Patent US3560856A successfully refreshed from Google Patents.
Patent US5237614A successfully refreshed from Google Patents.
US5237614A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Integrated network security system
Assignee: EMC Corp
•
Filing: 1991-06-07
•
Granted: 1993-08-17
•
Expires: 2011-06-07
Abstract
Abstract An integrated network security system is provided which permits log-on to a normally locked client on the network in response to at least one coded non-public input to the client by a user. At least a selected portion of the coded input is encrypted and sent to a network server where the user is authenticated. After authentication, the server preferably returns a decryption key, an encryption key for future use and any critical files previously stored at the server to the client. The decryption key is utilized to decrypt any material at the client which were encrypted when the client was locked, including any material sent from the server, thereby unlocking the client. The decryption key may be combined with untransmitted portions of the original coded input in a variety of ways to generate an encryption key for the next time the terminal is to be locked. When one of a variety of client locking conditions occurs, the previously generated encryption key is utilized to encrypt at least selected critical material at the client. Critical directories or the like in encrypted form may be sent to the server and a message is sent to the server that the client is locked, which message is utilized by the server to inhibit the client from further access to at least selected resources on the network.
Inventors
- 👤 Kenneth P. Weiss
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 16:54
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3271; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2113
Claims Analysis
Total Claims: 54
Claim 1
Independent Claim
136 words
An integrated security system for a network having a server and at least one client comprising: means for normally locking each client to restrict in a selected way use of the client itself and use of the client in gaining access to the network; means at the client for receiving at least one coded input from a user; means at the client for transmitting to the server signals which are a representation of at least a selected portion of the coded input; means at the server for utilizing the received signal representation to authenticate the user, for retrieving unlock inputs for the user and, when the user has been authenticated, for sending to the client signals representative of the unlock inputs; and means at the client for utilizing the unlock input signals to unlock the client.
Claim 2
Dependent Claim
136 words
An integrated security system for a network having a server and at least one client comprising: means for normally locking each client to restrict in a selected way use of the client itself and use of the client in gaining access to the network; means at the client for receiving at least one coded input from a user; means at the client for transmitting to the server signals which are a representation of at least a selected portion of the coded input; means at the server for utilizing the received signal representation to authenticate the user, for retrieving unlock inputs for the user and, when the user has been authenticated, for sending to the client signals representative of the unlock inputs; and means at the client for utilizing the unlock input signals to unlock the client.
Claim 3
Dependent Claim
39 words
A system as claimed in claim 1 including means at the client for saving a selected portion of the coded input, said means for transmitting transmitting signals which are a representation of the remaining portion of the coded input.
Claim 4
Dependent Claim
92 words
A system as claimed in claim 2 wherein the coded input from the user includes the current value of a dynamically varying non-predicatable number generated by a device in the possession of the user; wherein signals indicative of a client ID are transmitted to the server with the representation signals; and wherein the means to authenticate at the server includes means for using the client ID signals to retrieve appropriate representation signals for the user, and means for matching the retrieved representation signals with the transmitted representation signals to authenticate the user.
Claim 5
Dependent Claim
40 words
A system as claimed in claim 3 wherein the user has a PIN which is inputted into the device by the user and combined in a selected way in the device in producing the non-predictable number inputted by the user.
Claim 6
Dependent Claim
70 words
A system as claimed in claim 3 wherein the user has an alpha numeric PIN (AN-PIN), wherein the coded input from the user includes the AN-PIN, wherein a selected portion of both the non-predictable number and the AN-PIN are saved at the client, and wherein remaining portions of the non predictable number and the AN-PIN are combined in a predetermined way to produce the representation signals transmitted to the server.
Claim 7
Dependent Claim
43 words
A system as claimed in claim 2 wherein, when the client is locked, at least selected material stored at the client is stored in encrypted form, and wherein the unlock inputs sent to the client include a decryption key for said selected material.
Claim 8
Dependent Claim
48 words
A system as claimed in claim 6 wherein the server includes means for transmitting an encryption key to the client after user authentication; and wherein the client includes means for utilizing the encryption key the next time the client is to be locked to encrypt said selected material.
Claim 9
Dependent Claim
48 words
A system as claimed in claim 7 wherein the means at the client for encrypting includes means for combining the transmitted encryption key from the server with at least a portion of the coded input saved at the client to product an encryption key for the selected material.
Claim 10
Dependent Claim
42 words
A system as claimed in claim 8 wherein the user has a device which generates a dynamically varying non predictable number which is unique to the user, the coded input from the user including the current non predictable number from the device.
Claim 11
Dependent Claim
60 words
A system as claimed in claim 9 wherein the device includes a user controlled means for generating a second non-predictable code for the user which may also form part of said coded input; and wherein the client includes means for combining the second non-predictable code with the transmitted encryption key to product a longer encryption key for the selected material.
Claim 12
Dependent Claim
37 words
A system as claimed in claim 7 including means for running the encryption key, at least a portion of the stored coded input and selected non-secret data through a one-way function to obtain a longer encryption key.
Claim 13
Dependent Claim
56 words
A system as claimed in claim 2 including means for passing all of the coded input from the user through a one-way function, the transmitted representation signals including at least a sufficient portion of the output from the one-way function to assure that all of the coded input is correct when authentication occurs at the server.
Claim 14
Dependent Claim
76 words
A system as claimed in claim 1 including means for utilizing selected data, including at least a portion of the coded input from the user, to generate an encryption key, means for utilizing at least a portion of said encryption key for end-to end encryption of communications with the client, and means for utilizing at least a portion of the encryption key to encrypt at least selected material at the client when the client is locked.
Claim 15
Dependent Claim
30 words
A system as claimed in claim 13 wherein the portion of the encryption key utilized for end-to-end encryption and the portion utilized for encryption on client locking are not identical.
Claim 16
Dependent Claim
55 words
A system as claim in claim 1 including means at the client for running at least a portion of the coded input and selected non-secret data through a one-way function to obtain a value having more characters than the coded input, which value may be utilized as all or a portion of an encryption key.
Claim 17
Dependent Claim
64 words
A system as claimed in claim 1 wherein selected material required to operate a client is zeroized at the client when the client is locked and is transmitted in encrypted form to be stored at the server; and wherein the server includes means operative when the user has been authenticated for retransmitting the stored encrypted material to the client along with a decryption key.
Claim 18
Dependent Claim
20 words
A system as claimed in claim 1 including means responsive to selected conditions at the client for locking the client.
Claim 19
Dependent Claim
20 words
A system as claimed in claim 17 wherein one of said selected conditions is a discourteous disconnect of the client.
Claim 20
Dependent Claim
20 words
A system as claimed in claim 17 wherein one of said selected conditions is an end-of-session input from the user.
Claim 21
Dependent Claim
29 words
A system as claimed in claim 17 wherein one of said selected conditions is there being no activity by the user at the client for a selected time interval.
Claim 22
Dependent Claim
38 words
A system as claimed in claim 17 including means for storing a release code at the client, and means responsive to the release code for inhibiting the full locking of the client in response to a selected condition.
Claim 23
Dependent Claim
34 words
A system as claimed in claim 21 wherein said means for inhibiting permits the locking of the client from access to the network, but permits at least the selected continued use of the client.
Claim 24
Dependent Claim
52 words
A system as claimed in claim 21 wherein the client may generate or receive selected protected files, each of which contains a protection flag, and means responsive to the detection of a protection flag for preventing use of the protected file at the client after one of said selected conditions has occurred.
Claim 25
Dependent Claim
39 words
A system as claimed in claim 23 wherein said means for preventing use of the protected file includes means for removing or reducing the release code so that the client cannot access the file after a selected condition occurs.
Claim 26
Dependent Claim
29 words
A system as claimed in claim 23 wherein said means for preventing includes means for encrypting or zeroizing the protected file at the client when a selected condition occurs.
Claim 27
Dependent Claim
50 words
A system as claimed in claim 25 including means for indicating if the protected file may be written into at the client, and including means responsive to an indication that a protected file may be written into for transmitting the protected file to the server prior to zeroizing the file.
Claim 28
Independent Claim
127 words
A method for providing integrated security on a network having a server and at least one client comprising the steps of: normally locking each client to restrict in a selected way use of the client itself and use of the client in gaining access to the network; receiving at the client at least one coded input from a user; transmitting signals which are a representation of at least a selected portion of the coded input from the client to the server; utilizing the received representation signals at the server to authenticate the user, to retrieve unlock inputs for the user and, when the user has been authenticated, to send the unlock inputs to the client; and utilizing the unlock inputs at the client to unlock the client.
Claim 29
Independent Claim
127 words
A method for providing integrated security on a network having a server and at least one client comprising the steps of: normally locking each client to restrict in a selected way use of the client itself and use of the client in gaining access to the network; receiving at the client at least one coded input from a user; transmitting signals which are a representation of at least a selected portion of the coded input from the client to the server; utilizing the received representation signals at the server to authenticate the user, to retrieve unlock inputs for the user and, when the user has been authenticated, to send the unlock inputs to the client; and utilizing the unlock inputs at the client to unlock the client.
Claim 30
Dependent Claim
40 words
A method as claimed in claim 27 including the step performed at the client of saving a selected portion of the coded input, the representation signals transmuted during the transmitting step being of the remaining portion of the coded input.
Claim 31
Dependent Claim
91 words
A method as claimed in claim 28 wherein the coded input from the user includes the current value of a dynamically varying non-predictable number generated by a device in the possession of the user; wherein signals indicative of a client ID are transmitted to the server with the representation signals; and wherein the authenticating step at the server includes the steps of using the client ID signals to retrieve the appropriate representation signals for the user, and matching the retrieved representation signals with the transmitted representation signals to authenticate the user.
Claim 32
Dependent Claim
40 words
A method as claimed in claim 29 wherein the user has a PIN which is inputted into the device by the user and combined in a selected way in the device in producing the non-predictable number inputted by the user.
Claim 33
Dependent Claim
67 words
A method as claimed in claim 29 wherein the user has an alphanumeric PIN (AN-PIN), wherein the coded input from the user includes the AN-PIN, wherein a selected portion of both the non-predictable number and the AN-PIN are saved at the client, and wherein remaining portions of the non-predictable number and the AN-PIN are combined in a predetermined way to product the representation transmitted to the server.
Claim 34
Dependent Claim
43 words
A method as claimed in claim 28 wherein, when the client is locked, at least selected material stored at the client is stored in encrypted form, and wherein the unlock inputs sent to the client include a decryption key for said selected material.
Claim 35
Dependent Claim
46 words
A method as claimed in claim 32 including the steps of transmitting an encryption key from the server to the client after user authentication, and utilizing the encryption key at the client the next time the client is to be locked to encrypt said selected material.
Claim 36
Dependent Claim
48 words
A method as claimed in claim 33 wherein the encrypting step at the client includes the step of combining the transmitted encryption key from the server with at least a portion of the coded input saved at the client to produce an encryption key for the selected material.
Claim 37
Dependent Claim
40 words
A method as claimed in claim 34 wherein the user has a device which generates a dynamically varying non-predictable number which is unique to the user, the coded input from the user including the current non-predictable number from the device.
Claim 38
Dependent Claim
62 words
A method as claimed in claim 35 wherein the device includes a user controlled means for generating a second non-predictable code for the user which may also form part of said coded input; and including the step performed at the client of combining the second non-predictable code with the transmitted encryption key to produce a longer encryption key for the selected material.
Claim 39
Dependent Claim
38 words
A method as claimed in claim 33 including the step of running the encryption key, at least a portion of the stored coded input and selected non-secret data through a one-way function to obtain a longer encryption key.
Claim 40
Dependent Claim
56 words
A method as claimed in claim 28 including the step of passing all of the coded input from the user through a one-way function, the transmitted representation including at least a sufficient portion of the output from the one-way function to assure that all of the coded input is correct when authentication occurs at the server.
Claim 41
Dependent Claim
72 words
A method as claimed in claim 27 including the steps of utilizing selected data, including at least a portion of the coded input from the user, to generate an encryption key, utilizing at least a portion of said encryption key for end-to-end encryption of communications with the client, and utilizing at least a portion of the encryption key to encrypt at least selected material at the client when the client is locked.
Claim 42
Dependent Claim
30 words
A method as claimed in claim 39 wherein the portion of the encryption key utilized for end-to-end encryption and the portion utilized for encryption on client locking are not identical.
Claim 43
Dependent Claim
57 words
A method as claimed in claim 27 including the step performed at the client of running at least a portion of the coded input and selected non-secret data through a one-way function to obtain a value having more characters than the coded input, which value may be utilized as all or a portion of an encryption key.
Claim 44
Dependent Claim
65 words
A method as claimed in claim 27 wherein selected material required to operate a client is zeroized at the client when the client is locked and is transmitted in encrypted form to be stored at the server; and including the step performed at the server when the user has been authenticated for retransmitting the stored encrypted material to the client along with a decryption key.
Claim 45
Dependent Claim
22 words
A method as claimed in claim 27 including the step of locking the client in response to selected conditions at the client.
Claim 46
Dependent Claim
20 words
A method as claimed in claim 43 wherein one of said selected conditions is a discourteous disconnect of the client.
Claim 47
Dependent Claim
20 words
A method as claimed in claim 43 wherein one of said selected conditions is an end-of-session input from the user.
Claim 48
Dependent Claim
29 words
A method as claimed in claim 43 wherein one of said selected conditions is there being no activity by the user at the client for a selected time interval.
Claim 49
Dependent Claim
38 words
A method as claimed in claim 43 including the steps of storing a release code at the client, and inhibiting the full locking of the client in response to a selected condition when a release code is present.
Claim 50
Dependent Claim
33 words
A method as claimed in claim 47 wherein said inhibiting step permits the locking of the client from access to the network, while permitting at least the selected continued use of the client.
Claim 51
Dependent Claim
56 words
A method as claimed in claim 47 wherein the client may generate or receive selected protected files, each of which contains a protection flag, and including the step performed in response to the detection of the protection flag of preventing use of the protected file at the client after one of said selected conditions has occurred.
Claim 52
Dependent Claim
40 words
A method as claimed in claim 49 wherein the step of preventing use of the protected file includes the step of removing or reducing the release code so that the client cannot access the file after a selected condition occurs.
Claim 53
Dependent Claim
30 words
A method as claimed in claim 49 wherein said step of preventing includes the step of encrypting or zeroizing the protected file at the client when a selected condition occurs.
Claim 54
Dependent Claim
49 words
A method as claimed in claim 51 including the steps of indicating if the protected file may be written into at the client, and retransmitting the protected file to the server prior to zeroizing the file in response to an indication that a protected file may be written into.
References Cited (Backward Citations)
US4145568A
Cited
US4145569A
Cited
US4193073A
Cited
US4636583A
Cited
US3900867A
Cited
US3764742A
Cited
US3806874A
Cited
US3886451A
Cited
US3995111A
Cited
US4104694A
Cited
US4185166A
Cited
US4126761A
Cited
US4277837A
Cited
US4302281A
Cited
EP0010496A1
Cited
US4320387A
Cited
US4471216A
Cited
US4295039A
Cited
US4326098A
Cited
US4543657A
Cited
US4578530A
Cited
US4509093A
Cited
US4494211A
Cited
US4536647A
Cited
EP0140013A2
Cited
US4641322A
Cited
US4819267A
Cited
US4599489A
Cited
US4609777A
Cited
US4582434A
Cited
US4849613A
Cited
US4589066A
Cited
US4720860A
Cited
US5023908A
Cited
US4856062A
Cited
US4885778A
Cited
US4998279A
Cited
US4677617A
Cited
US4802216A
Cited
US4890323A
Cited
US4731841A
Cited
US4944008A
Cited
US5023907A
Cited
US5077792A
Cited
US5046125A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-08-16 | 1997-02-15 | 1997-08-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-08-16 | 2001-02-15 | 2001-08-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-08-16 | 2005-02-15 | 2005-08-17 | $7700.00 | Window Closed / Lapsed |