US7149899B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Establishing a secure channel with a human user
Assignee: Intertrust Technologies Corp
•
Filing: 2003-04-25
•
Granted: 2006-12-12
•
Expires: 2023-04-25
Abstract
Abstract A method of establishing a secure channel between a human user and a computer application is described. A secret unique identifier (“PIN”) is shared between a user and an application. When the user makes a request that involves utilizing the PIN for authentication purposes, the application renders a randomly selected identifier. The randomly selected identifier is in a format that is recognizable to a human but is not readily recognizable by an automated agent. The randomly selected identifier is then presented to the human user. The user identifies the relationship between the randomly selected identifier and the PIN. If the user's input reflects the fact that the user knows the PIN, then the user is authenticated.
Inventors
- 👤 Binyamin Pinkas
- 👤 Stuart A. Haber
- 👤 Robert E. Tarjan
- 👤 Tomas Sander
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 00:42
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/083; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/36; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G07; G07C; G07C9/00; G07C9/30; G07C9/32; G07C9/33; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G07F7/1025; G09; G09C; G09C5/00; H04L9/00; H04L9/32; H04L9/3226; H04L9/3271; H04W; H04W12/00; H04W12/06; H04L63/10; H04W12/08; H04W12/60; H04W12/69; H04W12/77
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
96 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the user inputs a sequence of data, the sequence of data indicating the difference between the secret identifier and the randomly selected identifier; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 2
Independent Claim
96 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the user inputs a sequence of data, the sequence of data indicating the difference between the secret identifier and the randomly selected identifier; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 3
Independent Claim
91 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the input represents a series of locations on the randomly selected identifier, the locations indicating the secret identifier; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 4
Independent Claim
91 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user, wherein the input represents a series of locations on the randomly selected identifier, the locations indicating the secret identifier; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 5
Independent Claim
89 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image generated by a Reverse Turing Test (RTT); receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 6
Independent Claim
89 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image generated by a Reverse Turing Test (RTT); receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 7
Independent Claim
86 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image formatted using various styles; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 8
Independent Claim
86 words
A method of establishing a secure channel between a user and a computer application comprising: rendering to the user a randomly selected identifier, wherein the randomly selected identifier is rendered as an image formatted using various styles; receiving input from the user based on both the randomly selected identifier and a secret identifier associated with the user; determining, based on the input whether the user demonstrates knowledge of the secret identifier; and authenticating or not authenticating the user based upon the outcome of said determining step.
Claim 9
Independent Claim
169 words
A method for authenticating a user with a secure application in an insecure environment comprising the steps of: generating a PIN that is associated with the user, the PIN being known by both the secure application and the user; requesting an operation such that the secure application renders a randomly generated identifier; sending the randomly generated identifier to a display device, which displays the randomly generated identifier to the user; receiving input in the form of at least one command such that at least one value is attributed to the at least one command, the at least one value having a relationship to the PIN; sending the at least one value to the secure application, wherein the secure application compares the at least one value to the PIN to determine if the at least one value corresponds to the PIN; and if the user input demonstrates knowledge of the PIN authenticating the user; and if the user input does not demonstrate knowledge of the PIN not authenticating the user.
Claim 10
Independent Claim
169 words
A method for authenticating a user with a secure application in an insecure environment comprising the steps of: generating a PIN that is associated with the user, the PIN being known by both the secure application and the user; requesting an operation such that the secure application renders a randomly generated identifier; sending the randomly generated identifier to a display device, which displays the randomly generated identifier to the user; receiving input in the form of at least one command such that at least one value is attributed to the at least one command, the at least one value having a relationship to the PIN; sending the at least one value to the secure application, wherein the secure application compares the at least one value to the PIN to determine if the at least one value corresponds to the PIN; and if the user input demonstrates knowledge of the PIN authenticating the user; and if the user input does not demonstrate knowledge of the PIN not authenticating the user.
Claim 11
Dependent Claim
20 words
The method of claim 5 , wherein the command represents a relationship between the PIN and the randomly generated identifier.
Claim 12
Dependent Claim
27 words
The method of claim 5 , wherein the command represents clicks in a sequence, the clicks indicating the difference between the PIN and the randomly generated identifier.
Claim 13
Dependent Claim
24 words
The method of claim 5 , wherein the command represents a series of locations on the randomly generated identifier, the locations indicating the PIN.
Claim 14
Dependent Claim
15 words
The method of claim 5 , wherein the randomly generated identifier is used only once.
Claim 15
Independent Claim
103 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information received represents a relationship between the value of the random identifier and the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 16
Independent Claim
103 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information received represents a relationship between the value of the random identifier and the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 17
Independent Claim
110 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information received represents clicks in a sequence, the clicks indicating the difference between the value of the random identifier and the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 18
Independent Claim
110 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information received represents clicks in a sequence, the clicks indicating the difference between the value of the random identifier and the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 19
Independent Claim
103 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information represents a series of locations on the random identifier, the locations indicating the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 20
Independent Claim
103 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user; receive information from the user, wherein the information represents a series of locations on the random identifier, the locations indicating the value of the PIN; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 21
Independent Claim
98 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user, wherein random identifier is rendered as an image generated by a Reverse Turing Test (RTT); receive information from the user; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 22
Independent Claim
98 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user, wherein random identifier is rendered as an image generated by a Reverse Turing Test (RTT); receive information from the user; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 23
Independent Claim
96 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user, wherein the random identifier is rendered as an image formatted using various styles; receive information from the user; and determine if the information received sufficiently demonstrates knowledge of the PIN.
Claim 24
Independent Claim
96 words
A system for establishing a secure channel from a user to an application over which a PIN can be submitted comprising: a display; a memory for storing information concerning the PIN; a processor configured for executing instructions stored in the memory wherein the memory stores instructions that: generate a random identifier in response to a request using the PIN; render the random identifier to the user, wherein the random identifier is rendered as an image formatted using various styles; receive information from the user; and determine if the information received sufficiently demonstrates knowledge of the PIN.
References Cited (Backward Citations)
US4977594A
Cited
US5050213A
Cited
US5410598A
Cited
US4827508A
Cited
US5124117A
Cited
US5150411A
Cited
US5940504A
Cited
US5638443A
Cited
EP0715247A1
Cited
US5715403A
Cited
US5629980A
Cited
US5634012A
Cited
US6389402B1
Cited
US20010042043A1
Cited
US20040054630A1
Cited
US20030105721A1
Cited
US20020112171A1
Cited
US6427140B1
Cited
US6185683B1
Cited
US20020048369A1
Cited
US20050060584A1
Cited
US5910987A
Cited
US5915019A
Cited
US5917912A
Cited
US6363488B1
Cited
WO1996027155A2
Cited
US20040103305A1
Cited
US6253193B1
Cited
US5949876A
Cited
US20040133793A1
Cited
US5982891A
Cited
US6237786B1
Cited
US20040123129A1
Cited
US6640304B2
Cited
US6658568B1
Cited
US5530235A
Cited
US5534975A
Cited
WO1997043761A2
Cited
US6157721A
Cited
US20030041239A1
Cited
US6618484B2
Cited
US6240185B1
Cited
US5943422A
Cited
US6292569B1
Cited
US6449367B2
Cited
US20020023214A1
Cited
US20030163431A1
Cited
WO1998009209A1
Cited
US5892900A
Cited
WO1998010381A1
Cited
US5920861A
Cited
WO1998037481A1
Cited
US5920630A
Cited
US6138119A
Cited
US5999949A
Cited
WO1999001815A1
Cited
US6668325B1
Cited
US20030069749A1
Cited
US20030069748A1
Cited
WO1999024928A2
Cited
US6112181A
Cited
US20030046244A1
Cited
WO1999048296A1
Cited
US6195698B1
Cited
US6209093B1
Cited
US20040107356A1
Cited
WO2000075925A1
Cited
US20050050332A1
Cited
US6785815B1
Cited
WO2001006374A2
Cited
WO2001010076A2
Cited
WO2001009702A2
Cited
US6832316B1
Cited
US20050060560A1
Cited
US20020087859A1
Cited
US20020152173A1
Cited
US20030084003A1
Cited
US20030023856A1
Cited
US20040059951A1
Cited
US20050027871A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-12-11 | 2010-06-12 | 2010-12-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-12-11 | 2014-06-12 | 2014-12-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-12-11 | 2018-06-12 | 2018-12-12 | $7700.00 | Window Closed / Lapsed |