US4916738A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Remote access terminal security
Assignee: International Business Machines Corp
•
Filing: 1986-11-05
•
Granted: 1990-04-10
•
Expires: 2006-11-05
Abstract
Abstract The invention provides a method of securing remote terminal access to a central computer. The method uses the services of a physically secure coprocessor which is, or will be, coupled to the remote terminal for the purposes of effecting remote access to the central computer. The method comprises transferring an encrypted decryption key from the central computer to the physically secure coprocessor. The coupling between the coprocessor and remote terminal allows a file to be encrypted which can confirm that the remote terminal (which is the source of the encrypted file) has or had access to the specific coprocessor to which the encrypted decryption key had previously been transferred. Thereafter the encrypted file is transferred to the central computer and is examined there to confirm that the source of the file has access to the specific coprocessor which received the encrypted decryption key. Access is allowed, by the remote terminal, to the central computer after confirmation is produced by the examination at the central computer.
Inventors
- 👤 Akhileshwari N. Chandra
- 👤 Liam D. Comerford
- 👤 Steve R. White
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 09:59
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
93 words
A method of remote terminal access comprising the steps of: (a) transferring an encrypted decryption key from a central computer to a physically secure coprocessor, (b) coupling said physically secure coprocessor to said remote terminal, (c) transferring an encrypted file from said coprocessor to said central computer to enable the central computer to identify the coprocessor which generated the encrypted file, and (d) examining said encrypted file at said central computer to verify that a specific coprocessor has created said encrypted file before authorizing access to said central computer by said remote terminal.
Claim 2
Independent Claim
93 words
A method of remote terminal access comprising the steps of: (a) transferring an encrypted decryption key from a central computer to a physically secure coprocessor, (b) coupling said physically secure coprocessor to said remote terminal, (c) transferring an encrypted file from said coprocessor to said central computer to enable the central computer to identify the coprocessor which generated the encrypted file, and (d) examining said encrypted file at said central computer to verify that a specific coprocessor has created said encrypted file before authorizing access to said central computer by said remote terminal.
Claim 3
Dependent Claim
49 words
A method as recited in claim 1 in which said step (a) includes obtaining said encrypted decryption key from a magnetic disk by said physically secure coprocessor and in which said obtaining step includes performing a query/response protocol between said coprocessor and a token before accepting said decryption key.
Claim 4
Dependent Claim
23 words
A method as recited in claim 1 or 2 in which said step (c) includes writing said encrypted file onto a magnetic disk.
Claim 5
Dependent Claim
41 words
A method as recited in claim 1 or 2 which includes the further step of encrypting and decrypting at least some messages between said central computer and said remote terminal with a key identical or related to said encrypted decryption key.
Claim 6
Dependent Claim
42 words
A method as recited in claim 4 in which at least some messages exchanged between said remote terminal and said central computer include a replacement key for said coprocessor to be substituted for said encrypted decryption key or an earlier replacement key.
Claim 7
Dependent Claim
31 words
A method as recited in claim 1 in which said step (a) is implemented at a time when said physically secure coprocessor and said central computer are located adjacent each other.
Claim 8
Dependent Claim
143 words
A method as recited in claim 1 in which said step (a) includes: (a1) preparing a secure, read once hardware cartridge and storing therein token data, (a2) coupling to said coprocessor a file of encrypted token data, encrypted under said decryption key, (a3) decrypting said encrypted decryption key using a hardware key secured within said coprocessor, (a4) decrypting said file of token data to produce computed token data, (a5) generating a random number query and coupling said random number query to read said hardware cartridge to generate an actual cartridge response and thereby destroying the token data previously stored therein, (a6) computing a cartridge response in said coprocessor with said random number and said computed token data, (a7) comparing said actual cartridge response with said computed cartridge response, and (a8) discarding said decryption key unless said actual and computed cartridge responses compare favorably.
Claim 9
Dependent Claim
52 words
A method as recited in claim 7 in which said file of encrypted token data is stored on a magnetic disk along with application software at least a portion of which is encrypted under said decryption key and which includes a further step of decrypting said encrypted software under said decryption key.
Claim 10
Dependent Claim
28 words
A method as recited in claim 1 in which said step (c) includes: (c1) generating a coprocessor unique number, and (c2) encrypting said number under said decryption key.
Claim 11
Dependent Claim
32 words
A method as recited in claim 9 which includes the further steps of: (c3) writing said encrypted number onto a magnetic medium, and (c4) transporting said magnetic medium to said central computer.
Claim 12
Dependent Claim
60 words
A method as recited in claim 10 which includes the further steps of: (c5) reading said encrypted number by said central computer, (c6) decrypting said encrypted number under a copy of a decryption key stored in said central computer, and (c7) comparing a result produced by said step (c6) with data stored by said central computer identifying an authorized coprocessor.
Claim 13
Dependent Claim
49 words
A method as recited in claim 11 which includes the further steps of: (c8) storing an authorization status for said coprocessor if said step (c7) produces a first result, or (c9) not storing an authorization status for said coprocessor if said step (c7) does not produce said first result.
Claim 14
Dependent Claim
46 words
A method a recited in claim 12 which includes a further step of allowing subsequent communication with any terminal having access to any coprocessor which has said authorization status and refusing communication with any terminal not having access to a coprocessor with such an authorization status.
Claim 15
Dependent Claim
32 words
A method as recited in claim 9 which includes the further steps of: (c3) writing said encrypted number to a hardware cartridge, and (c4) transporting said hardware cartridge to said central computer.
References Cited (Backward Citations)
US3798359A
Cited
US3798605A
Cited
US3958081A
Cited
US4238854A
Cited
US4227253A
Cited
US4238853A
Cited
US4193131A
Cited
US4262329A
Cited
US4268715A
Cited
US4223403A
Cited
US4323921A
Cited
US4281216A
Cited
US4264782A
Cited
US4471216A
Cited
US4638120A
Cited
US4326098A
Cited
US4720859A
Cited
US4423287A
Cited
US4503287A
Cited
US4430728A
Cited
US4665396A
Cited
GB2124808A
Cited
US4633037A
Cited
US4652990A
Cited
US4621321A
Cited
US4691355A
Cited
US4694492A
Cited
US4779224A
Cited
US4731840A
Cited
US4677670A
Cited
US4683968A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1993-04-09 | 1993-10-09 | 1994-04-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1997-04-09 | 1997-10-09 | 1998-04-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2001-04-09 | 2001-10-09 | 2002-04-10 | $7700.00 | Window Closed / Lapsed |