Systems and methods for block chain authentication

Patent metadata

Field	Value
Publication number	US-10790982-B2
Application number	US-201715795804-A
Country	US
Kind code	B2
Filing date	Oct 27, 2017
Priority date	Oct 27, 2017
Publication date	Sep 29, 2020
Grant date	Sep 29, 2020

Abstract

A system for providing secure authentication between a service provider and at least one user device having a storage. The system having a processor managed by the service provider, which processor manages authentication between the at least one device and the service provider. The processor is configured to generate a block including at least user account information upon receipt of an authentication request from the at least one device; apply a cryptographic hash function to the block to create a hashed block; transmit the hashed block to the at least one device for storage in the memory of the at least one device; and upon receipt of the hashed block, validate the hashed block prior to providing access to the service provider.

First claim

The invention claimed is:

1. A method for block chain authentication for initiating communication between a user and a service provider, the method comprising:
creating a user account and generating an initial user authentication block including authorized user account information;
applying a cryptographic hash function to the initial user authentication block using a processor to generate a hash of the initial user authentication block;
transmitting or sending the hash of the initial user authentication block to the user for storage of the hash of the initial user authentication block in a memory of an information handling system operated by the user;
upon receiving a user authentication request from the information handling system, sending a request for and receiving the hash of the initial user authentication block stored in the memory of the information handling system;
determining whether the hash of the initial user authentication block received from the information handling system is valid;
if the hash of the initial user authentication block received from the information handling system is determined to be valid, establishing access to the user account for the information handling system, generating an additional user authentication block including session informational and applying the cryptic hash function to the additional user authentication block to generate a hash of the additional user authentication block, and transmitting the hash of the additional user authentication block to the information handling system for storage in the memory thereof;
upon receiving a subsequent user authentication request, sending a request for and receiving the hash of the additional user authentication block stored in the memory of the information handling system;
determining whether the hash of the additional user authentication block received from the information handling system is valid; and
if the hash of the additional user authentication block received from the information handling system is determined to be valid, establishing access to the user account for the information handling system.

2. The method of claim 1 , further comprising decrypting the hash of the initial block received from the information handling system.

3. The method of claim 1 , wherein the additional user authentication block includes at least the hash of the initial user authentication block.

4. The method of claim 3 , further comprising generating an alarm to indicate that user authentication has been denied if the hash of the initial user authentication or the hash of the additional user authentication is determined not to be valid.

5. The method of claim 4 , further comprising transmitting the alarm to the information handling system operated by the user.

6. The method of claim 1 , wherein the processor is part of a data or operations center managed by the service provider.

7. The method of claim 1 , wherein the information handling system comprises a personal computer, a tablet, a gaming system, a smart phone, a laptop, a smart appliance, a server, or a voice assistant.

8. The method of claim 1 , wherein the initial user authentication block and/or the additional user authentication block includes identification information associated with the user authentication block, a user name, user selected information, nonce or random data, or combinations thereof.

9. A system for providing secure authenticated access of user accounts between a service provider and at least one user device, the system comprising:
a server managed by the service provider, the server comprising at least a one memory and a processor that manages authentication requests between the at least one user device and the service provider, the processor accessing and executing programming instructions stored in the at least one memory such that the system is configured to:
a. generate a user authentication block including selected user account information upon receipt of an authentication request from the at least one user device;
b. apply a cryptographic hash function to the user authentication block to create a hash of the user authentication block;
c. transmit the hash of the user authentication block to the at least one user device for storage in a memory of the at least one user device;
d. upon receipt of the hash of the user authentication block from the at least one user device, validate the hash of the user authentication block received from the at least one user device prior to providing access to the service provider;
e. if the hash of the user authentication block received from the at least one user device is validated, provide access to the service provider, generate an additional user authentication block including session information, apply the cryptographic hash function to the additional user authentication block to create a hash of the additional user authentication block, and send the hash of the additional user authentication block to the at least one user device for storage in the memory thereof, wherein the hash of the additional user authentication block is used to validate the at least one user device's next authentication request to access the service provider; and
f. repeat steps a. to e. for each subsequent authentication request by the at least one user device.

10. The system of claim 9 , wherein if a received hash is not valid, the processor is configured to generate an alarm to indicate that user authentication has been denied.

11. The system of claim 10 , wherein the processor transmits the alarm to the at least one device.

12. The system of claim 9 , wherein the processor is part of a data or operations center managed by the service provider.

13. The system of claim 9 , wherein the at least one device comprises a personal computer, a tablet, a gaming system, a smart phone, a laptop, a smart appliance, a server, or a voice assistant.

14. The system of claim 9 , where the user authentication block or the additional user authentication block includes identification information associated with the block, a user name, user selected information, nonce, or combinations thereof.

15. A method for providing authentication between a service provider and at least one user-operated information handling system, the method comprising:
a. generating a block including user account information upon receipt of an authentication request from the information handling system;
b. applying a cryptographic hash function to the block to create a hash using a processor;
c. transmitting the hash to the information handling system for storage in a memory of the information handling system;
d. upon receipt of the hash from the information handling system, validating the hash received from the information handling system prior to providing the user access to the service provider;
e. if the hash received from the information handling system is validated, generate an additional block including session information, apply the cryptographic hash function to the additional block to create an additional hash, and send the additional hash to the information handling system for storage in the memory, wherein the additional hash is used for validation in the information handling system's next authentication request, and
f. repeating steps a. to e. for each subsequent authentication request by information handling system.

16. The method of claim 15 , further comprising:
generating an alarm or notice to indicate that user authentication has been denied if the hash is not valid; and
transmitting the alarm or notice to the information handling system.

Assignees

• Secureworks Corp

Inventors

• Clements Thomas

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• G06F21/31

  User authentication · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title