Emc Corporation

Emc IP Holding Company LLC

Rsa Security Inc.

Ravenwhite Security, Inc.

Other

Lucent Technologies Inc.

University of North Carolina at Chapel Hill

Ravenwhite Inc.

Ari Juels

Nikolaos Triandopoulos

Kevin Bowers

Ronald L Rivest

Alina Oprea

John Gordon Brainard

Marten Van Dijk

Daniel Vernon Bailey

Bjorn Markus Jakobsson

Burton S Kaliski, Jr

Guoying Luo

Ting-Fang Yen

Emil P Stefanov

Kaan Onarlioglu

Michael Kendrick Reiter

William Duane

Gareth Richards

Samuel Curry

Catherine V Hart

Michael Szydlo

Robert Damon Hopley

Marten E Van Dijk

Yinqian Zhang

Thomas S Corn

Stephen J Todd

Kenneth D Ray

Orran Yaakov Krieger

Karl Ackerman

John O'Brien

Riaz Zolfonoon

Michael J O'Malley

Bryan Jeffrey Parno

Samir Dilipkumar Saklikar

Roberto Tamassia

Sean Patrick Doyle

John P Field

Michael Mansfield Swift

Marco Ciaffi

Benjamin Tillman Farley

Yong Qiao

YinKee Yee

James Alan Kelley

Markus Jakobsson

Matthew John Robshaw

Nirav Mehta

Todd S Leetham

Aditya Kuppa

Vijay Ganti

David D Taku

Dennis Ray Moreau

Andrea Doherty

Rachael Stockton

Moses Liskov

Vihang P Dudhalkar

Dung Huynh

Venkatanathan Varadarajan

Thomas Ristenpart

Sandra Carielli

Srdan Capkun

Viktor Heorhiadi

Davide Zanetti

Tamara S Denning

Brian William Fitzgerald

Emily Shen

George Matthews

Paul Syverson

Madhu Sudan

Ryan Culbertson

William Robertson

Darren Dupre

Norik Kocharyan

Engin Kirda

Niklas Frykholm

Robert Silverman

In one aspect, authentication information is received from a first processing device in a second processing device, and a digital signature is generated in the second processing device by signing data that incorporates at least a portion of the received authentication information. The received authentication information is generated at least in part from a secret seed stored in the first processing device. The received authentication information may be combined with the digital signature generated by the second processing device to form a joint signature that is transmitted to an authentication server. In an illustrative embodiment, the received authentication information comprises a tokencode and the digital signature is generated by signing data that incorporates the tokencode. The data that is signed to generate the digital signature may comprise an electronic document having the tokencode appended thereto.

Authentication methods and apparatus for generating digital signatures

Disclosed is a method and apparatus for performing steps to cause encoded information to be stored at a client device during a first network session between a server and the client device. To cause encoded information to be stored at a client device, the server first determines a set of network resource requests that encode the information. These network resource requests may include requests for one or more specific URLs and/or requests for one or more files. The server then causes the client device to initiate the network resource requests. The server may cause this initiation by, for example, redirecting the client device to the network resources. The client device initiating the network resource requests causes data representative of the network resource requests to be stored at the client device.

Method and apparatus for storing information in a browser storage area of a client device

In one aspect, one or more key-encapsulating ciphertexts are generated and stored in a processing device. The processing device receives authentication information from another processing device, and utilizes the authentication information to decrypt at least one of the key-encapsulating ciphertexts to recover an associated key. The authentication information may comprise, for example, a tokencode. In an illustrative embodiment, the authentication information may comprise a plurality of gradually rotating keys with overlapping refresh intervals. As a more particular example, the authentication information may comprise a plurality of hash chains wherein successive ones of the hash chains overlap one another in a designated number of time steps.

Authentication methods and apparatus using key-encapsulating ciphertexts and other techniques

Static and dynamic embodiments are presented for generating chaff passwords for use in a password-hardening system. Chaff passwords are generated by modifying portions of base passwords based on a distribution with which particular strings of digits and symbols appear in user passwords. Location oblivious chaff passwords are generated from a chaff set of passwords obtained from a chaff generation method by applying a random permutation over the elements of the obtained chaff set of passwords.

Chaff password generation based on distribution-based modifications of base passwords

A first cryptographic device determines multiple sets of passcodes for possible release in association with a corresponding one of a plurality of epochs, and transmits a message to a second cryptographic device over an auxiliary channel embedded in one or more passcodes released by the first cryptographic device to the second cryptographic device. For example, the first cryptographic device can determine multiple sets of passcodes by precomputing and storing the multiple sets of passcodes, or by generating one or more data sets from which the multiple sets of passcodes can be computed. The first cryptographic device transmits the message over the auxiliary channel by selecting a particular one of the multiple sets of passcodes based on content of the message and releasing a passcode from the selected set. The first cryptographic device may comprise an authentication token and the second cryptographic device may comprise an authentication server.

Cryptographic device configured to transmit messages over an auxiliary channel embedded in passcodes

A Security Alerting System is provided with dynamic buffer size adaptation. An alert message from a Security Alerting System is transmitted by obtaining the alert message from the Security Alerting System; authenticating the alert message using a secret key known by a server; storing the authenticated alert message in a buffer; transmitting the buffer to the server; and detecting a truncation attack based on generating different cryptographic keys for protection of inserted messages and transmitted buffers, wherein the cryptographic keys for protection of inserted messages are generated in a forward-secure manner in a same order that the messages are inserted in the buffer and wherein the cryptographic keys for protection of transmitted buffers are generated in a forward-secure manner in a same order that the buffers are transmitted over a network.

Security alerting system with dynamic buffer size adaption

A security alerting system is provided with a network blockage policy based on alert transmission activity. Alert messages from a Security Alerting System executing on a host indicating a potential compromise of a protected resource are processed by determining if a number of buffer contents received from the host within a predefined time interval satisfies a predefined criteria, the buffer content comprising one or more of the alert messages from the Security Alerting System; and blocking a network connection of the host if the number of buffer contents received from the host within the predefined time interval does not satisfy the predefined criteria. The blocked network connection of the host can optionally be restored when a valid buffer content is received from the host. The predefined criteria is based on the alerting activity of the host.

Security alerting system with network blockade policy based on alert transmission activity

A Security Alerting System is provided with dynamic buffer size adaptation. An alert message from a Security Alerting System indicating a potential compromise of a protected resource is transmitted by obtaining the alert message from the Security Alerting System; authenticating the alert message using a secret key known by a server, wherein the secret key evolves in a forward-secure manner; storing the authenticated alert message in a buffer, wherein a size of the buffer is based on a connection history of the Security Alerting System; and transmitting the buffer to the server. The alert message can optionally be encrypted. The buffer can be increased in proportion to a duration of a disruption of a connection. The size of the buffer can be increased by adding buffer slots at a location of a current write pointer index. Techniques are also disclosed for detecting truncation attacks and alert message gaps. The alert messages can have a variable size by writing alert message into consecutive buffer slots.

Security alerting system with dynamic buffer size adaptation

In one aspect, a method comprises the steps of deriving a base point on an elliptic curve in a first processing device, generating authentication information in the first processing device utilizing the base point and a private key of the first processing device, and transmitting the authentication information from the first processing device to a second processing device. The base point on the elliptic curve may be derived, for example, by applying a one-way function to a current time value, or by computation based on a message to be signed.

Authentication methods and apparatus using base points on an elliptic curve and other techniques

A processing device is configured to obtain an address and a public key, both associated with an authentication service, to generate a symmetric key as a function of the public key, to configure an authentication token to incorporate the symmetric key, to encrypt the symmetric key utilizing the public key, and to transmit the encrypted symmetric key to the address so as to permit the authentication service to bind the symmetric key to an identifier of the authentication token. By way of example, the authentication token may comprise a software authentication token implemented on the processing device. One or more tokencodes generated by the authentication token utilizing the symmetric key are transmitted to the authentication service for authentication. The authentication by the authentication service is based on the symmetric key bound to the identifier of the authentication token.

Key provisioning method and apparatus for authentication tokens

Forward-secure one-time authentication tokens are provided with embedded time hints. A token generates a passcode for presentation to an authentication server by determining a current state of the token; generating a user authentication passcode based on the current state, wherein the generated user authentication passcode comprises an embedded time hint; and communicating the generated user authentication passcode to the authentication server. The passcode may be generated with the embedded time hint, for example, each time a user authentication passcode is generated or upon demand when a user authentication passcode is generated. A server processes a user authentication passcode by receiving the user authentication passcode, wherein the received user authentication passcode comprises an embedded time hint; and determining a time interval to search for another user authentication passcode based on the embedded time hint.

Forward secure one-time authentication tokens with embedded time hints

Growing community of inventors

Brookline, MA, United States of America

Ari Juels