US5168520A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for personal identification
Assignee: EMC Corp
•
Filing: 1991-03-18
•
Granted: 1992-12-01
•
Expires: 2011-03-18
Abstract
Abstract A method and apparatus for providing improved security for a personal identification number (PIN) in a personal identification and verification system of the type wherein a time dependent nonpredictable code is generated at a device in the possession of the individual, which code is unique to the individual and this code is communicated to, and compared with a nonpredictable code generated at a central verification computer. In this system, the PIN is mixed with the nonpredictable code before transmission of these values to the central verification computer. A nonsecret code is previously transmitted to the central verification computer and is used to retrieve the PIN and the appropriate nonpredictable code for the user. These values are used to strip the PIN from the transmitted nonpredictable code and the stripped PIN and remaining nonpredictable code are compared with the corresponding retrieved values in order to determine verification.
Inventors
- 👤 Kenneth P. Weiss
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 20:16
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/313; G06F21/34; G06F21/35; G06F21/70; G06F21/71; G06F21/72; G06F21/725; G06F7/00; G06F7/58; G06F7/582; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/385; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07C; G07C9/00; G07C9/20; G07C9/215; G07C9/30; G07C9/32; G07C9/33; G07F7/1008; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2103
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
158 words
In a personal identification system of the type wherein a user is provided with a device generating a unique, time varying, nonpredictable code, with a nonsecret identifying code and with a secret PIN, the nonpredictable code at a given instant and the PIN being provided to a central verification computer to effect verification; apparatus for providing improved security for the PIN comprising: means for mixing the nonpredictable code generated by the device at a given time with the PIN according to a predetermined algorithm to generate a combined coded value; means for separately communicating the nonsecret identifying code and the combined coded value to the central verification computer; and wherein the central verification computer includes means for utilizing the nonsecret identifying code to retrieve the PIN and generate an appropriate, unique, time varying nonpredictable code for the individual, and means for utilizing the retrieved PIN, appropriate nonpredictable code and the combined coded value in performing a verification operation.
Claim 2
Dependent Claim
158 words
In a personal identification system of the type wherein a user is provided with a device generating a unique, time varying, nonpredictable code, with a nonsecret identifying code and with a secret PIN, the nonpredictable code at a given instant and the PIN being provided to a central verification computer to effect verification; apparatus for providing improved security for the PIN comprising: means for mixing the nonpredictable code generated by the device at a given time with the PIN according to a predetermined algorithm to generate a combined coded value; means for separately communicating the nonsecret identifying code and the combined coded value to the central verification computer; and wherein the central verification computer includes means for utilizing the nonsecret identifying code to retrieve the PIN and generate an appropriate, unique, time varying nonpredictable code for the individual, and means for utilizing the retrieved PIN, appropriate nonpredictable code and the combined coded value in performing a verification operation.
Claim 3
Dependent Claim
30 words
Apparatus as claimed in claim 1 including means operative prior to the communicating of the value from the mixing means for communicating the nonsecret identifying code to said verification computer.
Claim 4
Dependent Claim
41 words
Apparatus as claimed in claim 2 wherein said verification computer includes means for utilizing the communicated nonsecret identifying code to retrieve the PIN and a unique challenge value for the individual; and means for communicating the challenge value to the device.
Claim 5
Dependent Claim
43 words
Apparatus as claimed in claim 3 wherein said challenge value communicating means includes means for communicating the challenge value to the individual; and wherein the device includes means for permitting the individual to input the challenge value and his PIN to the device.
Claim 6
Dependent Claim
57 words
Apparatus as claimed in claim 4 wherein said device includes means responsive to the challenge value for generating the nonpredictable code; and wherein said mixing means includes means, included as part of the device, for receiving the inputted PIN and the generated nonpredictable value and for generating an output which is a predetermined function of the input.
Claim 7
Dependent Claim
17 words
Apparatus as claimed in claim 5 wherein said mixing means adds the PIN to the nonpredictable code.
Claim 8
Dependent Claim
63 words
Apparatus as claimed in claim 1 wherein said device includes means for permitting the individual to input his PIN to the device; and wherein said means for mixing is included as part of said device and is adapted to receive the PIN inputted by the individual and the nonpredictable code and to generate an output which is a predetermined function of the input.
Claim 9
Dependent Claim
17 words
Apparatus as claimed in claim 7 wherein said mixing means adds the PIN to the nonpredictable code.
Claim 10
Dependent Claim
43 words
Apparatus as claimed in claim 1 wherein said verification computer includes a means for mixing the retrieved PIN and appropriate nonpredictable code generated by the verification computer at a given time according to the predetermined algorithm to generate a second combined coded value.
Claim 11
Dependent Claim
22 words
Apparatus as claimed in claim 9 wherein the verification operation comprises comparing the combined coded value with the second combined coded value.
Claim 12
Independent Claim
106 words
A method for identifying an individual comprising the steps of: utilizing a device in the possession of the individual to generate a unique time varying, nonpredictable code; mixing the nonpredictable code generated at a given time with a secret PIN for the individual to generate a combined code; and communicating a nonsecret identifying code for the individual and the combined code to a central verification computer; the verification computer utilizing the nonsecret identifying code to retrieve the PIN and generate an appropriate, unique, time-varying nonpredictable code for the individual, and utilizing the retrieved PIN, appropriate nonpredictable code, and the combined code to perform a verification operation.
Claim 13
Independent Claim
106 words
A method for identifying an individual comprising the steps of: utilizing a device in the possession of the individual to generate a unique time varying, nonpredictable code; mixing the nonpredictable code generated at a given time with a secret PIN for the individual to generate a combined code; and communicating a nonsecret identifying code for the individual and the combined code to a central verification computer; the verification computer utilizing the nonsecret identifying code to retrieve the PIN and generate an appropriate, unique, time-varying nonpredictable code for the individual, and utilizing the retrieved PIN, appropriate nonpredictable code, and the combined code to perform a verification operation.
Claim 14
Dependent Claim
41 words
A method as claimed in claim 11 wherein the verification computer also generates a unique challenge value in response to the nonsecret identifying code; and including the step of communicating the challenge value to the device in possession of the individual.
Claim 15
Dependent Claim
33 words
A method as claimed in claim 12 wherein the challenge value is communicated to the individual; and including the step of the individual inputting the challenge value and his PIN to the device.
Claim 16
Dependent Claim
49 words
A method as claimed in claim 13 wherein the device includes means responsive to the challenge value for generating the nonpredictable code; and wherein the mixing step includes the device receiving the PIN and the nonpredictable code and generating an output which is a predetermined function of the inputs.
Claim 17
Dependent Claim
17 words
A method as claimed in claim 14 wherein said predetermined function is a sum of said inputs.
Claim 18
Dependent Claim
50 words
A method as claimed in claim 14 including the step of the individual inputting his PIN to the device; and wherein the mixing step includes the device receiving the PIN inputted by the individual and the nonpredictable code and generating an output which is a predetermined function of the inputs.
Claim 19
Dependent Claim
17 words
A method as claimed in claim 16 wherein said predetermined function is a sum of said input.
Claim 20
Dependent Claim
28 words
A method as claimed in claim 11 wherein the verification computer utilizes the retrieved PIN and appropriate nonpredictable code by combining them to obtain a second combined code.
Claim 21
Dependent Claim
21 words
A method as claimed in claim 18 wherein the verification operation comprises comparing the combined code and the second combined code.
References Cited (Backward Citations)
US4145568A
Cited
US4193073A
Cited
US4636583A
Cited
US3900867A
Cited
US3764742A
Cited
US3806874A
Cited
US3886451A
Cited
US3995111A
Cited
US4104694A
Cited
US4185166A
Cited
US4126761A
Cited
US4277837A
Cited
US4320387A
Cited
US4471216A
Cited
US4295039A
Cited
US4302810A
Cited
US4326098A
Cited
US4543657A
Cited
US4578530A
Cited
US4509093A
Cited
US4494211A
Cited
US4536647A
Cited
US4641322A
Cited
US4599489A
Cited
US4609777A
Cited
US4819267A
Cited
US4582434A
Cited
US4849613A
Cited
US4589066A
Cited
US4720860A
Cited
US4856062A
Cited
US5023908A
Cited
US4677617A
Cited
US4802216A
Cited
US4890323A
Cited
US4731841A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1995-12-01 | 1996-06-01 | 1996-12-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1999-12-01 | 2000-06-01 | 2000-12-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2003-12-01 | 2004-06-01 | 2004-12-01 | $7700.00 | Window Closed / Lapsed |