SECURITY INFORMATION CACHING ON AUTHENTICATION TOKEN

摘要

A method of operating a security token to authenticate a user in a multi-factor authentication system is disclosed. The method includes: monitoring user custody of the token, the token having an identifying characteristic representing a possession factor for use through possession factor authentication; during a period of continuous user custody of the token based on the monitoring, obtaining a knowledge factor from a user having the continuous user custody; caching the knowledge factor in a memory of the token; and in response to a second authentication request, retrieving the knowledge factor from the memory to demonstrate to an authentication system knowledge of the knowledge factor, during the period of the continuous user custody.

主权项

1. A method of conducting a multi-factor authentication, the method comprising:
caching a knowledge factor in a memory of a token; and monitoring user custody status of the token, the token having an identifying characteristic representing a possession factor to satisfy possession factor authentication on a security system, wherein the knowledge factor is different from the identifying characteristic representing the possession factor; in response to an authentication request during a period of continuous user custody determined based on the monitoring of the user custody status, retrieving the knowledge factor from the memory to demonstrate to the security system knowledge of the knowledge factor; and in response to detecting a break in the continuous user custody, clearing the knowledge factor from the memory.