Patent US4783798A successfully refreshed from Google Patents.
US4783798A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Encrypting transponder
Assignee: ACS Communications Systems Inc
•
Filing: 1985-03-14
•
Granted: 1988-11-08
•
Expires: 2005-03-14
Abstract
Abstract An encrypting transponder provides data security for transmissions between a terminal and a remote computer, network or terminal. The transponder provides positive user and terminal identification before access to a remote computer file is permitted, and further provides for secure message authentication during the course of data transmission. The transponder is passive and operates in response to interrogation from a remote host computer, thus making it useful with many different operating system and hand-shake protocols.
Inventors
- 👤 Stephen W. Leibholz
- 👤 Samuel D. Epstein
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 08:15
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/08; G06Q20/10; G06Q20/108; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0894; H04L9/0897; H04L9/32; H04L9/3226; H04L9/3236; H04L9/3242; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
460 words
A passive encrypting transponder for ensuring that only authorized users are given access for transmissions with a remote digital system, including a host computer, from a given computer terminal connected to said system across a telecommunications link, said transponder comprising: (a) an input line, including first switching means, for coupling said given terminal to said transponder; (b) an output line, including second switching means, for coupling said transponder to said link; (c) third switching means for selectively coupling said input line to said output line; (d) a user identification means including: (i) a first memory portion for storing a first key which uniquely identifies said given terminal from other terminals connectable to said system, each of said authorized users being provided with a personal identification number which uniquely identifies that user from other authorized users; (ii) a second memory portion for prestoring an interrogator identification number which uniquely identifies said system from other possible systems; (iii) a third memory portion; and (iv) a fourth memory portion; (e) an enciphering means, selectively responsive to said first key stored in said first memory portion, for encrypting, under said first key, said personal identification number received across said input line upon coupling thereto of said transponder by said first switching means, said encrypted personal identification number being transmitted across said link; (f) a deciphering means, selectively responsive to said first key in said first memory portion, for decrypting an interrogator identification number and a first random number, both of which have been encrypted under said first key at said remote system and transmitted to said transponder across said link, said decrypted first random number being stored in said third memory portion; and (g) control means for generating said first key upon receipt of said personal identification number through said first switching means, for comparing said decrypted interrogator identification number with said prestored interrogator identification number, for generating a working key when said decrypted interrogator identification number and said prestored interrogator identification number match, otherwise aborting the transaction, said working key being a function of said personal identification number, of said interrogator identification number and of said first random number, said working key being stored in said fourth memory portion, said enciphering and said deciphering means being thereafter responsive to said working key and not to said first key, and for transmitting said interrogator identification number and said first random number to said host computer, both being encrypted under said working key, for verification of said working key by said host computer, said host computer transmitting an indication of said verification across said link to said transponder; (h) wherein, upon reciept of said indication by said transponder, said control means activates said third switching means to couple said input line to said output line.
Claim 2
Dependent Claim
460 words
A passive encrypting transponder for ensuring that only authorized users are given access for transmissions with a remote digital system, including a host computer, from a given computer terminal connected to said system across a telecommunications link, said transponder comprising: (a) an input line, including first switching means, for coupling said given terminal to said transponder; (b) an output line, including second switching means, for coupling said transponder to said link; (c) third switching means for selectively coupling said input line to said output line; (d) a user identification means including: (i) a first memory portion for storing a first key which uniquely identifies said given terminal from other terminals connectable to said system, each of said authorized users being provided with a personal identification number which uniquely identifies that user from other authorized users; (ii) a second memory portion for prestoring an interrogator identification number which uniquely identifies said system from other possible systems; (iii) a third memory portion; and (iv) a fourth memory portion; (e) an enciphering means, selectively responsive to said first key stored in said first memory portion, for encrypting, under said first key, said personal identification number received across said input line upon coupling thereto of said transponder by said first switching means, said encrypted personal identification number being transmitted across said link; (f) a deciphering means, selectively responsive to said first key in said first memory portion, for decrypting an interrogator identification number and a first random number, both of which have been encrypted under said first key at said remote system and transmitted to said transponder across said link, said decrypted first random number being stored in said third memory portion; and (g) control means for generating said first key upon receipt of said personal identification number through said first switching means, for comparing said decrypted interrogator identification number with said prestored interrogator identification number, for generating a working key when said decrypted interrogator identification number and said prestored interrogator identification number match, otherwise aborting the transaction, said working key being a function of said personal identification number, of said interrogator identification number and of said first random number, said working key being stored in said fourth memory portion, said enciphering and said deciphering means being thereafter responsive to said working key and not to said first key, and for transmitting said interrogator identification number and said first random number to said host computer, both being encrypted under said working key, for verification of said working key by said host computer, said host computer transmitting an indication of said verification across said link to said transponder; (h) wherein, upon reciept of said indication by said transponder, said control means activates said third switching means to couple said input line to said output line.
Claim 3
Dependent Claim
60 words
The encrypting transponder of claim 1 further comprising: message authentication means, selectively coupled to said output line by fourth switching means, for storing a message authentication code, said message authentication code being automatically transmitted to said system upon receipt at said given terminal of an interrogation code from said system, said fourth switching means being actuated by said control means.
Claim 4
Dependent Claim
20 words
The transponder of claim 2 wherein: each of said memory portions is a portion of a dynamic random access memory.
Claim 5
Dependent Claim
19 words
The transponder of claim 3 wherein: said message authentication means comprises a portion of said dynamic random access memory.
Claim 6
Dependent Claim
37 words
The transponder of claim 2 further comprising: a fixed memory for storing a preselected data set, said first key being a subset of said data set, said control means generating said first key from said data set.
Claim 7
Dependent Claim
15 words
The transponder of claim 5 wherein: said fixed memory is a fused link read-only memory.
Claim 8
Dependent Claim
45 words
The transponder of claim 2 wherein: said message authentication means is selectively responsive to said enciphering means and wherein said message authentication code is a preselected subset of data input to the input line of said transponder, said subset being encrypted under said working key.
Claim 9
Dependent Claim
19 words
The transponder of claim 7 wherein said interrogation code is a predetermined function of said first random number (Rn).
Claim 10
Dependent Claim
18 words
The transponder of claim 8 wherein said interrogation code is a pseudorandom function of said first random number.
Claim 11
Dependent Claim
18 words
The transponder of claim 1 further comprising: an integral modem coupled between said output line and said link.
Claim 12
Dependent Claim
20 words
The transponder of claim 1 further comprising: an integral digital interface adapter coupled between said output line and said link.
Claim 13
Dependent Claim
316 words
A passive encrypting transponder for authenticating messages transmitted between a given computer terminal and a remote digital system, including a host computer, across a telecommunications link and for ensuring that only authorized users are given access to said system for transactions from said given computer terminal, said transponder comprising: (a) an input line, including first switching means, for coupling said given terminal to said transponder; (b) an output line, including second switching means, for coupling said transponder to said link; (c) third switching means for selectively coupling said input line to said output line; (d) a user identification means including: (i) a first memory portion for storing a preselected data set; and (ii) a dynamic memory for storing a first key which uniquely identifies said given terminal from other terminals connectable to said system, each of said authorized users being provided with a personal identification number which uniquely identifies that user from other authorized users, said first key being a subset of said data set, and for storing an interrogator identification number which uniquely identifies said system from other possible systems; (e) an enciphering means, responsive to said first key, for encrypting, under said first key, said personal identification number received across said input line upon coupling thereto of said transponder by said first switching means and transmitting it across said link; (f) a deciphering means, responsive to said first key, for decryptinng an interrogator identification number and a random number transmitted across said link from said system; and (g) control means for generating said first key and a working key, said working key upon generation from said personal identification number, said interrogator identification number and said random number, being transmitted to and stored in said dynamic memory, said control means further being coupled to said first, second and third switching means for control thereof upon receipt of an indication that said working key is verified.
Claim 14
Dependent Claim
316 words
A passive encrypting transponder for authenticating messages transmitted between a given computer terminal and a remote digital system, including a host computer, across a telecommunications link and for ensuring that only authorized users are given access to said system for transactions from said given computer terminal, said transponder comprising: (a) an input line, including first switching means, for coupling said given terminal to said transponder; (b) an output line, including second switching means, for coupling said transponder to said link; (c) third switching means for selectively coupling said input line to said output line; (d) a user identification means including: (i) a first memory portion for storing a preselected data set; and (ii) a dynamic memory for storing a first key which uniquely identifies said given terminal from other terminals connectable to said system, each of said authorized users being provided with a personal identification number which uniquely identifies that user from other authorized users, said first key being a subset of said data set, and for storing an interrogator identification number which uniquely identifies said system from other possible systems; (e) an enciphering means, responsive to said first key, for encrypting, under said first key, said personal identification number received across said input line upon coupling thereto of said transponder by said first switching means and transmitting it across said link; (f) a deciphering means, responsive to said first key, for decryptinng an interrogator identification number and a random number transmitted across said link from said system; and (g) control means for generating said first key and a working key, said working key upon generation from said personal identification number, said interrogator identification number and said random number, being transmitted to and stored in said dynamic memory, said control means further being coupled to said first, second and third switching means for control thereof upon receipt of an indication that said working key is verified.
Claim 15
Dependent Claim
57 words
The encrypting transponder of claim 12 further comprising: a message authentication means, selectively coupled to said output line by fourth switching means, for storing a message authentication code, said message authentication code being automatically transmitted to said system upon receipt of an interrogation code from said system, said fourth switching means being actuated by said control means.
Claim 16
Dependent Claim
36 words
The transponder of claim 13 wherein said memory for storing said message authentication code is a preselected subset of data input to the input line of said transponder, said subset being encrypted under said working key.
Claim 17
Dependent Claim
18 words
The transponder of claim 14 wherein said interrogation code is a preselected function of said first random number.
Claim 18
Dependent Claim
18 words
The transponder of claim 15 wherein said interrogation code is a pseudorandom function of said first random number.
References Cited (Backward Citations)
US3984637A
Cited
US4193131A
Cited
US4471216A
Cited
US4386266A
Cited
US4423287A
Cited
US4578530A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1991-11-08 | 1992-05-09 | 1992-11-08 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1995-11-08 | 1996-05-09 | 1996-11-08 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1999-11-08 | 2000-05-09 | 2000-11-08 | $7700.00 | Window Closed / Lapsed |