first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password; and transmitting the initialization signal over the medium prior to commencing the second series of communications.
Claim 2
Independent Claim
123 words
A method of communicating over a transmission medium using an iterated hash function, the method comprising the steps of: determining that a first series of communications based on a first password has reached a predetermined minimum number of remaining hash function iterations; generating an initialization signal relating the first series of communications based on the first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password; and transmitting the initialization signal over the medium prior to commencing the second series of communications.
Claim 3
Dependent Claim
54 words
The method of claim 1 wherein the first and second series of communications further include first and second series of logins, respectively, wherein each login in the series is initiated by the user corresponding to the first and second passwords and involves information communicated between a given client and a server over the medium.
Claim 4
Dependent Claim
129 words
The method of claim 2 wherein the information transmitted between the given client and the server over the medium further includes: a login request transmitted by the client to the server; a designated number of hash function iterations transmitted from the server to the client; an encrypted password, transmitted from the client to the server, and generated by the client applying the designated number of hash function iterations to the corresponding password; and an indication as to whether or not the login is valid, transmitted from the server to the client, and generated by the server applying at least one hash function iteration to the encrypted password and comparing the result to a previously stored encrypted password transmitted to the server in a previous valid login by the user.
Claim 5
Dependent Claim
60 words
The method of claim 1 wherein the step of determining that a first series of communications based on a first password has reached a predetermined minimum number of remaining iterations further includes the step of a client receiving the indication from a server in response to a login request of a given user transmitted from the client to the server.
Claim 6
Dependent Claim
47 words
The method of claim 1 wherein the step of generating an initialization signal further includes the step of generating the second password to include first and second portions, wherein one of the first and second portions is the same as a corresponding portion of the first password.
Claim 7
Dependent Claim
81 words
The method of claim 1 wherein the step of generating an initialization signal relating the first series of communications based on the first password to the second series of communications based on the second password further includes the step of generating the initialization signal as the exclusive-or of (i) the result of applying the first number of hash function iterations to the first password, and (ii) the result of applying the second number of hash function iterations to the second password.
Claim 8
Dependent Claim
63 words
The method of claim 1 wherein the step of generating an initialization signal relating the first series of communications based on the first password to the second series of communications based on the second password further includes the step of generating the second password by combining a portion of the first password with a new seed portion without input from the corresponding user.
Claim 9
Dependent Claim
53 words
The method of claim 1 wherein the step of generating an initialization signal relating the first series of communications based on the first password to the second series of communications based on the second password further includes the step of requesting a user to enter at least a portion of the second password.
Claim 10
Dependent Claim
57 words
The method of claim 1 further including the step of transmitting another communication in the first series of communications based on the first password, after transmission of the initialization signal but prior to commencement of the second series of communications, if the transmission of the initialization signal results in a server denying access to the corresponding user.
Claim 11
Independent Claim
152 words
An apparatus for communicating over a transmission medium using an iterated hash function, the apparatus comprising: a processor coupled to the transmission medium to receive therefrom an initialization signal relating a first series of communications based on a first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password; and a memory coupled to the processor and storing at least a portion of one of the first series of communications, wherein the processor is further operative to subsequently determine if one of the second series of communications is a valid communication by comparing a function of the initialization signal to the stored portion of one of the first series of communications.
Claim 12
Independent Claim
152 words
An apparatus for communicating over a transmission medium using an iterated hash function, the apparatus comprising: a processor coupled to the transmission medium to receive therefrom an initialization signal relating a first series of communications based on a first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password; and a memory coupled to the processor and storing at least a portion of one of the first series of communications, wherein the processor is further operative to subsequently determine if one of the second series of communications is a valid communication by comparing a function of the initialization signal to the stored portion of one of the first series of communications.
Claim 13
Dependent Claim
60 words
The apparatus of claim 10 wherein the processor is further operative to provide an indication that a first series of communications based on a first password has reached a predetermined minimum number of remaining hash function iterations, and wherein the indication is supplied over the transmission medium to a client which generates the initialization signal in response to the indication.
Claim 14
Dependent Claim
51 words
The apparatus of claim 11 wherein the indication that a first series of communications based on a first password has reached a predetermined minimum number of hash function iterations is provided in response to a login request of a given user supplied over the medium from a client to a server.
Claim 15
Dependent Claim
31 words
The apparatus of claim 10 wherein the processor and memory are part of a server which receives the first series of communications from one or more clients over the transmission medium.
Claim 16
Dependent Claim
55 words
The apparatus of claim 13 wherein the first and second series of communications further include first and second series of logins, respectively, wherein each login in the series is initiated by a user corresponding to the first and second passwords and involves information communicated between a given client and the server over the transmission medium.
Claim 17
Dependent Claim
129 words
The apparatus of claim 14 wherein the information transmitted between the given client and the server over the medium further includes: a login request transmitted by the client to the server; a designated number of hash function iterations transmitted from the server to the client; an encrypted password, transmitted from the client to the server, and generated by the client applying the designated number of hash function iterations to the corresponding password; and an indication as to whether or not the login is valid, transmitted from the server to the client, and generated by the server applying at least one hash function iteration to the encrypted password and comparing the result to a previously stored encrypted password transmitted to the server in a previous valid login by the user.
Claim 18
Independent Claim
131 words
An apparatus for communicating over a transmission medium using an iterated hash function, comprising: a processor operative to receive an indication that a first series of communications based on a first password has reached a predetermined minimum number of remaining hash function iterations, to generate in response to the indication an initialization signal relating the first series of communications based on the first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password, and to transmit the initialization signal over the medium prior to commencing the second series of communications.
Claim 19
Independent Claim
131 words
An apparatus for communicating over a transmission medium using an iterated hash function, comprising: a processor operative to receive an indication that a first series of communications based on a first password has reached a predetermined minimum number of remaining hash function iterations, to generate in response to the indication an initialization signal relating the first series of communications based on the first password to a second series of communications to be based on a second password, wherein the initialization signal is generated as a function of the results of applying a first number of hash function iterations to the first password and a second number of hash function iterations to the second password, and to transmit the initialization signal over the medium prior to commencing the second series of communications.
Claim 20
Dependent Claim
24 words
The apparatus of claim 16 wherein the processor is part of a client which receives the indication from a server over the transmission medium.
Claim 21
Dependent Claim
17 words
The apparatus of claim 16 wherein the processor is part of a client which generates the indication.
Claim 22
Dependent Claim
55 words
The apparatus of claim 16 wherein the first and second series of communications further include first and second series of logins, respectively, wherein each login in the series is initiated by a user corresponding to the first and second passwords and involves information communicated between a given client and the server over the transmission medium.
Claim 23
Dependent Claim
41 words
The apparatus of claim 16 wherein the processor is further operative to generate the second password to include first and second portions, wherein one of the first and second portions is the same as a corresponding portion of the first password.
Claim 24
Dependent Claim
53 words
The apparatus of claim 16 wherein the processor is further operative to generate the initialization signal as the exclusive-or of (i) the result of applying the first number of hash function iterations to the first password, and (ii) the result of applying the second number of hash function iterations to the second password.
Claim 25
Dependent Claim
35 words
The apparatus of claim 16 wherein the processor is further operative to generate the second password by combining a portion of the first password with a new seed portion without input from the corresponding user.
Claim 26
Dependent Claim
29 words
The apparatus of claim 16 wherein processor is further operative to generate the second password by requesting a user to enter at least a portion of the second password.
Claim 27
Dependent Claim
59 words
The apparatus of claim 16 wherein the processor is further operative to transmit another communication in the first series of communications based on the first password, after transmission of the initialization signal but prior to commencement of the second series of communications, if the transmission of the initialization signal results in a server denying access to the corresponding user.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-05-11 | 2001-11-10 | 2002-05-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-05-11 | 2005-11-10 | 2006-05-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-05-11 | 2009-11-10 | 2010-05-12 | $7700.00 | Window Closed / Lapsed |