Patent ID: 9154496
Filing Date: 2015-10-06
Classification: G06F,H04L

Abstract:
1. A method comprising: storing in a first server a plurality of sets of passwords for respective users with each such set comprising at least one valid password for the corresponding user and a plurality of chaff passwords for that user; storing in a second server at least a portion of valid password indication information indicating for each of the sets which of the passwords in that set is a valid password; and proactively updating the sets of passwords and the valid password indication information in each of a plurality of epochs; wherein the valid password indication information for a given one of the sets comprises an index value denoting an index of the valid password for the given set; wherein the index value is stored as a shared secret across the first and second servers, such that neither the first server nor the second server stores the entire index value; wherein the first server stores a first value and the second server stores a second value, and the index value for the given set is a function of the first and second values; wherein the index value is utilized to determine whether a password received from a user attempting to access a protected resource is the valid password; and wherein the storing in the first server, storing in the second server and the proactively updating are performed by at least one processing device.