US5604803A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for secure remote authentication in a public network
Assignee: Sun Microsystems Inc
•
Filing: 1994-06-03
•
Granted: 1997-02-18
•
Expires: 2014-06-03
Abstract
Abstract A client workstation provides a login address as an anonymous ftp (file transfer protocol) request, and a password as a user's e-mail address. A destination server compares the user's e-mail address provided as a password to a list of authorized users' addresses. If the user's e-mail address is located on the list of authorized users' addresses maintained by the destination server, the destination server generates a random number (X), and encrypts the random number in an ASCII representation using encryption techniques provided by the Internet Privacy Enhanced Mail (PEM) procedures. The encrypted random number is stored in a file as the user's anonymous directory. The server further establishes the encrypted random number as one-time password for the user. The client workstation initiates an ftp request to obtain the encrypted PEM random number as a file transfer (ftp) request from the destination server. The destination server then sends the PEM encrypted password random number, as an ftp file, over the Internet to the client workstation. The client workstation decrypts the PEM encrypted file utilizing the user's private RSA key, in accordance with established PEM decryption techniques. The client workstation then provides the destination server with the decrypted random number password, which is sent in the clear over the Internet, to login to the destination server. Upon receipt of the decrypted random number password, the destination server permits the user to login to the anonymous directory, thereby completing the user authentication procedure and accomplishing login.
Inventors
- 👤 Ashar Aziz
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 10:57
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/42; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3228; H04L2209/00; H04L2209/42
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
205 words
A method for user authentication between a first computer and a second computer, comprising the steps of: providing an element for performing the step of said first computer providing a first request to said second computer, said first request including a user identification code identifying a user of said first computer; providing an element for performing the step of said second computer receiving said first request and determining if said user identification code of said user is authorized, such that if said user identification code is authorized, said second computer: generates a first random number; stores said first random number as a one time password; and encrypts said first random number used as said one time password; providing an element for performing the step of said second computer providing said encrypted one time password to said first computer; providing an element for performing the step of said first computer decrypting said one time password and providing said decrypted one time password to said second computer; and providing an element for performing the step of said second computer comparing said received decrypted one time password to said stored one time password, such that if said received and stored one time passwords match, said user is authenticated.
Claim 2
Independent Claim
205 words
A method for user authentication between a first computer and a second computer, comprising the steps of: providing an element for performing the step of said first computer providing a first request to said second computer, said first request including a user identification code identifying a user of said first computer; providing an element for performing the step of said second computer receiving said first request and determining if said user identification code of said user is authorized, such that if said user identification code is authorized, said second computer: generates a first random number; stores said first random number as a one time password; and encrypts said first random number used as said one time password; providing an element for performing the step of said second computer providing said encrypted one time password to said first computer; providing an element for performing the step of said first computer decrypting said one time password and providing said decrypted one time password to said second computer; and providing an element for performing the step of said second computer comparing said received decrypted one time password to said stored one time password, such that if said received and stored one time passwords match, said user is authenticated.
Claim 3
Dependent Claim
45 words
The method as defined by claim 1 wherein said first computer provides a second request to said second computer to obtain said encrypted one time password, said second computer upon receipt of said second request provides said encrypted one time password to said first computer.
Claim 4
Dependent Claim
23 words
The method as defined by claim 2 wherein said first and second computers are coupled for communication with one another over a network.
Claim 5
Dependent Claim
66 words
The method as defined by claim 3 wherein said second computer stores said first random number as said one time password for a predetermined time (t), such that if said second computer does not receive said decrypted one time password within said time (t) from said first computer, said first random number is invalidated as said one time password by said second computer and is unusable.
Claim 6
Dependent Claim
30 words
The method as defined by claim 4 wherein any subsequent authentication of said user requires the generation of a new random number to be used as said one time password.
Claim 7
Dependent Claim
19 words
The method as defined by claim 5 wherein said second computer encrypts said first random number using PEM encryption.
Claim 8
Dependent Claim
19 words
The method as defined by claim 6 wherein said first computer decrypts said one time password using PEM decryption.
Claim 9
Dependent Claim
13 words
The method as defined by claim 7 wherein said network comprises the Internet.
Claim 10
Dependent Claim
20 words
The method as defined by claim 8 wherein said first request further includes an anonymous tip request as a login.
Claim 11
Dependent Claim
27 words
The method as defined by claim 9 wherein said second request comprises an anonymous ftp request to obtain said encrypted one time password from said second computer.
Claim 12
Independent Claim
183 words
A system for user authentication between a first computer and a second computer, comprising: a receiving element coupled to said first computer for providing a first request to said second computer, said first request including a user identification code identifying a user of said first computer; an element coupled to said second computer for receiving said first request and determining if said user identification code of said user is authorized, such that if said user identification code is authorized, said second computer: generates a first random number; stores said first random number as a one time password; and encrypts said first random number used as said one time password; said second computer including a transmission element for providing said encrypted one time password to said first computer; said first computer including a decrypting element for decrypting said one time password and providing said decrypted one time password to said second computer; and said second computer comparing said received decrypted one time password to said stored one time password, such that if said received and stored one time passwords match, said user is authenticated.
Claim 13
Independent Claim
183 words
A system for user authentication between a first computer and a second computer, comprising: a receiving element coupled to said first computer for providing a first request to said second computer, said first request including a user identification code identifying a user of said first computer; an element coupled to said second computer for receiving said first request and determining if said user identification code of said user is authorized, such that if said user identification code is authorized, said second computer: generates a first random number; stores said first random number as a one time password; and encrypts said first random number used as said one time password; said second computer including a transmission element for providing said encrypted one time password to said first computer; said first computer including a decrypting element for decrypting said one time password and providing said decrypted one time password to said second computer; and said second computer comparing said received decrypted one time password to said stored one time password, such that if said received and stored one time passwords match, said user is authenticated.
Claim 14
Dependent Claim
45 words
The system as defined by claim 11 wherein said first computer provides a second request to said second computer to obtain said encrypted one time password, said second computer upon receipt of said second request provides said encrypted one time password to said first computer.
Claim 15
Dependent Claim
23 words
The system as defined by claim 12 wherein said first and second computers are coupled for communication between each other over a network.
Claim 16
Dependent Claim
66 words
The system as defined by claim 13 wherein said second computer stores said first random number as said one time password for a predetermined time (t), such that if said second computer does not receive said decrypted one time password within said time (t) from said first computer, said first random number is invalidated as said one time password by said second computer and is unusable.
Claim 17
Dependent Claim
30 words
The system as defined by claim 14 wherein any subsequent authentication of said user requires the generation of a new random number to be used as said one time password.
Claim 18
Dependent Claim
19 words
The system as defined by claim 15 wherein said second computer encrypts said first random number using PEM encryption.
Claim 19
Dependent Claim
19 words
The system as defined by claim 16 wherein said first computer decrypts said one time password using PEM decryption.
Claim 20
Dependent Claim
13 words
The system as defined by claim 17 wherein said network comprises the Internet.
Claim 21
Dependent Claim
20 words
The system as defined by claim 18 wherein said first request further includes an anonymous tip request as a login.
Claim 22
Dependent Claim
27 words
The system as defined by claim 19 wherein said second request comprises an anonymous ftp request to obtain said encrypted one time password from said second computer.
References Cited (Backward Citations)
US4193131A
Cited
US4349695A
Cited
GB2168831A
Cited
US4736423A
Cited
US4817140A
Cited
US5109413A
Cited
US5056140A
Cited
US5323146A
Cited
US5136642A
Cited
US5323465A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-02-18 | 2000-08-19 | 2001-02-18 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-02-18 | 2004-08-19 | 2005-02-18 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-02-18 | 2008-08-19 | 2009-02-18 | $7700.00 | Window Closed / Lapsed |