PATENT CLAIM ANALYSIS

Application Number: 16104918
Application Type: Utility
Filing Date: 2018-08
Publication Date: 2018-12
Patent Classification: ["713", "168000"]

Abstract:
A system and method for storing and accessing password verification data on multi-user computer systems that prevents remote attacks. Along with commonly-employed measures that limit the number of unsuccessful attempts to login or otherwise verify a password, it allows users to choose relatively simple passwords with full security. The secret component cannot be easily leaked or exfiltrated does not require periodic backup and is isolated in a way that allows it to be protected by conventional security measures such as safes, alarm systems and video surveillance from attackers who somehow gain access to the computing facility.

Claim (Index 1):
A method for password authentication comprising:\n obtaining a user id and a password as input on a password management module (PMM) comprising software executing on a processor configured to communicate with a restricted secret server (RSS); generating a salt on the password management module; securely sending a message including the salt to the RSS having a very large key (VLK) module; generating a block of unpredictable data by a cryptographically-strong bit stream generator; loading the block of unpredictable data into the VLK module; wherein the block of unpredictable data stored in the VLK module has a size such that a time to transfer the block of unpredictable data deters exfiltrating the block of unpredictable data out of the restricted secret server; using the salt included in the message as a seed for a deterministic random number generator (DRNG) on the restricted secret server; using the seeded DRNG to select multiple subsets of data from the block of unpredictable data; combining the multiple subsets of data from the block of unpredictable data to form a password authenticator token; securely sending a return message including the password authenticator token to the password management module; combining the password authenticator token with the password to form an input to a cryptographic hash function, an output of which is a password authenticator field; and storing the salt and the password authenticator field in a storage record associated with the user id in a database on the password management module.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 96.0
- Lexical Diversity: 1.29114
- Patent Class: 713.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15496082', '13370331', '13944743', '10617652', '10653503']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3753501969869998
- 35 USC 102 Novelty (BERT): 0.5882007168586851
- Combined Prediction Score: 0.3966352489741683
- Mean Citation Score: 258.025942
- Max Citation Score: 492.4215
- Similarity Product: 459.0258198878467

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 0
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test