Systems, methods and computer program products that use an encrypted session for additional password verification

Claim 2

A password authentication method between a client and a server that communicate over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the method comprising the steps of: establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; transmitting the client password from the client to the server during the encrypted session; hashing the received password at the server during the encrypted session; comparing the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and terminating the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 3

A method according to claim 1 wherein the step of establishing an encrypted session comprises the step of establishing an encrypted session using a KryptoKnight authentication key and distribution system.

Claim 4

A method according to claim 1 wherein the step of establishing an encrypted session comprises the steps of: sending a client nonce and client User Id from the client to the server; creating an encrypted session key at the server, from the corresponding hashed password for the client that is stored at the server; transmitting the encrypted session key from the server to the client; decrypting the encrypted session key at the client; and initiating the encrypted session using the decrypted encrypted session key.

Claim 5

A method according to claim 1 wherein the transmitting step is performed at the beginning of the encrypted session.

Claim 6

A method according to claim 1: wherein the server stores the plurality of passwords as a hashed password combined with a first salt; and wherein the comparing step is followed by the steps of: rehashing the hashed received password with a second salt; and replacing the stored password and the first salt with the rehashed received password.

Claim 7

A method according to claim 5 wherein the step of establishing an encrypted session comprises the steps of: sending a client nonce and client User Id from the client to the server; creating an encrypted session key at the server, from the corresponding hashed password for the client that is stored at the server; transmitting the encrypted session key and the first salt from the server to the client; decrypting the encrypted session key at the client including the first salt; and initiating the encrypted session using the decrypted encrypted session key.

Claim 8

A password authentication method for a client that communicates with a server over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the method comprising the steps of: establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; and transmitting the client password from the client to the server during the encrypted session.

Claim 9

A password authentication method for a client that communicates with a server over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the method comprising the steps of: establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; and transmitting the client password from the client to the server during the encrypted session.

Claim 10

A method according to claim 7 wherein the step of establishing an encrypted session comprises the step of establishing an encrypted session using a KryptoKnight authentication key and distribution system.

Claim 11

A method according to claim 7 wherein the step of establishing an encrypted session comprises the steps of: sending a client nonce and client User Id from the client to the server; decrypting an encrypted session key that is received by the client; and initiating the encrypted session using the decrypted encrypted session key.

Claim 12

A method according to claim 7 wherein the transmitting step is performed at the beginning of the encrypted session.

Claim 13

A method according to claim 7: wherein the server stores the plurality of passwords as a hashed password and a first salt; and wherein the comparing step is followed by the steps of: rehashing the hashed received password with a second salt; and replacing the stored password combined and first salt with the rehashed received password.

Claim 14

A password authentication method for a server that communicates with a client over a network, the server storing a corresponding plurality of hashed passwords for a plurality of clients, the method comprising the steps of: establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; hashing a received password that is received at the server during the encrypted session; comparing the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and terminating the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 15

A password authentication method for a server that communicates with a client over a network, the server storing a corresponding plurality of hashed passwords for a plurality of clients, the method comprising the steps of: establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; hashing a received password that is received at the server during the encrypted session; comparing the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and terminating the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 16

A method according to claim 12 wherein the step of establishing an encrypted session comprises the step of establishing an encrypted session using a KryptoKnight authentication key and distribution system.

Claim 17

A method according to claim 12 wherein the step of establishing an encrypted session comprises the steps of: receiving a client nonce and client User Id from the client at the server; creating an encrypted session key at the server, from the corresponding hashed password for the client that is stored at the server; and transmitting the encrypted session key from the server to the client.

Claim 18

A method according to claim 12: wherein the server stores the plurality of passwords as a hashed password and a first salt; and wherein the comparing step is followed by the steps of: rehashing the hashed received password with a second salt; and replacing the stored password and the first salt with the rehashed received password.

Claim 19

A method according to claim 15 wherein the step of establishing an encrypted session comprises the steps of: receiving a client nonce and client User Id from the client at the server; creating an encrypted session key at the server, from the corresponding hashed password for the client that is stored at the server; transmitting the encrypted session key and the first salt from the server to the client; and decrypting the encrypted session key at the client including the first salt.

Claim 20

A password authentication system for a client and a server that communicate over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the system comprising: means for establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; means for transmitting the client password from the client to the server during the encrypted session; means for hashing the received password at the server during the encrypted session; means for comparing the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and means for terminating the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 21

A password authentication system for a client and a server that communicate over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the system comprising: means for establishing an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; means for transmitting the client password from the client to the server during the encrypted session; means for hashing the received password at the server during the encrypted session; means for comparing the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and means for terminating the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 22

A system according to claim 17 wherein the transmitting means comprises means for transmitting the client password from the client to the server at the beginning of the encrypted session.

Claim 23

A system according to claim 17: wherein the server stores the plurality of passwords as a hashed password and a first salt; and wherein the system further comprises: means for rehashing the hashed received password with a second salt; and means for replacing the stored password and the first salt with the rehashed received password.

Claim 24

A computer program product for authenticating a password of a client that communicates with a server over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the computer program product comprising a computer-readable storage medium having computer-readable program code embodied in the medium, the computer-readable program code comprising: computer-readable program code that establishes an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; and computer-readable program code that transmits the client password from the client to the server during the encrypted session.

Claim 25

A computer program product for authenticating a password of a client that communicates with a server over a network, the server storing a plurality of hashed passwords for a corresponding plurality of clients, the computer program product comprising a computer-readable storage medium having computer-readable program code embodied in the medium, the computer-readable program code comprising: computer-readable program code that establishes an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; and computer-readable program code that transmits the client password from the client to the server during the encrypted session.

Claim 26

A computer program product according to claim 20 wherein the computer-readable program code that establishes an encrypted session comprises a KryptoKnight authentication key and distribution computer program product.

Claim 27

A computer program product according to claim 20 wherein the computer-readable program code that transmits comprises computer-readable program code that transmits the client password from the client to the server at the beginning of the encrypted session.

Claim 28

A computer program product for authenticating a password at a server that communicates with a client over a network, the server storing a corresponding plurality of hashed passwords for a plurality of clients, the computer program product comprising a computer-readable storage medium having computer-readable program code embodied in the medium, the computer-readable program code comprising: computer-readable program code that establishes an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; computer-readable program code that hashes a received password that is received at the server during the encrypted session; computer-readable program code that compares the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and computer-readable program code that terminates the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 29

A computer program product for authenticating a password at a server that communicates with a client over a network, the server storing a corresponding plurality of hashed passwords for a plurality of clients, the computer program product comprising a computer-readable storage medium having computer-readable program code embodied in the medium, the computer-readable program code comprising: computer-readable program code that establishes an encrypted session between the client and the server over the network, using a client password and the corresponding hashed password that is stored at the server; computer-readable program code that hashes a received password that is received at the server during the encrypted session; computer-readable program code that compares the hashed received password with the corresponding hashed password for the client that is stored at the server during the encrypted session; and computer-readable program code that terminates the encrypted session between the client and the server over the network if the hashed received password and the corresponding hashed password that were compared during the encrypted session do not match.

Claim 30

A computer program product according to claim 23: wherein the server stores the plurality of passwords as a hashed password and a first salt; and wherein the computer program product further comprises: computer-readable program code that rehashes the hashed received password with a second salt; and computer-readable program code that replaces the stored password and the first salt with the rehashed received password.