Patent ID: 9185107
Filing Date: 2015-11-10
Classification: G06F,H04L

Abstract:
1. A method of securing a password comprising: receiving, by a processing device of a server computer system, a client hash value from a client, the client hash value computed by hashing the password to generate a first hash value, and hashing the first hash value combined with a user input of an answer to a challenge in response to a challenge presented to the user to generate the client hash value; computing, by the processing device of the server computer system, a server hash value using password data for the user that is stored in a data store coupled to the server and a server-side answer that is stored in the data store; determining, by the processing device of the server computer system, whether the server hash value matches the client hash value; and granting, by the processing device of the server computer system, data access to the user in view of a determination that the server hash value matches the client hash value and denying data access to the user in view of a determination that the server hash value does not match the client hash value.