An access point receives from a client a first nonce and a first cryptographic hash for the first nonce, the first cryptographic hash calculated using a first key derived from a second key, the second key input on the client or derived from a passphrase input on the client, derives first keys from each of a stored primary input and at least one stored secondary input valid at the deriving, the stored primary input and the at least one stored secondary input each being one of a second key and a passphrase, verifies the cryptographic hash using each derived first key to find a derived first key that checks the first cryptographic hash, generates a third key and a second cryptographic hash using the derived first key that checks the first cryptographic hash, and sends the third key and the second cryptographic hash to the client.

Devices and methods for client device authentication

A method for authenticating a password may include receiving a first entered password and determining a difference value between the first entered password and a stored password. The difference value may result from comparing the first entered password to the stored password. The method may also include determining that the difference value does not meet an acceptability standard, denying access to a restricted element, and determining a new acceptability standard.

Usability for password entry

An objective of the present invention is to enable user authentication with an intensity that is in accordance with a current situation. In the present invention, a situation management device retains a current situation of an overall system including a relevant system being connected and an operator. A registration device: accepts registration information; and stores the registration information and/or information associated with the registration information as storage information in a storage device, either as is or after converting the registration information and/or the information associated with the registration information using a prescribed conversion function. An authentication device: accepts authentication information; and outputs the authentication information and/or information associated with the authentication information as comparison information, either as is or after converting the authentication information and/or the information associated with the authentication information using a prescribed conversion function. A comparison device compares the storage information acquired at the time of registration and the comparison information acquired at the time of authentication using a reference that is in accordance with the current situation of the overall system, such as normal operation or a malfunction, and carries out an operator authentication accordingly.

Information processing system, node, authentication method, and recording medium whereon program for same has been recorded

A user inputs (S31) a password at a user device (110) whose processor (111) receives (S31) the password, retrieves (S33) a stored derived value resulting from a derivation function, preferably a cryptographic one-way function, applied to a reference password, scrambles (S35) the received password using a function taking the derived value as a variable to obtain a scrambled password, and sends (S36) the scrambled password to an authentication server (120). In case the stored derived value cannot be retrieved, the processor (111) uses (S33) the derivation function to generate a derived value from the received password. In case the password is received during generation of a new password, the processor (111) generates (S22) and stores (S24) a derived value from the new password. In an embodiment, the apparatus comprises the authentication server (120).

Niclas Stahl

Papers

Apparatus and method for password authentication