Homomorphic encryption for password authentication

Patent metadata

Field	Value
Publication number	US-11310049-B2
Application number	US-201816954270-A
Country	US
Kind code	B2
Filing date	Dec 6, 2018
Priority date	Dec 19, 2017
Publication date	Apr 19, 2022
Grant date	Apr 19, 2022

Abstract

Some embodiments are directed to a server device ( 100 ) and a client device ( 200 ) arranged to authenticating a user of client device ( 200 ). The user has access to an authentication string. Server device ( 100 ) is configured to encrypt a set of character/position data according to a homomorphic encryption algorithm. The client device allows the user to select a subset from the encrypted set from which a verification number is computed using the homomorphic operation.

First claim

The invention claimed is:

1. A server device for authenticating a user from a client device comprising:
a storage circuit,
wherein the storage circuit is arranged to store a first verification number,
wherein the first verification number is computed from a subset of a set of character/position data,
wherein the subset is indicated by an authentication string,
wherein the set of character/position data comprises a number for the combinations of a character from the character set and a position in the authentication string,
wherein the user has access to the authentication string,
wherein the authenticating string has multiple characters at multiple positions,
wherein the characters are selected from a character set; and
a processor circuit,
wherein the processor circuit is arranged to encrypt the set of character/position data,
wherein the set of character/position data is encrypted according to a homomorphic encryption algorithm,
wherein the processor circuit is arranged to send the encrypted set to the client device,
wherein the processor circuit is arranged to receive a second verification number from the client device,
wherein the second verification number is computed by homomorphically computing an encrypted second verification number from a subset of the encrypted set,
wherein the subset is indicated by the authentication string,
wherein the processor circuit is arranged to verify the correspondence between the first verification number and the encrypted second verification number so as to authenticate the user to access a service provided by the server.

2. The server device as in claim 1 ,
wherein the processor circuit is arranged to generate a permutation of the character set,
wherein the processor circuit is arranged to obtain display data for the characters in the character set,
wherein the display data is associated with an encrypted character/position data corresponding to the character,
wherein the processor circuit is arranged to send the display data to the client device,
wherein the client device is associated with the encrypted character/position data,
wherein the display data is in an order according to the permutation of the character set.

3. The server device as in claim 1 , wherein the same display data is used for all positions.

4. The server device as in claim 2 ,
wherein no display data is sent to the client device for a subsequent authentication,
wherein the client device uses cached display data.

5. The server device as in claim 1 ,
wherein the first verification number is blinded with a blinding number,
wherein computing the second verification number comprises blinding with the blinding number.

6. The server device as in claim 1 , wherein at least a portion of the character/position data are random numbers.

7. The server device as in claim 1 ,
wherein at least some of the character/position data are computed as multiples of powers of a base number,
wherein at least some of character/position data are computed as powers using exponents,
wherein the exponents are powers of a base number.

8. The server device as in claim 1 , wherein verifying the correspondence comprises decrypting the second verification number.

9. The server device as in claim 1 , wherein the homomorphic encryption algorithm is a probabilistic homomorphic encryption algorithm.

10. The server device as in claim 1 , wherein the verification number is a Pederson commit and/or wherein the encryption is ElGamal encryption.

11. The server device as in claim 1 , wherein different display data is generated for at least two different positions.

12. The server device as in claim 1 , wherein the correspondence comprises equality.

13. The server device as in claim 1 , wherein the correspondence comprises satisfying at least one linear expression.

14. A client device for authenticating a user to a server device comprising:
a processor circuit,
wherein the processor circuit is arranged to receive a set of character/position data,
wherein the set of character/position data is encrypted according to a homomorphic encryption algorithm,
wherein the encrypted set of character/position data comprise a number for the combinations of a character from the character set and a position in an authentication string,
wherein the processor circuit is arranged to homomorphically compute an encrypted second verification number from a subset of the encrypted set of character/position data,
wherein the subset is indicated by the authentication string,
wherein the user has access to the authentication string,
wherein the authenticating string has multiple characters at multiple positions,
wherein the characters are selected from a character set,
wherein the processor circuit is arranged to send the encrypted second verification number to the server device and the user is authorized to access a service via the client device provided by the server device when the second verification number corresponds to a first verification number stored at the server device.

15. The client device as in claim 14 ,
wherein the processor circuit is arranged to receive display data from the server device,
wherein the server is associated with the encrypted character/position data,
wherein the processor circuit is arranged to display the received display data for each position of the authentication string,
wherein the processor circuit is arranged to receive user input,
wherein the user data is used to select a selected display data from the displayed display data,
wherein the processor circuit is arranged to select the subset in correspondence with the selected display data.

16. The client device as in claim 14 , further comprising a storage circuit,
wherein the storage circuit is arranged to store a blinding number,
wherein the processor circuit is configured to blind the encrypted second verification number with the blinding number.

17. The client device as in claim 14 , wherein the correspondence between the second verification number and the first verification number comprises equality.

18. The client device as in claim 14 , wherein the correspondence between the second verification number and the first verification number comprises satisfying at least one linear expression.

19. A method for authenticating a user from a client device comprising:
storing a first verification number,
wherein the first verification number is computed from a subset of a set of character/position data,
wherein the subset is indicated by the authentication string,
wherein the set of character/position data comprises a number for the combinations of a character from the character set and a position in an authentication string,
wherein the user has access to the authentication string,
wherein the authenticating string has multiple characters at multiple positions,
wherein the characters are selected from a character set;
encrypting the set of character/position data,
wherein the set of character/position data is encrypted according to a homomorphic encryption algorithm;
sending the encrypted set to the client device;
receiving a second verification number from the client device,
wherein the second verification number is computed by homomorphically computing an encrypted second verification number from a subset of the encrypted set,
wherein the said is indicated by the authentication string; and
verifying the correspondence between the first verification number and the encrypted second verification number so as to authen

Assignees

• Koninklijke Philips Nv

Inventors

• De Hoogh Sebastiaan Jacobus Antonius
• Pestrin Alan

Classifications

• H04L9/3226 Primary

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• H04L9/008 Primary

  involving homomorphic encryption · CPC title