Systems and methods for block chain authentication

Patent metadata

Field	Value
Publication number	US-11522711-B2
Application number	US-202017034504-A
Country	US
Kind code	B2
Filing date	Sep 28, 2020
Priority date	Oct 27, 2017
Publication date	Dec 6, 2022
Grant date	Dec 6, 2022

Abstract

A system for providing secure authentication between a service provider and at least one user device having a storage. The system having a processor managed by the service provider, which processor manages authentication between the at least one device and the service provider. The processor is configured to generate a block including at least user account information upon receipt of an authentication request from the at least one device; apply a cryptographic hash function to the block to create a hash; transmit the hash to the at least one device for storage in the memory of the at least one device; and upon receipt of the hash, validate the hash prior to providing access to the service provider.

First claim

What is claimed is:

1. A method for providing user authentication between a service provider and a user requesting access to a user account, comprising:
generating an initial user authentication block of a user identifiable block chain, including user account information associated with the user upon receiving an initial account activation or set-up request from the user;
applying a cryptographic hash function to the initial user authentication block to create a hash of the initial user authentication block;
sending the hash of the initial user authentication block to an information handling system of the user for storage in a memory of the information handling system;
upon receiving a subsequent user authentication request from the information handling system of user, sending a request for the hash of the initial user authentication block from the information handling system;
receiving a hash from the information handling system of the user, and validating the received hash in view of the hash of the initial user authentication block; and
if the received hash from the information handling system is valid, establishing access between the information handling system and the user account.

2. The method of claim 1 , further comprising generating an additional user authentication block including at least the hash of the initial user authentication block; applying the cryptographic hash function to the additional user authentication block to generate an additional hash; and sending the additional hash to the information handling system for storage in the memory to be used in a subsequent authentication request.

3. The method of claim 2 , further comprising applying a reversible cryptographic function to the additional hash and the hash of the initial user authentication block; and sending a result of the application of the reversible cryptographic function to the information handling system, wherein the information handling system is operable to apply the reversible cryptographic function to the result to obtain a next hash for authentication.

4. The method of claim 2 , wherein upon receipt of each subsequent authentication request from the information handling system, the method comprises:
validating a hash received from the information handling system associated with the subsequent user authentication request,
generating a subsequent user authentication block that includes at least a hash of a previous user authentication block;
applying the cryptographic hash function to the subsequent user authentication block to generate a subsequent hash, and
transmitting the subsequent hash to the information handling system of the user for storage in the memory to be used in a next authentication request.

5. The method of claim 1 , wherein validating the received hash from the information handing system comprises comparing the received hash with the hash of the initial user authentication block, wherein the hash of the initial user authentication block is stored at the service provider.

6. The method of claim 1 , further comprising generating and sending a notification to alert the user that the user identifiable block chain has been compromised if the received hash from the information handling system is not valid.

7. The method of claim 1 , wherein the information handling system comprises a personal computer, a tablet, a gaming system, a smart phone, a laptop, a smart appliance, a server, or a voice assistant.

8. The method of claim 1 , wherein the user authentication block includes a user name, user information, nonce or random data, session information, or combinations thereof.

9. A system for providing secure authenticated access of user accounts between a service provider and a user managed information handling system, the system comprising:
a server managed by the service provider, the server comprising one or more memories storing instructions and one or more processors that manage authentication requests between the information handling system and the service provider, the one or more processors executing the instructions stored in the one or more memories, wherein the one or more processors execute the instructions to:
generate an initial user authentication block of a user identifiable block chain, the initial user authentication block including at least user account information;
apply a cryptographic hash function to the initial user authentication block to create a hash thereof;
send the hash of the initial user authentication block to the information handling system for storage in a memory of the information handling system;
upon receiving a subsequent user authentication request from the information handling system, requesting the hash of the initial user authentication block from the information handling system;
receive a hash from the information handling system, and validate the received hash in view of the hash of the initial user authentication block; and
if the received hash from the information handling system is valid, establish access between the information handling system and the user account.

10. The system of claim 9 , wherein the one or more processors further are operable to: generate an additional user authentication block including at least the hash of the initial user authentication block; apply the cryptographic hash function to the additional user authentication block to generate an additional hash, and send the additional hash to the information handling system for storage in the memory to be used in a subsequent authentication request.

11. The system of claim 10 , wherein the one or more processors further are operable to apply a reversible cryptographic function to the additional hash and the hash of the initial user authentication block; and send a result of the application of the reversible cryptographic function to the information handling system, wherein the information handling system is operable to apply the reversible cryptographic function to the result to obtain a next hash for authentication.

12. The system of claim 10 , wherein upon receipt of each subsequent authentication request from the information handling system, the one or more processors are operable to:
validate a hash received from the information handling system associated with the subsequent user authentication request,
generate a subsequent user authentication block that includes at least a hash of a previous user authentication block;
apply the cryptographic hash function to the subsequent user authentication block to generate a subsequent hash, and
transmit the subsequent hash to the information handling system for storage in the memory to be used in a next authentication request.

13. The system of claim 9 , wherein the one or more processors are further operable to compare the received hash from the information handling system with the hash of the initial user authentication block to validate the received hashed.

14. The system of claim 9 , wherein if the received hash from the information handling system is not valid, the one or more processors are operable to generate and send a notification to alert the user.

15. The system of claim 9 , wherein the information handling system comprises a personal computer, a tablet, a gaming system, a smart phone, a laptop, a smart appliance, a server, or a voice assistant.

16. The system of claim 9 , wherein the initial user authentication block includes a user name, user information, nonce or random data, session information, or combinations thereof.

Assignees

• Secureworks Corp

Inventors

• Clements Thomas

Classifications

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• G06F21/35

  communicating wirelessly · CPC title

• G06F21/34

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• G06F21/31

  User authentication · CPC title