6 results about "Challenge response" patented technology

A method for managing an authentication includes establishing, by a server device, a secured network channel with a client, providing, via the secured network channel, a private key to the client, after the providing, obtaining, from the client, a request for establishing a session with the client via a second network channel, in response to the request: sending a challenge request to the client, obtaining a challenge response associated with the challenge request, wherein the challenge response specifies a first challenge answer, performing a challenge processing using a private key to generate a second challenge answer, making a determination, using the first challenge answer and the second challenge answer, that the client is authenticated, and based on the determination, initiating the session with the client.

Systems and methods are provided for facilitating network interactions based on user biometrics. One example computer-implemented method includes receiving, from a directory server, a biometric service provider (BSP) assertion having a signature computed using a private key of a BSP, where the BSP assertion includes a biometric ID of a user, and verifying the signature of the BSP assertion using a public key specific to the BSP previously shared with the computing device. The method also includes returning a verification result to the directory server, receiving an access token based on the verification result, and then receiving an authentication creation request from a device specific to the user, which includes the access token. The method further includes determining that the access token is unexpired, providing a challenge to the device, and receiving, from the device, a signed challenge response.

Systems and methods are provided for facilitating network interactions based on user biometrics. One example computer-implemented method includes receiving, from a directory server, a biometric service provider (BSP) assertion having a signature computed using a private key of a BSP, where the BSP assertion includes a biometric ID of a user, and verifying the signature of the BSP assertion using a public key specific to the BSP previously shared with the computing device. The method also includes returning a verification result to the directory server, receiving an access token based on the verification result, and then receiving an authentication creation request from a device specific to the user, which includes the access token. The method further includes determining that the access token is unexpired, providing a challenge to the device, and receiving, from the device, a signed challenge response.

The application discloses a kind of lightweight multi-user multi-factor two-way authentication registration method, belong to network security technical field.It includes: each user equipment collects biological characteristics, generates biological characteristic key and public parameter;Each user equipment initiates registration to authentication gateway, and carries out the registration between user equipment;User equipment carries out the transmission of hash operation message authentication code between, realizes the verification between users;First user equipment selects a random number, calculates the value for verification, and sends to authentication gateway;Authentication gateway solves out random number, carries out preliminary verification to each user equipment;Select one of challenge response pair from the registered data, calculate the value for verification, and send to the nth user equipment;User equipment n calculates the value for verification, and sends to authentication gateway;Authentication gateway calculates verification value, completes two-way verification.The application realizes that user equipment is authenticated to authentication gateway two-way, and enhances the security of user authentication.

The disclosure provides a system (108) and a method (400) for managing subscription at a Network Repository Function (NRF) (304). The method (400) includes storing, by the NRF (304), subscription data associated with the subscription of a NF consumer (301) for a validity time. Upon an expiration of the validity time, the method (400) includes implementing, by the NRF (304), a hold timer to retain stored subscription data. Upon an expiration of the hold timer, the method (400) further includes sending, by the NRF (304), a validity challenge request to the NF consumer to verify stored subscription data. Further, the method (400) includes receiving, by the NRF (304), a validity challenge response from the NF consumer (301) corresponding to a status of the validity challenge request. The method (400) further includes updating, by the NRF (304), the stored subscription data at the NRF (304) based on the validity challenge response.

A method for verifying an application configured to execute on a client device. A challenge request is sent to the application. A candidate challenge response is received from the application in response to the challenge request and then provided as input to a verification computation along with a challenge input. Based on an output of the verification computation, it is determined that the candidate challenge response was generated by providing the challenge input to a challenge computation. Based on the determination that the candidate challenge response was generated by providing the challenge input to the challenge computation, the application is verified.