Patent ID: 9032212
Filing Date: 2015-05-12
Classification: H04L

Abstract:
1. A method comprising: receiving in each of a plurality of servers same authentication information from a client for authentication in a current epoch, the authentication information being generated at the client for the current epoch; each of the plurality of servers computing a message as a function of an identifier of the client, an identifier of the current epoch, and an indication as to whether or not the authentication information received from the client is accepted by that server; and each of the plurality of servers computing a digital signature on its message using a secret key of a key pair of that server as generated for the current epoch, and sending the message and digital signature to a relying party as a signed message; wherein the client is authenticated by the relying party based on the signed messages generated by the respective servers; wherein the relying party: receives the signed messages from respective ones of the servers; verifies the digital signatures on the received messages using respective public keys of the key pairs of the servers as generated for the current epoch; and accepts the client as successfully authenticated if the digital signatures are valid and each of a threshold number of the servers indicates that the authentication information received from the client is accepted, the threshold number being more than one of the servers; and wherein the servers are implemented using at least one processing device comprising a processor coupled to a memory.