User presence verification with single password across applications

Claim 3

The method of claim 1 further comprising, after Step A, the steps of: decrypting an encrypted private keychain key of the user with the password; and deleting the password.

Claim 4

The method of claim 2 further comprising, after Step B, the step of retaining the private keychain key.

Claim 5

The method of claim 3 wherein Step C further comprises the steps of: decrypting an application secret associated with the first application; and forwarding the decrypted application secret to the first application.

Claim 6

The method of claim 4 wherein the predetermined API call specifies "quiz user for password".

Claim 7

The method of claim 1 further comprising, after Step F, the step of aborting authentication of the user to various services and applications in the system if there is no match.

Claim 8

Apparatus for dynamically verifying presence of a user at a non-server node of a network, the apparatus comprising: a user input device for receiving a first entry and a subsequent entry of a password from the user, said first entry being for initially authenticating the user at said node to begin a session, and said subsequent entry being for authenticating said user after said session has begun but prior to termination of said session; a processor operably connected to the input device and programmed to generate an initial hash value corresponding to the password; and a memory device operably connected to the processor for storing the initial hash value and an application programming interface executable by the processor to request the subsequent entry of the password; the processor being further programmed to generate a subsequent hash value corresponding to the subsequent entry of the password and to compare the subsequent hash value with the initial hash value to dynamically verify the presence of the user at the node; wherein the processor and the memory device are located at said node.

Claim 9

Apparatus for dynamically verifying presence of a user at a non-server node of a network, the apparatus comprising: a user input device for receiving a first entry and a subsequent entry of a password from the user, said first entry being for initially authenticating the user at said node to begin a session, and said subsequent entry being for authenticating said user after said session has begun but prior to termination of said session; a processor operably connected to the input device and programmed to generate an initial hash value corresponding to the password; and a memory device operably connected to the processor for storing the initial hash value and an application programming interface executable by the processor to request the subsequent entry of the password; the processor being further programmed to generate a subsequent hash value corresponding to the subsequent entry of the password and to compare the subsequent hash value with the initial hash value to dynamically verify the presence of the user at the node; wherein the processor and the memory device are located at said node.

Claim 10

The apparatus of claim 7 wherein the memory device is further configured to store a private keychain key encrypted in a format that is decryptable using the password.

Claim 11

The apparatus of claim 8 wherein the memory device is further configured to retain the private keychain key.

Claim 12

The apparatus of claim 9 wherein the memory device is further organized as a data structure containing an encrypted secret associated with an application effective to invoke the application programming interface and a private key for decrypting the secret.

Claim 13

The apparatus of claim 10 wherein the encrypted secret comprises a secure identification mechanism.

Claim 14

A memory device containing data structures for use in dynamically verifying presence of a user at non-server node of a network, comprising: a password structure adaptable to be input by said user for use in initially authenticating said user to begin a session; an initial hash structure for being stored at said node and corresponding to the password structure; an application adapted to use a distributed authentication service and to use an application programming interface effective to be executed by a processor located at said node to request, after said session has begun but prior to termination of the session, a new instance of the password structure to be input by the user; a subsequent hash structure generated by the processor and corresponding to the new instance of the password structure; and a verification executable effective to be executed by the processor to compare the initial hash structure with the subsequent hash structure in order to determine whether said user is present at said node.

Claim 15

A memory device containing data structures for use in dynamically verifying presence of a user at non-server node of a network, comprising: a password structure adaptable to be input by said user for use in initially authenticating said user to begin a session; an initial hash structure for being stored at said node and corresponding to the password structure; an application adapted to use a distributed authentication service and to use an application programming interface effective to be executed by a processor located at said node to request, after said session has begun but prior to termination of the session, a new instance of the password structure to be input by the user; a subsequent hash structure generated by the processor and corresponding to the new instance of the password structure; and a verification executable effective to be executed by the processor to compare the initial hash structure with the subsequent hash structure in order to determine whether said user is present at said node.

Claim 16

The memory device of claim 12 wherein the data structures further comprise a user object structure configured to associate the user with a keychain object structure.

Claim 17

The memory device of claim 13 wherein the keychain object structure comprises an application secret and a private keychain key encrypted to be decrypted by the password structure.

Claim 18

The memory device of claim 14 wherein the application secret contains data used by the application to authenticate the user.