Patent US4890323A successfully refreshed from Google Patents.
US4890323A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Data communication systems and methods
Assignee: Thales eSecurity Ltd
•
Filing: 1987-05-20
•
Granted: 1989-12-26
•
Expires: 2007-05-20
Abstract
Abstract In order to improve the security of message transmission from a terminal apparatus in an electronic banking or other data communications system a check-sum or MAC is computed from the data within the message in dependence upon a cryptographic key. This MAC is issued as a "challenge" to the user who is also equipped with a separate portable token for computing a "response" in dependence upon a second cryptographic key which is unique to his token. This "response" is then entered into the terminal and appended to the message as its authentication code before transmission. A recipient of the message and authentication code equipped with the same cryptographic keys can therefore check both the contents of the message and the correct identity of the sender by computing an expected authentication code from the received message and comparing it with the code received.
Inventors
- 👤 Henry J. Beker
- 👤 Paul W. Halliden
- 👤 John M. K. Friend
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 18:03
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/36; G06Q20/367; G06Q20/3674; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4012; G06Q20/409; G06Q20/4097; G06Q20/40975; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3231; H04L9/3234; H04L9/3236; H04L9/3242; H04L9/3271; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 10
Claim 1
Independent Claim
258 words
A method of secure message transmission from a terminal apparatus to a remote receiving station in a communications system, which involves appending to a message to be transmitted an authentication code comprising substantially fewer data bits than in the message and the value of which depends upon both the information in the message and information representing the identity of the sender, and wherein the authentication code is produced by a method comprising the steps of: computing within the terminal apparatus by first processing means a first code the value of which depends upon the information within the message and comprising substantially fewer data bits than in said message; issuing that code to the sender; computing a second code from said first code and from information representing the identity of the sender, said second code comprising substantially fewer data bits than in said message, by second processing means within a token assigned to the sender and which means can be actuated to perform the computation of said second code only upon recognition of a correct input indicative of the authority of the sender; and entering said code into the terminal apparatus, that code or a derivative thereof constituting the authentication code; and which comprises at the receiving station repeating the computation of an authentication code from the received message by means replicating the computations of said first and said second processing means, and comparing the authentication code thus computed with the authentication code received, thereby to permit authentication of the received message and of the identity of the sender.
Claim 2
Independent Claim
258 words
A method of secure message transmission from a terminal apparatus to a remote receiving station in a communications system, which involves appending to a message to be transmitted an authentication code comprising substantially fewer data bits than in the message and the value of which depends upon both the information in the message and information representing the identity of the sender, and wherein the authentication code is produced by a method comprising the steps of: computing within the terminal apparatus by first processing means a first code the value of which depends upon the information within the message and comprising substantially fewer data bits than in said message; issuing that code to the sender; computing a second code from said first code and from information representing the identity of the sender, said second code comprising substantially fewer data bits than in said message, by second processing means within a token assigned to the sender and which means can be actuated to perform the computation of said second code only upon recognition of a correct input indicative of the authority of the sender; and entering said code into the terminal apparatus, that code or a derivative thereof constituting the authentication code; and which comprises at the receiving station repeating the computation of an authentication code from the received message by means replicating the computations of said first and said second processing means, and comparing the authentication code thus computed with the authentication code received, thereby to permit authentication of the received message and of the identity of the sender.
Claim 3
Dependent Claim
37 words
A method according to claim 1 wherein the computation of said first and second codes is dependent upon respective cryptographic keys held in the terminal apparatus and token, the same keys being held at the receiving station.
Claim 4
Dependent Claim
32 words
A method according to claim 2 wherein the cryptographic key held in the token is unique for each individual token in the system and thus represents the identity of the corresponding sender.
Claim 5
Dependent Claim
21 words
A method according to claim 1 wherein the token is portable and in use completely structurally separate from the terminal apparatus.
Claim 6
Dependent Claim
33 words
A method according to claim 1 wherein the token can be activated to perform the computation of said second code upon the recognition of a correct sender's personal identification number inputted to it.
Claim 7
Dependent Claim
32 words
A method according to claim 1 wherein the token can be activated to perform the computation of said second code upon the recognition of a correct sender's biometric parameter inputted to it.
Claim 8
Dependent Claim
19 words
A method according to claim 1 wherein said first code is also appended to the message to be transmitted.
Claim 9
Dependent Claim
259 words
Apparatus for secure message transmission to a remote receiving station in a communications system, by a method which involves appending to a message to be transmitted an authentication code comprising substantially fewer data bits than in the message and the value of which depends upon both the information in the message and information representing the identity of the sender, comprising: a terminal apparatus having first processing means adapted to compute a first code the value of which depends upon the information within the message and means to issue that code to the sender, said first code comprising substantially fewer data bits than in said message; and a token assigned to the sender having second processing means adapted to compute a second code from said first code and from information representing the identity of the sender, said second code comprising substantially fewer data bits than in said message, and which second processing means can be activated to perform the computation of said second code only upon recognition of a correct input indicative of the authority of the sender; the terminal apparatus also being adapted to receive said second code and appended that code or a derivative thereof to the message as said authentication code; and the receiving station having means adapted to replicate the computations of said first and second processing means for repeating the computation of an authentication code from the received message and means for comparing that code with the authentication code received, thereby to permit authentication of the received message and of the identity of the sender.
Claim 10
Dependent Claim
259 words
Apparatus for secure message transmission to a remote receiving station in a communications system, by a method which involves appending to a message to be transmitted an authentication code comprising substantially fewer data bits than in the message and the value of which depends upon both the information in the message and information representing the identity of the sender, comprising: a terminal apparatus having first processing means adapted to compute a first code the value of which depends upon the information within the message and means to issue that code to the sender, said first code comprising substantially fewer data bits than in said message; and a token assigned to the sender having second processing means adapted to compute a second code from said first code and from information representing the identity of the sender, said second code comprising substantially fewer data bits than in said message, and which second processing means can be activated to perform the computation of said second code only upon recognition of a correct input indicative of the authority of the sender; the terminal apparatus also being adapted to receive said second code and appended that code or a derivative thereof to the message as said authentication code; and the receiving station having means adapted to replicate the computations of said first and second processing means for repeating the computation of an authentication code from the received message and means for comparing that code with the authentication code received, thereby to permit authentication of the received message and of the identity of the sender.
References Cited (Backward Citations)
US4315101A
Cited
US4302810A
Cited
EP0043027A1
Cited
US4656474A
Cited
US4453074A
Cited
US4503287A
Cited
US4601011A
Cited
US4500750A
Cited
US4665396A
Cited
US4549075A
Cited
US4723284A
Cited
EP0140388A2
Cited
US4575621A
Cited
US4596898A
Cited
EP0168667A2
Cited
US4652698A
Cited
US4677670A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1992-12-25 | 1993-06-26 | 1993-12-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1996-12-25 | 1997-06-26 | 1997-12-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2000-12-25 | 2001-06-26 | 2001-12-26 | $7700.00 | Window Closed / Lapsed |