US5590199A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Electronic information network user authentication and authorization system
Assignee: F Poszat HU LLC
•
Filing: 1993-10-12
•
Granted: 1996-12-31
•
Expires: 2013-10-12
Abstract
Abstract A system for authenticating and authorizing a user to access services on a heterogenous computer network. The system includes at least one workstation and one authorization server connected to each other through a network. A user couples a personally protectable coprocessor (smart card) to the workstation by means of a bidirectional communications channel. The coprocessor is adapted to receive signals including first encrypted authentication information and to decrypt the first encrypted authentication information using a preselected first key. The coprocessor is further adapted to assemble and encrypt second authentication information using a preselected second key and to transmit the encrypted second encrypted authentication information to the workstation. The workstation then communicates the information onto the network whereby the user is authenticated to access the networked computer or service.
Inventors
- 👤 Marjan Krajewski, Jr.
- 👤 John C. Chipchak
- 👤 David A. Chodorow
- 👤 Jonathan T. Trostle
- 👤 Peter T. Baldwin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 14:21
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3297; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/335; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H04L63/00; H04L63/06; H04L63/08; H04L63/0807; H04L63/083; H04L63/0853; H04L9/321; H04L9/3213; H04L9/3234
Claims Analysis
Total Claims: 6
Claim 1
Independent Claim
140 words
A system for authenticating a user to any service or computer on a heterogenous computer network comprising: at least one workstation in communication with a network; and a removable, personally protectable coprocessor adapted to communicate with the workstation, the coprocessor adapted to receive user-provided initialization information from the workstation, the coprocessor adapted to receive signals including first encrypted authentication information from the workstation, the coprocessor including a preselected first key to decrypt the first encrypted authentication information, the coprocessor further programmed to assemble second authentication information and to encrypt the second authentication information using at least one of (i) a key contained within the first encrypted authentication information and (ii) a preselected second key and to send the second encrypted authentication information to the network via the workstation, whereby the user is authenticated to access the networked computer or service.
Claim 2
Independent Claim
140 words
A system for authenticating a user to any service or computer on a heterogenous computer network comprising: at least one workstation in communication with a network; and a removable, personally protectable coprocessor adapted to communicate with the workstation, the coprocessor adapted to receive user-provided initialization information from the workstation, the coprocessor adapted to receive signals including first encrypted authentication information from the workstation, the coprocessor including a preselected first key to decrypt the first encrypted authentication information, the coprocessor further programmed to assemble second authentication information and to encrypt the second authentication information using at least one of (i) a key contained within the first encrypted authentication information and (ii) a preselected second key and to send the second encrypted authentication information to the network via the workstation, whereby the user is authenticated to access the networked computer or service.
Claim 3
Dependent Claim
18 words
The system of claim 1 wherein the first and second keys are preprogrammed into the personally protectable coprocessor.
Claim 4
Dependent Claim
21 words
The system of claim 2 wherein the first and second keys are preprogrammed in encrypted form into the personally protectable coprocessor.
Claim 5
Independent Claim
166 words
A system for authenticating a user to any service or computer on a heterogenous computer network comprising: one authorization server in communication with the network; at least one workstation in communication with the network; and a removable, personally protectable coprocessor adapted to communicate with the workstation, the coprocessor adapted to receive user-provided initialization information from the workstation, the coprocessor adapted to receive signals including first encrypted authentication information from the workstation, the coprocessor programmed to include a preselected first key to decrypt the first encrypted authentication information, the coprocessor further programmed to receive signals including a preselected second key from the authorization server, the coprocessor further programmed to assemble second authentication information and to encrypt the second authentication information using at least one of (i) a key contained within the first encrypted authentication information and (ii) the preselected second key, and to send the second encrypted authentication information to the network via the workstation, whereby the user is authenticated to access the networked computer or service.
Claim 6
Independent Claim
166 words
A system for authenticating a user to any service or computer on a heterogenous computer network comprising: one authorization server in communication with the network; at least one workstation in communication with the network; and a removable, personally protectable coprocessor adapted to communicate with the workstation, the coprocessor adapted to receive user-provided initialization information from the workstation, the coprocessor adapted to receive signals including first encrypted authentication information from the workstation, the coprocessor programmed to include a preselected first key to decrypt the first encrypted authentication information, the coprocessor further programmed to receive signals including a preselected second key from the authorization server, the coprocessor further programmed to assemble second authentication information and to encrypt the second authentication information using at least one of (i) a key contained within the first encrypted authentication information and (ii) the preselected second key, and to send the second encrypted authentication information to the network via the workstation, whereby the user is authenticated to access the networked computer or service.
References Cited (Backward Citations)
US4665396A
Cited
US4731841A
Cited
US4916738A
Cited
US5146499A
Cited
US5347580A
Cited
US5237611A
Cited
US5349643A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-12-31 | 2000-07-01 | 2000-12-31 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-12-31 | 2004-07-01 | 2004-12-31 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-12-31 | 2008-07-01 | 2008-12-31 | $7700.00 | Window Closed / Lapsed |