Patent ID: 9225526
Filing Date: 2015-12-29
Classification: G06F,H04L

Abstract:
1. A method comprising: receiving, by a processing device of a server, a message comprising a username and a first hashed value; retrieving a hashed password associated with the username; calculating a time-dependent value associated with the username; calculating a second hashed value using the username, the hashed password, and the time-dependent value; determining whether the second hashed value matches the first hashed value from the message; receiving a client session random value and a Message Authentication Code (MAC) value; validating the MAC value at the server using the client session random value, the second hashed value, and a displayed code value from a hardware token; generating a server session random value at the server; and generating, by the processing device of the server, a session key by executing an iterative MAC function over: a concatenation of the server session random value and the client session random value, and a concatenation of the hashed password and the displayed code value from the hardware token.