METHOD, APPARATUS, AND COMPUTER PROGRAM PRODUCT FOR SECURE TWO-FACTOR AUTHENTICATION

Various methods are provided for secure two-factor authentication, and more specifically, for incorporating a layer of security to two-factor authentication using Short Message Service in a manner virtually transparent to the end-user. Methods may include receiving a request for registration for two...

Full description

Saved in:
Bibliographic Details
Main Authors OLSZEWSKI, Daniel, PEETERS, Christian, SHERMAN, Imani, TRAYNOR, Patrick G, PATTON, Christopher, SHRIMPTON, Thomas
Format Patent
LanguageEnglish
Published 10.03.2022
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:Various methods are provided for secure two-factor authentication, and more specifically, for incorporating a layer of security to two-factor authentication using Short Message Service in a manner virtually transparent to the end-user. Methods may include receiving a request for registration for two-factor authentication from a client including a username and password; providing a request for a mobile device number; receiving the mobile device number and a pre-shared key; sending to a mobile device an identity of the client and a server key share; receiving from the mobile device a mobile device key share; sending information corresponding to an exchange with the mobile device and a challenge derived from the pre-shared key to the client in response to the device key share corresponding to the server key share; receiving confirmation of registration with the mobile device; and establishing a shared key in response to verification of the confirmation.
Bibliography:Application Number: US202117446023