US5048085A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Transaction system security method and apparatus
Assignee: Cisco Technology Inc
•
Filing: 1989-10-06
•
Granted: 1991-09-10
•
Expires: 2009-10-06
Abstract
Abstract An improved security system is disclosed which uses an IC card to enchance the security functions involving component authentication, user verification, user authorization and access control, protection of message secrecy and integrity, management of cryptographic keys, and auditablity. Both the security method and the apparatus for embodying these functions across a total system or network using a common cryptographic architecture are disclosed. Authorization to perform there functions in the various security component device nodes in the network can be distributed to the various nodes at which they will be executed in order to personalize the use of the components.
Inventors
- 👤 Dennis G. Abraham
- 👤 Steven G. Aden
- 👤 Todd W. Arnold
- 👤 Steven W. Neckyfarow
- 👤 William S. Rohland
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 11:22
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; G; G06; G06F; G06F12/00; G06F12/02; G06F12/08; G06F12/12; G06F12/121; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/36; G06Q20/367; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H04L63/10; H04L63/102; H04L63/105; H04L9/00; H04L9/32; H04L9/3226; H04L9/3247; H04L2209/00; H04L2209/56; H04L2209/60
Claims Analysis
Total Claims: 74
Claim 1
Independent Claim
106 words
A security device comprising: a data processor: memory connected to said processor; data input and output means connected to said processor; secure session establishing means programmed into said security device for controlling said processor to establish a secure session with another device: an authorization profile stored in said memory, said profile defining the authority of a user of said security device to cause said processor to execute programmed commands: transfer means for transferring at least part of said authorization profile from said security device to said another device for controlling said another device in accordance with said authority of said user defined in said authorization profile.
Claim 2
Dependent Claim
106 words
A security device comprising: a data processor: memory connected to said processor; data input and output means connected to said processor; secure session establishing means programmed into said security device for controlling said processor to establish a secure session with another device: an authorization profile stored in said memory, said profile defining the authority of a user of said security device to cause said processor to execute programmed commands: transfer means for transferring at least part of said authorization profile from said security device to said another device for controlling said another device in accordance with said authority of said user defined in said authorization profile.
Claim 3
Dependent Claim
23 words
The security device of claim 1, wherein said security device is an IC card and said another device is an IC card reader.
Claim 4
Dependent Claim
23 words
The security device of claim 1, wherein said security device is a host computer and said another device is a computer work station.
Claim 5
Dependent Claim
24 words
The security device of claim 1, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 6
Dependent Claim
24 words
The security device of claim 1, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 7
Dependent Claim
25 words
The security device of claim 1, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 8
Dependent Claim
29 words
The security device of claim 1, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 9
Dependent Claim
30 words
The security device of claim 1, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 10
Dependent Claim
29 words
The security device of claim 1, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 11
Dependent Claim
15 words
The security device of claim 1, wherein said authorization profile contains a user authorization level.
Claim 12
Dependent Claim
24 words
The security device of claim 1, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 13
Dependent Claim
24 words
The security device of claim 2, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 14
Dependent Claim
24 words
The security device of claim 2, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 15
Dependent Claim
25 words
The security device of claim 2, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 16
Dependent Claim
29 words
The security device of claim 2, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 17
Dependent Claim
30 words
The security device of claim 2, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 18
Dependent Claim
29 words
The security device of claim 2, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 19
Dependent Claim
15 words
The security device of claim 2, wherein said authorization profile contains a user authorization level.
Claim 20
Dependent Claim
24 words
The security device of claim 2, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 21
Dependent Claim
24 words
The security device of claim 3, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 22
Dependent Claim
24 words
The security device of claim 3, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 23
Dependent Claim
25 words
The security device of claim 3, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 24
Dependent Claim
29 words
The security device of claim 3, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 25
Dependent Claim
30 words
The security device of claim 3, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 26
Dependent Claim
29 words
The security device of claim 3, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 27
Dependent Claim
15 words
The security device of claim 3, wherein said authorization profile contains a user authorization level.
Claim 28
Dependent Claim
24 words
The security device of claim 3, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 29
Dependent Claim
76 words
A security device comprising: a data processor; memory connected to said processor: data input and output means connected to said processor: secure session establishing means programmed into said security device for controlling said processor to establish a secure session with another device: means for receiving at least part of an authorization profile stored in a memory of said another device, said profile defining the authority of a user to cause said processor to execute programmed commands.
Claim 30
Dependent Claim
76 words
A security device comprising: a data processor; memory connected to said processor: data input and output means connected to said processor: secure session establishing means programmed into said security device for controlling said processor to establish a secure session with another device: means for receiving at least part of an authorization profile stored in a memory of said another device, said profile defining the authority of a user to cause said processor to execute programmed commands.
Claim 31
Dependent Claim
23 words
The security device of claim 28, wherein said security device is an IC card reader and said another device is an IC card.
Claim 32
Dependent Claim
23 words
The security device of claim 28, wherein said security device is a computer work station and said another device is a host computer.
Claim 33
Dependent Claim
24 words
The security device of claim 28, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 34
Dependent Claim
24 words
The security device of claim 28, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 35
Dependent Claim
25 words
The security device of claim 28, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 36
Dependent Claim
29 words
The security device of claim 28, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 37
Dependent Claim
30 words
The security device of claim 28, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 38
Dependent Claim
29 words
The security device of claim 28, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 39
Dependent Claim
14 words
The security device of claim 28, wherein said authorization profile contains an authority level.
Claim 40
Dependent Claim
24 words
The security device of claim 28, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 41
Dependent Claim
24 words
The security device of claim 29, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 42
Dependent Claim
24 words
The security device of claim 29, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 43
Dependent Claim
25 words
The security device of claim 29, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 44
Dependent Claim
29 words
The security device of claim 29, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 45
Dependent Claim
30 words
The security device of claim 29, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 46
Dependent Claim
29 words
The security device of claim 29, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 47
Dependent Claim
14 words
The security device of claim 29, wherein said authorization profile contains an authority level,
Claim 48
Dependent Claim
24 words
The security device of claim 29, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 49
Dependent Claim
24 words
The security device of claim 30, wherein said authorization profile defines the authority of said user to execute a command at a particular time.
Claim 50
Dependent Claim
24 words
The security device of claim 30, wherein said authorization profile defines the authority of said user to execute a command on a particular day.
Claim 51
Dependent Claim
25 words
The security device of claim 30, wherein said authorization profile defines the authority of said user to execute a command between particular times of day.
Claim 52
Dependent Claim
29 words
The security device of claim 30, wherein said authorization profile contains a plurality of command flags, each command flag defining the authority of said user to execute a command.
Claim 53
Dependent Claim
30 words
The security device of claim 30, wherein said authorization profile contains a plurality of access flags, each access flag defining the authority of said user to access a data file.
Claim 54
Dependent Claim
29 words
The security device of claim 30, wherein said authorization profile contains a plurality of program flags, each program flag defining the authority of said user to execute a program.
Claim 55
Dependent Claim
14 words
The security device of claim 30, wherein said authorization profile contains an authority level.
Claim 56
Dependent Claim
24 words
The security device of claim 30, wherein said authorization profile contains a user ID, a personal identification number, and an identity verification method identifier.
Claim 57
Dependent Claim
79 words
An identification card comprising: a data processor: protected programmable memory connected to said processor; data input and output means connected to said processor: an authorization profile stored in said memory, said profile defining the authority of a user of said card to cause said processor to execute programmed commands; means for receiving an authorization profile created by an authorized person and storing said received authorization profile into said memory to be used in place of said stored authorization profile.
Claim 58
Dependent Claim
79 words
An identification card comprising: a data processor: protected programmable memory connected to said processor; data input and output means connected to said processor: an authorization profile stored in said memory, said profile defining the authority of a user of said card to cause said processor to execute programmed commands; means for receiving an authorization profile created by an authorized person and storing said received authorization profile into said memory to be used in place of said stored authorization profile.
Claim 59
Dependent Claim
13 words
The security device of claim 55 wherein said device is an IC card.
Claim 60
Dependent Claim
39 words
The IC card of claim 56 further comprising: data blocks in said memory, each data block having a header, said header containing memory access prerequisites; and means for comparing said access prerequisites with the authorization profile of said user.
Claim 61
Dependent Claim
35 words
The IC card of claim 57 wherein one of said access prerequisites is an authority level and further comprising: means for comparing said authority level with an authorization level stored in said users authorization profile.
Claim 62
Dependent Claim
55 words
The IC card of claim 57 wherein one of said access prerequisites comprise a read flag and a write flag for each user and further comprising: means for allowing read access to said memory only if said read flag is set and allowing write access to said memory only if said write flag is set.
Claim 63
Dependent Claim
48 words
The IC card of claim 57 wherein one of said access prerequisites is a secure session required flag and further comprising: means for allowing access to said memory only is said IC card is in a secure session with another device which is requesting access to said memory.
Claim 64
Dependent Claim
48 words
A security device comprising: a data processor: protected programmable memory connected to said processor; data input and output means connected to said processor: a plurality of commands for controlling said processor stored in said memory, each command having a plurality of programmable execution prerequisites stored in said memory.
Claim 65
Dependent Claim
48 words
A security device comprising: a data processor: protected programmable memory connected to said processor; data input and output means connected to said processor: a plurality of commands for controlling said processor stored in said memory, each command having a plurality of programmable execution prerequisites stored in said memory.
Claim 66
Dependent Claim
43 words
The security device of claim 61 wherein one of said execution prerequisites is an established secure session between the devices affected by the command, whereby the command to which it relates will not be executed unless a secure session has previously been established.
Claim 67
Dependent Claim
48 words
The security device of claim 61 wherein one of said execution prerequisites is an initial user verification whereby the command to which it relates will not be executed unless the identity of the user requesting the execution of the command has previously been verified during a current session.
Claim 68
Dependent Claim
54 words
The security device of claim 61 wherein one of said execution prerequisites is a pre-execution user verification whereby the command to which it relates will not be executed unless the identity of the user requesting the execution of the command has been verified specifically for each execution of said command to which it relates.
Claim 69
Dependent Claim
50 words
The security device of claim 61 wherein one of said execution prerequisites is time, whereby a command to which it relates will not be executed unless the time and date are within the limits authorized during which a user requesting execution of said command is authorized to execute said command.
Claim 70
Dependent Claim
45 words
The security device of claim 61 wherein one of said execution prerequisites is an authorization level, whereby a command to which it relates will not be executed unless a user requesting execution of said command has an authorization level at or above a specified level.
Claim 71
Independent Claim
123 words
The method of communicating a secure boolean response comprising the steps of: a) generating a random number in a security device: b) encrypting said random number under a key; c) sending said encrypted random number to another security device; d) decrypting said encrypted random number in said another security device: e) modifying said random number by a first function if said response is true: f) modifying said random number by a second function if said response is false: g) encrypting said modified random number: h) sending said encrypted modified random number to said first security device; i) decrypting said encrypted modified random number at said first security device: and j) comparing said modified random number with said random number to determine the response.
Claim 72
Independent Claim
123 words
The method of communicating a secure boolean response comprising the steps of: a) generating a random number in a security device: b) encrypting said random number under a key; c) sending said encrypted random number to another security device; d) decrypting said encrypted random number in said another security device: e) modifying said random number by a first function if said response is true: f) modifying said random number by a second function if said response is false: g) encrypting said modified random number: h) sending said encrypted modified random number to said first security device; i) decrypting said encrypted modified random number at said first security device: and j) comparing said modified random number with said random number to determine the response.
Claim 73
Independent Claim
56 words
The method of changing a value used in the generation of a random number comprising the steps of: a) generate a first random number: b) using a portion of said random number to select a bit of said value: c) inverting said bit: d) repeat steps a, b, and c to generate a second random number.
Claim 74
Independent Claim
56 words
The method of changing a value used in the generation of a random number comprising the steps of: a) generate a first random number: b) using a portion of said random number to select a bit of said value: c) inverting said bit: d) repeat steps a, b, and c to generate a second random number.
References Cited (Backward Citations)
US3702464A
Cited
US4211919A
Cited
US4691355A
Cited
US4694492A
Cited
US4885788A
Cited
US4816653A
Cited
US4969188A
Cited
US4965827A
Cited
US4944008A
Cited
US4935962A
Cited
US4962533A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1994-09-09 | 1995-03-11 | 1995-09-10 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1998-09-09 | 1999-03-11 | 1999-09-10 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2002-09-09 | 2003-03-11 | 2003-09-10 | $7700.00 | Window Closed / Lapsed |