AUTHENTICATION USING PROOF OF WORK AND POSSESSION

摘要

Password-based authentication in which the authenticating entity uses proof of work based on the password as well as proof of possession of the password in order to authenticate to an authentication system, both of which provided by the authenticating entity to the authentication system at setup. In subsequent authentication attempts, the authentication system will compare any proof of possession and proof of work received in the request against this initially set up proof of possession and proof of work to perform authentication. The authentication system might perform work on the proof of work to generate a further proof of work that is then compared against a further proof of work that the authentication system generated at the time the authentication mechanism was originally set up. Upon subsequent authentication requests, the authenticating entity need not regenerate the proof of work, but instead provides the stored proof of work.

主权项

1. A computer program product comprising one or more computer-readable storage media having thereon computer-executable instructions that are structured such that, when executed by one or more processors of a computing system, cause the computing system to perform a method for an authenticating entity setting up an authentication with an authentication system based on a password, the method comprising:
an act of accessing a generated password; an act of generating a proof of work based on the generated password; an act of generating a proof of possession of the password using the generated password; and an act of submitting the proof of work and the proof of possession to an authentication system.