Patent US5657388A successfully refreshed from Google Patents.
US5657388A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for utilizing a token for resource access
Assignee: EMC Corp
•
Filing: 1994-03-16
•
Granted: 1997-08-12
•
Expires: 2014-03-16
Abstract
Abstract A method and apparatus for utilizing a token which is preferably a "dumb token" to provide secure access by authorized users to a selected resource. The token stores a secret user code in machine readable form, which code is read by a token processor. The token processor also receives a time-varying value and an algorithm, both of which may be stored or generated at either the token or the token processor and preferably a secret personal identification code which may be inputted at the token, but is preferably inputted at the token processor. The secret user code, time-varying value and secret personal identification code are then algorithmically combined by the algorithm, preferably in the token processor, to generate a one-time nonpredictable code which is transmitted to a host processor. The host processor utilizes the received one-time nonpredictable code to determine if the user is authorized access to the resource and grants access to the resource if the user is determined to be authorized. The system may be modified to operate in query/response mode. The token processor may be any of a variety of available portable remote processors or may be a device such as a telephone which is equipped with card or other token reader and with processing capability.
Inventors
- 👤 Kenneth P. Weiss
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 13:18
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; H; H04; H04L; H04L9/00; G06F21/35; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/385; G06Q20/40; G06Q20/409; G06Q20/4093; G07; G07C; G07C9/00; G07C9/20; G07C9/215; G07F; G07F7/00; G07F7/08; G07F7/0873; G07F7/088; G07F7/0886; G07F7/10; G07F7/1008; H04L9/32; H04L9/3226; H04L9/3234; H04L9/3271; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2103; G06F2221/2115; G06F2221/2151; H04L2209/00; H04L2209/80; H04L2209/88
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
119 words
A system for providing secure access by an authorized user to a selected resource comprising: a token in the possession of the user which stores a secret user code for the system, said code being stored in a machine readable form; a token processor having a reader for said token, a time-varying value element, a code input device, means for receiving the secret user code read from the token and the time-varying value and for generating a one-time nonpredictable code in response thereto, and a transmitter for transmitting the generated nonpredictable code; and a host processor having a receiver for the transmitted nonpredictable code, and means responsive to a received nonpredictable code for authorizing access to said selected resource.
Claim 2
Independent Claim
119 words
A system for providing secure access by an authorized user to a selected resource comprising: a token in the possession of the user which stores a secret user code for the system, said code being stored in a machine readable form; a token processor having a reader for said token, a time-varying value element, a code input device, means for receiving the secret user code read from the token and the time-varying value and for generating a one-time nonpredictable code in response thereto, and a transmitter for transmitting the generated nonpredictable code; and a host processor having a receiver for the transmitted nonpredictable code, and means responsive to a received nonpredictable code for authorizing access to said selected resource.
Claim 3
Dependent Claim
96 words
A system as claimed in claim 1 wherein said token also stores a public code in machine readable form, wherein the token reader of said token processor reads said public code and said means for transmitting transmits the read public code to the host processor, wherein the host processor generates a selected query in response to the received public code, which query is transmitted to the portable processor, and wherein the nonpredictable code is a response to the query which is a function of at least the query and the secret code read from the token.
Claim 4
Dependent Claim
23 words
A system as claimed in claim 2 wherein the response is also a function of a secret personal identification code inputted by user.
Claim 5
Dependent Claim
15 words
A system as claimed in claim 1 wherein the time-varying value element is a clock.
Claim 6
Dependent Claim
25 words
A system as claimed in claim 1 wherein the time-varying value element varies the value each time a token is used with the portable processor.
Claim 7
Dependent Claim
51 words
A system as claimed in claim 5 including means for storing at least one of each generated nonpredictable code, an intermediate value used in generating each nonpredictable code and another value related to the nonpredictable code as the secret user code in the token in place of the code previously stored.
Claim 8
Dependent Claim
50 words
A system as claimed in claim 1 wherein said token also stores an algorithm usable by the token processor to generate the nonpredictable code, said algorithm being read into the token processor by the token reader and utilized by the means for receiving and generating to generate the nonpredictable code.
Claim 9
Dependent Claim
28 words
A system as claimed in claim 1 wherein the means for generating a nonpredictable code also receives and utilizes a secret personal identification code inputted by the user.
Claim 10
Dependent Claim
27 words
A system as claimed in claim 8 wherein the secret personal identification code is inputted by the user on the code input device of the token processor.
Claim 11
Dependent Claim
47 words
A system as claimed in claim 8 wherein the token includes a code input device, the secret personal identification code being inputted to the token by the user on said code input device, and wherein the secret personal identification code is read by the means for receiving.
Claim 12
Dependent Claim
40 words
A system as claimed in claim 10 wherein said token includes means for algorithmically combining said secret user code and said secret personal identification code; and wherein said means for receiving reads the output from said means for algorithmically combining.
Claim 13
Dependent Claim
20 words
A system as claimed in claim 1 wherein said transmitter and said receiver are modems interconnected by a telephone line.
Claim 14
Dependent Claim
19 words
A system as claimed in claim 1 wherein said transmitter and said receiver are elements of a radio network.
Claim 15
Dependent Claim
18 words
A system as claimed in claim 1 wherein said transmitter and receiver are elements of a network interface.
Claim 16
Dependent Claim
39 words
A system as claimed in claim 1 wherein said token also includes a one-time code generator and a means responsive to the secret user code stored thereon and to a current one-time code for generating a readable nonpredictable code.
Claim 17
Dependent Claim
23 words
A system as claimed in claim 1 wherein the token processor is a telephone having a token reader and a processor associated therewith.
Claim 18
Independent Claim
135 words
A system for providing secure access by an authorized user to a selected resource comprising: a token in the possession of the user which stores a secret user code for the system, said code being stored in a machine readable form; and a token processor having a reader for said token, a time-varying value element, a code input device, means for receiving the secret user code read from the token, a secret personal identification code inputted on the input device by the user and the time-varying value and for generating a one-time nonpredictable code in response thereto, and means responsive to the generated one-time nonpredictable code for causing the acceptability of the code to be determined and for authorizing access to said selected resource in response to a determination that the nonpredictable code is acceptable.
Claim 19
Independent Claim
135 words
A system for providing secure access by an authorized user to a selected resource comprising: a token in the possession of the user which stores a secret user code for the system, said code being stored in a machine readable form; and a token processor having a reader for said token, a time-varying value element, a code input device, means for receiving the secret user code read from the token, a secret personal identification code inputted on the input device by the user and the time-varying value and for generating a one-time nonpredictable code in response thereto, and means responsive to the generated one-time nonpredictable code for causing the acceptability of the code to be determined and for authorizing access to said selected resource in response to a determination that the nonpredictable code is acceptable.
Claim 20
Independent Claim
137 words
A method for providing secure access by an authorized user to a selected resource comprising the steps of: a) reading a secret user code from a token into a token processor; b) obtaining a time-varying value and an algorithm at the token processor; c) the token processor receiving a user inputted secret personal identification code; d) the token processor utilizing the secret user code, time-varying value and secret personal identification code in the algorithm to obtain a one-time nonpredictable code; e) the token processor transmitting the generated one-time nonpredictable code to a host processor; f) the host processor utilizing the received nonpredictable code to determine if the user is authorized for access to the resource; and g) the host processor granting the user access to the resource in response to a determination that the user is authorized.
Claim 21
Independent Claim
137 words
A method for providing secure access by an authorized user to a selected resource comprising the steps of: a) reading a secret user code from a token into a token processor; b) obtaining a time-varying value and an algorithm at the token processor; c) the token processor receiving a user inputted secret personal identification code; d) the token processor utilizing the secret user code, time-varying value and secret personal identification code in the algorithm to obtain a one-time nonpredictable code; e) the token processor transmitting the generated one-time nonpredictable code to a host processor; f) the host processor utilizing the received nonpredictable code to determine if the user is authorized for access to the resource; and g) the host processor granting the user access to the resource in response to a determination that the user is authorized.
Claim 22
Dependent Claim
90 words
A method as claimed in claim 18 including the steps of: h) the token processor reading a public code from the token and transmitting the public code to the host processor; i) the host processor utilizing the public code to generate a query and transmitting the query to the token processor; and j) the token processor utilizing the query during step (d) in generating a one-time nonpredictable code which is also a response to the query; k) step (f) including the step of verifying that the correct response is received.
References Cited (Backward Citations)
US3764742A
Cited
US3956615A
Cited
US4123747A
Cited
US4302810A
Cited
US4998279A
Cited
US4885778A
Cited
US4856062A
Cited
US5023908A
Cited
US5168520A
Cited
US5367572A
Cited
US5058161A
Cited
US5097505A
Cited
US5237614A
Cited
US5280527A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-08-11 | 2001-02-10 | 2001-08-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-08-11 | 2005-02-10 | 2005-08-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-08-11 | 2009-02-10 | 2009-08-12 | $7700.00 | Window Closed / Lapsed |