EP0534673A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Improved method for secure access control
Assignee: AT&T Inc
•
Filing: 1992-09-17
•
Granted: —
•
Expires: 2012-09-17
Abstract
Abstract A requester (102, 104) making a request for access to a destination (114,116) is prompted to supply additional authentication information, beyond that which may be supplied by the requester in an attempt to meet a first level of security processing specified by the nature of the request itself, only if it is determined from a predetermined set of attributes of the particular access request that additional security processing is necessary before access can be granted to the destination. <IMAGE>
Inventors
- 👤 Randolph J. Pilc
- 👤 Roy Philip Weber
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-30 22:36
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0853; G; G07; G07C; G07C9/00; G07C9/20; G07C9/27; H04L63/10; H04L63/105; H04M; H04M3/00; H04M3/38; H04M3/382
Claims Analysis
Total Claims: 14
Claim 1
Independent Claim
103 words
A method for use in a system that controls the grant or denial of access to a plurality of destinations, said method CHARACTERIZED BY the steps of: receiving a request for access to a particular one of said plurality of destinations, said request requiring a first level of security processing; determining, based on predetermined attributes of said request, if additional security processing beyond said first level is required; and prompting said requester, if said additional security processing is required, to provide additional authentication information any authentication information that may be received from said requester for satisfying said security requirements of said first level.
Claim 2
Independent Claim
41 words
The method as defined in claim CHARACTERIZED IN THAT authentication information that is supplied by said requester intended to be used to satisfy security requirements of said first level is employed as attributes of said request in said step of determining.
Claim 3
Dependent Claim
26 words
The method as defined in claim 1 wherein one attribute of said predetermined attributes for said particular access request is an alleged identity for said requester.
Claim 4
Dependent Claim
49 words
The method as defined in claim 3 CHARACTERIZED IN THAT said step of determining is preceded by the steps of: explicitly requesting that said requester supply an alleged identity if an alleged identity for said requester cannot be inferred; and receiving information denoting said alleged identity for said requester.
Claim 5
Dependent Claim
40 words
The method as defined in claim 3 further CHARACTERIZED BY the step of receiving said additional authentication information by said system as an input for use in authenticating said requester if said additional authentication information is supplied by said requester.
Claim 6
Dependent Claim
51 words
The method as defined in claim 7 further CHARACTERIZED BY the step of making a comparison between said received additional authentication information and previously stored authentication information corresponding to said alleged identity, the result of said comparison for use in determining a level of access to be granted to said requester.
Claim 7
Dependent Claim
76 words
The method as defined in claim 8 further CHARACTERIZED BY the step of reiterating said steps of prompting, receiving and making a comparison for further authentication information beyond that already received from said requester only if a predetermined authentication threshold was reached in said step of making a comparison during at least one preceding iteration of said steps of prompting, receiving and making a comparison, said authentication threshold being insufficient to achieve said level of access.
Claim 8
Dependent Claim
154 words
The method as defined in claim 8 further CHARACTERIZED BY the steps of: obtaining further authentication information beyond that already supplied by said requester; and making a comparison between said obtained further authentication information and previously stored authentication corresponding to said alleged identity, the result of said comparison for use in determining a level of access to be granted to said requester said steps of obtaining and comparing to be performed only if either a predetermined authentication threshold was reached in said step of making a comparison during at least one preceding iteration of said steps of prompting, receiving and making a comparison, said authentication threshold being insufficient to achieve said level of access or a predetermined authentication threshold was reached in said step of making a comparison during at least one preceding iteration of said steps of obtaining and making a comparison, said authentication threshold being insufficient to achieve said level of access.
Claim 9
Dependent Claim
50 words
The method as defined in claim 8 wherein said alleged identity is associated with multiple authorized users, each of said multiple authorized users having his own previously stored authentication information and it can be determined from said received additional authentication information which of said multiple authorized users said requester is.
Claim 10
Dependent Claim
61 words
The method as defined in claim 8 further CHARACTERIZED BY the steps of: retrieving a previously stored profile for said alleged identity; and stimulating said destination to grant access by said requester to said destination at a predetermined level, said predetermined level being determined from said profile, said predetermined attributes of said particular access request and the result of said comparison.
Claim 11
Dependent Claim
39 words
The method as defined in claim 12 CHARACTERIZED IN THAT any requester is granted access if that requester's supplied additional authentication information matches with authentication information previously stored for one of said authorized users associated with said alleged identity.
Claim 12
Dependent Claim
74 words
The method as defined in claim 12 further CHARACTERIZED BY the steps of: determining which particular authorized user associated with said alleged identity said requester is; retrieving a previously stored profile for said particular authorized user; and stimulating said destination to grant access by said requester to said destination at a predetermined level, said predetermined level being determined from said profile,said predetermined attributes of said particular access request and the result of said comparison.
Claim 13
Dependent Claim
103 words
Apparatus for use in a system that controls the grant or denial of access to a plurality of destinations[133], apparatus CHARACTERIZED BY: means for receiving a request [206, 222] for access to a particular one of said plurality of destinations, said request requiring a first level of security processing; means for determining, based on predetermined attributes of said request [202, 302], if additional security processing beyond said first level is required; and means for obtaining additional authentication information [306, 310] beyond that already supplied by said requester for satisfying said security requirements of said first level if said additional security processing is required.
Claim 14
Dependent Claim
20 words
The invention as defined in claim 13 wherein said means for obtaining operates in a manner transparent to said requester.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.