Protected resource access control utilizing credentials based on message authentication codes and hash chain values

摘要

A processing device comprises a processor coupled to a memory and is configured to receive authentication information from a user, to generate a message authentication code based at least in part on the received authentication information, to generate a credential for a particular access control interval based at least in part on the message authentication code and an intermediate value of a hash chain, and to provide the credential to a user in order to allow the user to access a protected resource in the particular access control interval. The message authentication code may be generated over a message payload that includes a password provided by the user. The credential may comprise a combination of the message authentication code and the intermediate value of the hash chain.

主权项

1. A method comprising:
receiving authentication information from a user; generating a message authentication code based at least in part on the received authentication information; associating intermediate values of a hash chain with respective ones of a plurality of access control intervals; generating a credential for a particular one of the plurality of access control intervals based at least in part on the message authentication code and the intermediate value of the hash chain associated with the particular access control interval; and providing the credential to a user in order to allow the user to access a protected resource in the particular access control interval; wherein the receiving, generating, associating and providing are performed by at least one processing device of an information processing system.