PRIVACY PRESERVING KNOWLEDGE AND FACTOR POSSESSION TESTS FOR PERSISTENT AUTHENTICATION

摘要

Example implementations described herein are directed to authentication based on the user's private factors, while not revealing at the server side information allowing the server (or anyone with the server's information) to deduce the private answers. In example implementations, the user answers a questionnaire with authentication factors, wherein the answers are transformed in a one-way fashion and the transformed answers are provided to the server side. Example implementations facilitate authentication based on polynomial interpolation or other methods to permit a user to authenticate, even if the user does not answer all of the questions correctly.

主权项

1. A device, comprising:
a processor, configured to:
generate a plurality of hashes from a plurality of responses to a plurality of questions;generate an authentication hash from at least one of:
a polynomial interpolation of the plurality of hashes and algebraic operations over plurality of hashes, anda selection of one or more of the plurality of hashes to form the authentication hash based on a selected group of the plurality of questions; andauthenticate with the authentication hash.