EP0427465A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Databaseless security system
Assignee: AT&T Inc
•
Filing: 1990-11-01
•
Granted: —
•
Expires: 2010-11-01
Abstract
Abstract An improved security system, including a portable smart card (500) and a host computer (600), eliminates the need for the computer to store individual personal identification (ID) numbers for each user seeking access to the computer. Instead, the computer stores a first encryption algorithm E₁ used in converting a particular identification number (ID) n into a secret code S n for that particular user. S n also exists within the memory of the smart card having been loaded into its memory at the time of issue. A challenge number C is generated by the computer and transmitted to the smart card. Within the smart card and the computer, microprocessors respond to the challenge number C, the secret code S n , and a second encryption algorithm E₂ in order to generate response numbers R n and R′ n respectively. Thereafter, R n is transmitted to the computer where it is compared with R′ n . A favorable comparison is necessary for gaining access to the computer.
Inventors
- 👤 David Michael Claus
- 👤 Roy S. Coutinho
- 👤 Kevin Dean Murphy
- 👤 James Damon Snavley
- 👤 Kenneth Robert Zempol
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-02 07:16
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2103
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
208 words
1 . A system for controlling access to a secure facility, the system including a portable object (500) and means for transferring data between the portable object and the facility, the facility comprising: memory means for storing encryption algorithms E₁ and E₂; means (750) for generating a challenge number (C); means responsive to an identification signal (ID)subn that identifies the particular portable object (500) seeking to gain access to the facility, and to encryption algorithm E₁ for generating a secret code (S n ); means (720) responsive to the challenge number (C), to the secret code (S n ) and to encryption algorithm E₂ for generating a first response signal (R′ n ); means (760) for comparing the first response signal (R′ n ) with a second response signal (R n ) generated by the portable object, and for providing an enabling signal when the comparison is favorable; the portable object (500) comprising: memory means (550) for storing the secret code (S n )and the encryption algorithm E₂; and means (563) responsive to the secret code (S n ), to the challenge number (C) received from the facility, and to encryption algorithm E₂ for generating a second response signal (R n ) and transmitting same to the facility.
Claim 2
Dependent Claim
208 words
1 . A system for controlling access to a secure facility, the system including a portable object (500) and means for transferring data between the portable object and the facility, the facility comprising: memory means for storing encryption algorithms E₁ and E₂; means (750) for generating a challenge number (C); means responsive to an identification signal (ID)subn that identifies the particular portable object (500) seeking to gain access to the facility, and to encryption algorithm E₁ for generating a secret code (S n ); means (720) responsive to the challenge number (C), to the secret code (S n ) and to encryption algorithm E₂ for generating a first response signal (R′ n ); means (760) for comparing the first response signal (R′ n ) with a second response signal (R n ) generated by the portable object, and for providing an enabling signal when the comparison is favorable; the portable object (500) comprising: memory means (550) for storing the secret code (S n )and the encryption algorithm E₂; and means (563) responsive to the secret code (S n ), to the challenge number (C) received from the facility, and to encryption algorithm E₂ for generating a second response signal (R n ) and transmitting same to the facility.
Claim 3
Dependent Claim
66 words
2 . The system of claim 1 wherein the facility further includes: means for storing a list of identification numbers not entitled to access the secure facility; and means (770) for determining correspondence between the stored list of identification numbers and the identification signal that identifies the particular portable object seeking access to the facility, and for denying access to the facility when such correspondence exists.
Claim 4
Dependent Claim
48 words
3 . The system of claim 1 wherein the means (710) for generating the secret code (S n ) comprises a first processor, jointly responsive to the identification signal and to a secret master string, for executing a predetermined sequence of steps in accordance with encryption algorithm E₁.
Claim 5
Dependent Claim
49 words
4 . The system of claim 1 wherein the means (720) for generating the first response signal comprises a first processor, jointly responsive to the secret code (S n ) and to the challenge number (C), for executing a predetermined sequence of steps in accordance with encryption algorithm E₂.
Claim 6
Dependent Claim
44 words
5 . The system of claim 1 wherein the means (563) for generating the second response signal comprises a second processor, responsive to the secret code and to the challenge number, for executing a predetermined sequence of steps in accordance with encryption algorithm E₂.
Claim 7
Dependent Claim
24 words
6 . The system of claim 3 wherein encryption algorithm E₁ is a process for encrypting data in accordance with the Data Encryption Standard.
Claim 8
Dependent Claim
24 words
7 . The system of claim 5 wherein encryption algorithm E₂ is a process for encrypting data in accordance with the Data Encryption Standard.
Claim 9
Dependent Claim
14 words
8 . The system of claim 1 wherein the challenge number is substantially random.
Claim 10
Dependent Claim
150 words
9 . A method for testing the authenticity of a portable electronic device (500) and for enabling access to a secure facility when the portable electronic device is authentic, the method comprising the steps of: storing encryption algorithms E₁ and E₂; receiving an identification signal (ID) n that identifies the particular portable electronic device seeking access to the facility; generating a secret code (S n ) in accordance with encryption algorithm E₁ using the identification signal as an input; generating a challenge number (C) and transmitting same to the portable electronic device; generating a first response signal (R′ n ) in accordance with encryption algorithm E₂ using the secret code and the challenge number as inputs; comparing the first response signal (R′ n ) with a second response signal (R n ) generated by the portable electronic device; and enabling access to the secure facility when the comparison is favorable.
Claim 11
Dependent Claim
150 words
9 . A method for testing the authenticity of a portable electronic device (500) and for enabling access to a secure facility when the portable electronic device is authentic, the method comprising the steps of: storing encryption algorithms E₁ and E₂; receiving an identification signal (ID) n that identifies the particular portable electronic device seeking access to the facility; generating a secret code (S n ) in accordance with encryption algorithm E₁ using the identification signal as an input; generating a challenge number (C) and transmitting same to the portable electronic device; generating a first response signal (R′ n ) in accordance with encryption algorithm E₂ using the secret code and the challenge number as inputs; comparing the first response signal (R′ n ) with a second response signal (R n ) generated by the portable electronic device; and enabling access to the secure facility when the comparison is favorable.
Claim 12
Dependent Claim
51 words
10 . The method of claim 9 further including the steps of: storing a list of identification numbers not entitled to access the facility; and denying access to the facility when the received identification signal corresponds to a identification number stored on the list of those not entitled to such access.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.