US4295039A — Method and apparatus for achieving secure passwor…

Claim 1

Independent Claim 203 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person), a Utilization Terminal (U/I Terminal) to which the CARD is presented for identification purposes, and a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD including means for permanently storing a secret key, K T , unique to said person, said combination further including, encryption means comprising at least one key-controlled block-cipher encryption device located in said CARD, a keyboard at which the person may enter a secret key, K A , at least one random word generator for supplying a data input word for encryption by said encryption means, said encryption means being operable to encrypt a random word supplied by the random word generator under the stored key, K T , and also being operable to encrypt the same random word under said secret key, K A , entered by the person at said keyboard, said encryption means utilizing identical encryption algorithms for each encyption operation, first comparison means in said Terminal for comparing the results of said first and second encryption operations and means for indicating a successful comparison.

Claim 2

Dependent Claim 203 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person), a Utilization Terminal (U/I Terminal) to which the CARD is presented for identification purposes, and a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD including means for permanently storing a secret key, K T , unique to said person, said combination further including, encryption means comprising at least one key-controlled block-cipher encryption device located in said CARD, a keyboard at which the person may enter a secret key, K A , at least one random word generator for supplying a data input word for encryption by said encryption means, said encryption means being operable to encrypt a random word supplied by the random word generator under the stored key, K T , and also being operable to encrypt the same random word under said secret key, K A , entered by the person at said keyboard, said encryption means utilizing identical encryption algorithms for each encyption operation, first comparison means in said Terminal for comparing the results of said first and second encryption operations and means for indicating a successful comparison.

Claim 3

Dependent Claim 75 words

A personal identification system as forth in claim 1 wherein said encryption means includes a second key-controlled block-cipher encryption device located in said U/I Terminal and identical in operation to the key-controlled block-cipher encryption device on the CARD and wherein said keyboard is located in the U/I Terminal and, means for supplying the secret key, K A , entered by the person via said keyboard to said second crytographic device as the key input thereto.

Claim 4

Dependent Claim 60 words

A personal identification system as set forth in claim 2 including a second random word generator located in the U/I Terminal, means for combining the outputs of the first and second random word generators to produce a resultant random word and means for supplying the resultant random word as the data input to both said first and second encryption devices.

Claim 5

Dependent Claim 79 words

A personal identification system as set forth in claim 1 including a second comparison means located in said CARD for comparing the outputs of said first and second encryption devices, counter means located in said CARD connected to the output of said second comparison means, means including said counter for recording the number of unsuccessful compares detected by said second comparison means and means actuable upon said counter reaching a predetermined value to disable the circuitry in said CARD.

Claim 6

Dependent Claim 99 words

A personal identification system as set forth in claim 1 wherein said combination includes a personal portable transaction device (XATR) interposed between said card and said U/I Terminal in data exchange relationship with both wherein data may be transferred between said CARD and said U/I Terminal, said keyboard being located within said XATR, means for transferring the secret key K A from the keyboard to the encryption means, the data transfer paths within the XATR being so configured that the keyboard entered secret key K A is never available at the data interface between the XATR and the Terminal.

Claim 7

Dependent Claim 118 words

A personal identification system as set forth in claim 5 wherein said two keys K T and K A are divided into at least two segments wherein both segments are necessary for successful operation of the encryption means, said system including means for storing said key K T in two parts within the CARD and means for combining said two parts to supply the full key K T to said encryption means, means for entering a portion of the secret key K A at the Terminal and combining said entered portion with a predetermined portion of said stored key K T and supplying the result of the combination as the full key K A to said encryption means.

Claim 8

Dependent Claim 72 words

A personal identification system as set forth in claim 5 including means in said CARD for storing an index value which when combined with a value K E subsequently entered at the keyboard produces a resultant value to be utilized as the key K A , wherein said means for combining comprises a predetermined and fixed combinatorial circuit, and means for selectively entering a new index value into system via said keyboard.

Claim 9

Dependent Claim 224 words

A personal identification system for identifying an individual holder (Person) of an unalterable charge-like device (CARD) to a Utilization Terminal (U/I Terminal), means for receiving the CARD device in a data coupling mode with said U/I Terminal, a keyboard associated with said system for receiving a unique encryption key K A to be entered by the person, at least one random word generator located in said CARD, means for obtaining a unique, random word from the random word generator, means for encrypting said random word utilizing the encryption key, K A , entered by the person at the keyboard and also for encrypting the same random word utilizing a true key, K T , stored in said CARD wherein said key, K T , is not accessible outside of said CARD, means for storing the random word (ERWA) encrypted under the entered key K A in said U/I Terminal and for storing the random word (ERWT) encrypted under the true key K T in the CARD, means in the U/I Terminal for causing the encrypted word (ERWT) stored in the CARD to be transferred to the U/I Terminal, means for comparing the two encrypted words ERWA and ERWT for identity, and means actuable on a successful comparison for indicating to the U/I Terminal that the person has entered the proper key K A .

Claim 10

Dependent Claim 224 words

A personal identification system for identifying an individual holder (Person) of an unalterable charge-like device (CARD) to a Utilization Terminal (U/I Terminal), means for receiving the CARD device in a data coupling mode with said U/I Terminal, a keyboard associated with said system for receiving a unique encryption key K A to be entered by the person, at least one random word generator located in said CARD, means for obtaining a unique, random word from the random word generator, means for encrypting said random word utilizing the encryption key, K A , entered by the person at the keyboard and also for encrypting the same random word utilizing a true key, K T , stored in said CARD wherein said key, K T , is not accessible outside of said CARD, means for storing the random word (ERWA) encrypted under the entered key K A in said U/I Terminal and for storing the random word (ERWT) encrypted under the true key K T in the CARD, means in the U/I Terminal for causing the encrypted word (ERWT) stored in the CARD to be transferred to the U/I Terminal, means for comparing the two encrypted words ERWA and ERWT for identity, and means actuable on a successful comparison for indicating to the U/I Terminal that the person has entered the proper key K A .

Claim 11

Dependent Claim 117 words

A personal identification system as set forth in claim 8 wherein said system includes a personal portable transaction device (XATR) interposed between the CARD and the U/I Terminal including means within said XATR for holding the CARD in data exchange relationship therewith and means within said XATR for coupling with said U/I Terminal in data exchange relationship whereby data may be directly transferred between the CARD and the U/I Terminal via the XATR and wherein said XATR contains said keyboard and means are provided for transferring the key K A entered by the person directly to the means for encrypting the random word under the key K A , said encrypting means being located within the CARD.

Claim 12

Dependent Claim 69 words

A personal identification system as set forth in claim 9 including means for transferring the two encrypted random words ERWA and ERWT between the U/I Terminal and the CARD simultaneously in bit serial mode and in the opposite order of bit significance whereby any attempt to subvert the data flow path within the XATR will cause an unsuccessful comparison at the two encrypted random words by said comparison means.

Claim 13

Dependent Claim 219 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying the person, a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD containing a first key-controlled block-cipher encryption device and a storage means for permanently storing a secret key K T unique to said user, said U/I Terminal containing a keyboard at which the holder may enter a memorized secret key K A , and a second key-controlled block-cipher encryption device identical in operation to the encryption device located in said CARD, said combination further including random word generation means for supplying a data input word for encryption by said two encryption devices, means for actuating said first encryption device to encrypt a random word supplied by the random word generation means under the stored key K T and for actuating the second encryption device to encrypt the same random word under the keyboard entered key K A , first comparison means in said Terminal, means for transferring the encrypted random words from said first and second encryption devices to said first comparison means and means for indicating a successful comparison.

Claim 14

Dependent Claim 219 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying the person, a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD containing a first key-controlled block-cipher encryption device and a storage means for permanently storing a secret key K T unique to said user, said U/I Terminal containing a keyboard at which the holder may enter a memorized secret key K A , and a second key-controlled block-cipher encryption device identical in operation to the encryption device located in said CARD, said combination further including random word generation means for supplying a data input word for encryption by said two encryption devices, means for actuating said first encryption device to encrypt a random word supplied by the random word generation means under the stored key K T and for actuating the second encryption device to encrypt the same random word under the keyboard entered key K A , first comparison means in said Terminal, means for transferring the encrypted random words from said first and second encryption devices to said first comparison means and means for indicating a successful comparison.

Claim 15

Dependent Claim 97 words

A personal identification system as set forth in claim 11 wherein said random word generation means comprises a first random word generator located in said card and a second random word generator located in said U/I Terminal, combinatorial circuit means for combining the outputs of said first and second random word generators to produce a third random word which is supplied to said first and second encryption devices as the data word to be encrypted, and storage means located in the CARD and U/I Terminal for respectively storing the outputs of said first and second encryption devices.

Claim 16

Dependent Claim 81 words

A personal identification system as set forth in claim 12 including a second comparison means located in said CARD for comparing the outputs of said first and second encryption devices, counter means in said CARD connected to the output of said second comparison means, means for incrementing the value stored in said counter whenever an unsuccessful compare is detected by said second comparison means and means actuable upon said counter reaching a predetermined value to disable the circuitry in said CARD.

Claim 17

Dependent Claim 27 words

A personal identification system as set forth in claim 13 including means for resetting said counter to zero whenever a successful comparison occurs in said comparison means.

Claim 18

Dependent Claim 269 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying said person, said combination including a personal portable transaction device (XATR) totally under the control of the person having a first data exchange interface for the exchange of data between said CARD and said XATR and a second data exchange interface for the transfer of data between said XATR and said U/I Terminal whereby selected data may be exchanged directly between said CARD and said U/I Terminal via said XATR, said XATR including a keyboard at which the holder may enter a secret memorized key K A , the CARD including key-controlled block-cipher encryption means and a storage means for permanently storing a secret key K T unique to said user, a ramdom word generator located in said card for supplying a data input word for encryption by said encryption means, means actuable upon the presentation to the Terminal of the XATR containing the CARD and the entry of the memorized key K A into the system to initiate an identification operation, means including said encryption means in the CARD for encrypting a random word supplied by the random word generator under the stored key K T and means for encrypting the same random word under the key K A entered by the holder at said keyboard, first comparison means within said Terminal for comparing said two encryptions of said random word, and means for indicating a successful comparison.

Claim 19

Dependent Claim 269 words

A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying said person, said combination including a personal portable transaction device (XATR) totally under the control of the person having a first data exchange interface for the exchange of data between said CARD and said XATR and a second data exchange interface for the transfer of data between said XATR and said U/I Terminal whereby selected data may be exchanged directly between said CARD and said U/I Terminal via said XATR, said XATR including a keyboard at which the holder may enter a secret memorized key K A , the CARD including key-controlled block-cipher encryption means and a storage means for permanently storing a secret key K T unique to said user, a ramdom word generator located in said card for supplying a data input word for encryption by said encryption means, means actuable upon the presentation to the Terminal of the XATR containing the CARD and the entry of the memorized key K A into the system to initiate an identification operation, means including said encryption means in the CARD for encrypting a random word supplied by the random word generator under the stored key K T and means for encrypting the same random word under the key K A entered by the holder at said keyboard, first comparison means within said Terminal for comparing said two encryptions of said random word, and means for indicating a successful comparison.

Claim 20

Dependent Claim 129 words

A personal identification system as set forth in claim 15 wherein said means for encrypting the random word under the key K T comprises a first key-controlled block-cipher encryption device and wherein the means for encrypting the random word under the keyboard entered key K A comprises a second key-controlled block-cipher cryptographic device identical to said first device wherein the data path between the storage means for said secret key K T to said first encryption device is totally within said CARD and is not accessible from the CARD's data interface, and means for connecting the keyboard in the XATR directly to the second encryption device located within the CARD whereby the key K A is never accessible to the data interface between the XATR and the U/I Terminal.

Claim 21

Dependent Claim 72 words

A personal identification system as set forth in claim 16 including means in said CARD for storing an index value which when combined with a value K E subsequently entered at the keyboard produces a resultant value to be utilized as the key K A wherein said means for combining comprises a predetermined and fixed combinatorial circuit, and means for selectively entering a new index value into said system via said keyboard.

Claim 22

Dependent Claim 122 words

A personal identification system as set forth in claim 16 wherein said two keys K T and K A are divided into at least two segments wherein both segments are necessary for successful operation of the two encryption means, said system including means for storing said key K T in two parts within the CARD and means for combining said two parts to supply the full key K T to said first encryption means, means for entering a portion of the secret key K A at the Terminal and for combining said entered portion with a predetermined segment of said stored key K T and supplying the result of the combination as the full key K A to said second encryption means.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	1984-10-12	1985-04-13	1985-10-13	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	1988-10-12	1989-04-13	1989-10-13	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	1992-10-12	1993-04-13	1993-10-13	$7700.00	Window Closed / Lapsed

Method and apparatus for achieving secure password verification

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag