Authenticating computing devices based on a dynamic port punching sequence

Patent metadata

Field	Value
Publication number	US-11876790-B2
Application number	US-202016748500-A
Country	US
Kind code	B2
Filing date	Jan 21, 2020
Priority date	Jan 21, 2020
Publication date	Jan 16, 2024
Grant date	Jan 16, 2024

Abstract

A computer-implemented method includes: receiving, by an authentication device, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the authentication device; recording, by the authentication device, a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets are received; and authenticating, by the authentication device, the client device based on the sequence of port identifiers.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving, by an authentication device, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the authentication device;
recording, by the authentication device, a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets is received and a plurality of respective transmission delay durations between the transmission of the plurality of the passcode packets; and
authenticating, by the authentication device, the client device based on verifying the sequence of port identifiers against a predetermined sequence of port identifiers and verifying the plurality of transmission delay durations against a plurality of delay durations predetermined to be provided by the client device between the transmission of the plurality of the passcode packets, wherein the plurality of delay durations comprise a plurality of different delay durations.

2. The computer-implemented method of claim 1 , wherein the authenticating is further based on authenticating a signature or payload value within at least one of the plurality of passcode packets.

3. The computer-implemented method of claim 1 , further comprising updating a feature available in an avionics system based on the authenticating.

4. The method of claim 3 , wherein the updating the feature comprises one of enabling or disabling the feature.

5. The computer-implemented method of claim 1 , further comprising establishing a secure session with the client device based on the authenticating the client device.

6. The computer-implemented method of claim 1 , further comprising:
receiving a command packet from the client device, wherein the authenticating is further based on the port identifier from which the command packet is received; and
executing one or more instructions included in the command packet based on the authenticating.

7. The computer-implemented method of claim 1 , wherein the authenticating the client device further comprises determining that the sequence of port identifiers matches a preconfigured sequence of port identifiers or a generated sequence of port identifiers generated by an algorithm.

8. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by a computing device to cause the computing device to perform operations comprising:
receiving, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the computing device;
recording a sequence comprising a plurality of respective transmission delay durations between the transmission of the plurality of the passcode packets; and
authenticating the client device based on verifying the plurality of transmission delay durations against a sequence of delay durations predetermined to be provided by the client device between the transmission of the plurality of the passcode packets, wherein the sequence of delay durations comprises a plurality of different delay durations.

9. The computer program product of claim 8 , wherein the operations further comprise recording a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets is received, wherein the authenticating is further based on the sequence of port identifiers.

10. The computer program product of claim 9 , wherein the authenticating the client device further comprises determining that the sequence of port identifiers matches a preconfigured sequence of port identifiers or a generated sequence of port identifiers generated by an algorithm.

11. The computer program product of claim 8 , wherein the authenticating is further based on authenticating a signature or payload value within at least one of the plurality of passcode packets.

12. The computer program product of claim 8 , wherein the operations further comprise updating a feature available in an avionics system based on the authenticating.

13. The computer program product of claim 8 , wherein the operations further comprise establishing a secure session with the client device based on the authenticating the client device.

14. The computer program product of claim 8 , wherein the operations further comprise:
receiving a command packet from the client device, wherein the authenticating is further based on a port identifier from which the command packet is received; and
executing one or more instructions included in the command packet based on the authenticating.

15. A system comprising:
a processor, a computer readable memory, a non-transitory computer readable storage medium associated with a computing device, and program instructions executable by the computing device to cause the computing device to perform operations comprising:
receiving, from a client device and via a network device, a plurality of passcode packets as part of a request to be authenticated by the computing device;
recording a sequence comprising a plurality of respective transmission delay durations between the transmission of the plurality of the passcode packets;
recording a sequence of port identifiers corresponding to respective ports of the network device via which the plurality of passcode packets is received; and
authenticating the client device based on verifying the plurality of transmission delay durations against a sequence of delay durations predetermined to be provided by the client device between the transmission of the plurality of the passcode packets and verifying the sequence of port identifiers against a predetermined sequence of port identifiers, wherein the sequence of delay durations comprises a plurality of different delay durations.

16. The system of claim 15 , wherein the authenticating the client device further comprises determining that the sequence of port identifiers matches a preconfigured sequence of port identifiers or a generated sequence of port identifiers generated by an algorithm.

17. The system of claim 15 , wherein the authenticating is further based on authenticating a signature or payload value within at least one of the plurality of passcode packets.

18. The system of claim 15 , wherein the operations further comprise updating a feature available in an avionics system based on the authenticating.

19. The system of claim 15 , wherein the operations further comprise establishing a secure session with the client device based on the authenticating the client device.

20. The system of claim 15 , wherein the operations further comprise:
receiving a command packet from the client device, wherein the authenticating is further based on the port identifier from which the command packet is received; and
executing one or more instructions included in the command packet based on the authenticating.

Assignees

• Boeing Co

Inventors

• Nguyen Daniel
• Pirvu Adrian D
• Vanguardia Michael R

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04W12/08

  Access security · CPC title

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title