Privacy preserving knowledge and factor possession tests for persistent authentication

摘要

Example implementations described herein are directed to authentication based on the user's private factors, while not revealing at the server side information allowing the server (or anyone with the server's information) to deduce the private answers. In example implementations, the user answers a questionnaire with authentication factors, wherein the answers are transformed in a one-way fashion and the transformed answers are provided to the server side. Example implementations facilitate authentication based on polynomial interpolation or other methods to permit a user to authenticate, even if the user does not answer all of the questions correctly.

主权项

1. A device, comprising:
a processor, configured to:
generate a plurality of hashes from a plurality of responses to a plurality of questions;generate an authentication hash from a polynomial interpolation of the plurality of hashes and algebraic operations over the plurality of hashes by use of a noisy interpolation algorithm, and adjust a threshold of the noisy interpolation algorithm by introduction of one of: one or more erroneous points for the polynomial interpolation, and one or more points for the polynomial interpolation; andauthenticate with the authentication hash; and a memory configured to store the authentication hash.