US5606614A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Personal identification systems
Assignee: British Telecommunications PLC
•
Filing: 1996-04-19
•
Granted: 1997-02-25
•
Expires: 2016-04-19
Abstract
Abstract In personal identification systems which compare passwords in a verification computer to identify a user, successive passwords are generated, or retrieved from a stored list in the verification computer in response to each entry of a public username into the verification computer. A user device carried by the user retrieves the next successive password from a stored list in response to a command from the user and displays the password. The user then reads this password and offers it to the verification computer via a keyboard entry to be compared with the password already generated or retrieved in response to the username (the expected password).
Inventors
- 👤 Patrick S. Brady
- 👤 Michael J. Kenning
- 👤 David A. Roberts
- 👤 Robert E. V. Semos
- 👤 Mark J. Stirland
- 👤 Richard B. Ward
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 13:16
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/3415; G06Q20/38; G06Q20/385; G07F7/1025
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
99 words
A user device for use in a personal identification system, the device comprising: actuation means for providing a command signal upon actuation by a user; a pointer store for storing a pointer; a password store for storing a list of passwords; means responsive to receipt of said command signal to retrieve a stored pointer from said pointer store, to retrieve a stored password from a location of said password store in accordance with the retrieved pointer and to increment the contents of said pointer store; and means to provide the retrieved password to a verification computer of the system.
Claim 2
Dependent Claim
99 words
A user device for use in a personal identification system, the device comprising: actuation means for providing a command signal upon actuation by a user; a pointer store for storing a pointer; a password store for storing a list of passwords; means responsive to receipt of said command signal to retrieve a stored pointer from said pointer store, to retrieve a stored password from a location of said password store in accordance with the retrieved pointer and to increment the contents of said pointer store; and means to provide the retrieved password to a verification computer of the system.
Claim 3
Dependent Claim
65 words
A user device as in claim 1 wherein said actuation means comprises: a PIN store for storing a PIN; PIN entry means for entry of a PIN by a user; and a comparison means responsive to entry of a PIN to compare the entered PIN with a PIN stored in the PIN store and, in the event of a match, to provide said command signal.
Claim 4
Dependent Claim
185 words
A verification computer for use in a personal identification system, comprising: input means for receiving a character string; first storage means comprising sets of associated stores for storing user-related data, each set comprising username, user-specific code, and pointer; second storage means having a plurality of locations for storing numbers; control means responsive to receipt via the input means of a first character string which matches a stored username, to retrieve the contents of the user-specific code store and the pointer store associated with the matched username, to retrieve the contents of the location of said second storage means corresponding to the retrieved pointer, to generate an expected password by applying the retrieved user-specific code as a first input of a predetermined algorithm and applying the retrieved number as a second input of said predetermined algorithm, said control means being also responsive to the receipt via the input means of a second character string, constituting an offered password, to compare the offered and expected passwords and, in the event of a match, to provide an indication and to increment the contents of the corresponding pointer store.
Claim 5
Dependent Claim
185 words
A verification computer for use in a personal identification system, comprising: input means for receiving a character string; first storage means comprising sets of associated stores for storing user-related data, each set comprising username, user-specific code, and pointer; second storage means having a plurality of locations for storing numbers; control means responsive to receipt via the input means of a first character string which matches a stored username, to retrieve the contents of the user-specific code store and the pointer store associated with the matched username, to retrieve the contents of the location of said second storage means corresponding to the retrieved pointer, to generate an expected password by applying the retrieved user-specific code as a first input of a predetermined algorithm and applying the retrieved number as a second input of said predetermined algorithm, said control means being also responsive to the receipt via the input means of a second character string, constituting an offered password, to compare the offered and expected passwords and, in the event of a match, to provide an indication and to increment the contents of the corresponding pointer store.
Claim 6
Dependent Claim
50 words
A verification computer as in claim 3 including: output means for outputting character strings, and wherein said control means is arranged to respond to said indication to generate the next following expected password corresponding to the current username and to supply said next following expected password to the output means.
Claim 7
Dependent Claim
319 words
A verification computer for use in a personal identification system, comprising: input means for receiving a character string; first storage means comprising sets of associated stores for storing user-related data, each set comprising username, user-specific code, and pointer; second storage means having a plurality of locations for storing numbers; control means responsive to receipt via the input means of a first character string which matches a stored username, to retrieve the contents of the user-specific code store and the pointer store associated with the matched username, to retrieve the contents of the location of said second storage means corresponding to the retrieved pointer, to generate an expected password by applying the retrieved user-specific code as a first input of a predetermined algorithm and applying the retrieved number as a second input of said predetermined algorithm, said control means being also responsive to the receipt via the input means of a second character string, constituting an offered password, to compare the offered and expected passwords and, in the event of a match, to provide an indication and to increment the contents of the corresponding pointer store, said computer being for use when the user-specific code is stored in the form of a PIN-modified user-specific code which has been generated by applying the user-specific code as a first input of a second predetermined algorithm and applying a PIN as a second input of said second predetermined algorithm, wherein: the control means is responsive to receipt of a third character string to apply the received third character string as a first input of the inverse of said second predetermined algorithm, to retrieve the contents of the user-specific code store corresponding to the input username and apply the retrieved contents as a second input of said inverse of said second predetermined algorithm and to apply the output of said inverse of said second predetermined algorithm as the first input of said predetermined algorithm.
Claim 8
Dependent Claim
319 words
A verification computer for use in a personal identification system, comprising: input means for receiving a character string; first storage means comprising sets of associated stores for storing user-related data, each set comprising username, user-specific code, and pointer; second storage means having a plurality of locations for storing numbers; control means responsive to receipt via the input means of a first character string which matches a stored username, to retrieve the contents of the user-specific code store and the pointer store associated with the matched username, to retrieve the contents of the location of said second storage means corresponding to the retrieved pointer, to generate an expected password by applying the retrieved user-specific code as a first input of a predetermined algorithm and applying the retrieved number as a second input of said predetermined algorithm, said control means being also responsive to the receipt via the input means of a second character string, constituting an offered password, to compare the offered and expected passwords and, in the event of a match, to provide an indication and to increment the contents of the corresponding pointer store, said computer being for use when the user-specific code is stored in the form of a PIN-modified user-specific code which has been generated by applying the user-specific code as a first input of a second predetermined algorithm and applying a PIN as a second input of said second predetermined algorithm, wherein: the control means is responsive to receipt of a third character string to apply the received third character string as a first input of the inverse of said second predetermined algorithm, to retrieve the contents of the user-specific code store corresponding to the input username and apply the retrieved contents as a second input of said inverse of said second predetermined algorithm and to apply the output of said inverse of said second predetermined algorithm as the first input of said predetermined algorithm.
Claim 9
Dependent Claim
50 words
A verification computer as in claim 5 including: output means for outputting character strings, and wherein said control means is arranged to respond to said indication to generate the next following expected password corresponding to the current username and to supply said next following expected password to the output means.
Claim 10
Independent Claim
155 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store.
Claim 11
Independent Claim
155 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store.
Claim 12
Dependent Claim
59 words
A method as in claim 7 wherein, to obtain the offered password, the user device performs the steps of: retrieving a stored pointer from a pointer store, retrieving a member from a stored list of previously generated passwords in accordance with said retrieved pointer, the retrieved member constituting said offered password, and incrementing the contents of said pointer store.
Claim 13
Dependent Claim
163 words
A method as in claim 8 including the prior steps of: storing a respective username for a new user, storing a respective user specific code in the associated user specific code store for the new user, generating an initial pointer and storing the initial pointer in the associated pointer store for the new user, generating with said predetermined algorithm the respective list of passwords to be stored in a user device to be issued to the new user, retrieving an initial member of a stored list of numbers in accordance with said initial pointer; applying said respective user-specific code as said first input, said retrieved initial member as said second input and producing subsequent values for said second input by repeated incrementing of said initial pointer, entering the generated list of passwords into a store in the user device with the first password so generated being stored in the first location of the store, and issuing the user device to the new user.
Claim 14
Dependent Claim
50 words
A method as in claim 9, together with the further steps, for identifying the verification computer to the user, of: providing the next following expected password upon the occurrence of matching passwords, and comparing the next following expected password with the next following offered password provided by the user device.
Claim 15
Dependent Claim
41 words
A method as in claim 10 further including: communicating the next following expected password directly to the user device, comparing it with the next following offered password in the user device, and providing an indication of a match to the user.
Claim 16
Dependent Claim
50 words
A method as in claim 8, together with the further steps, for identifying the verification computer to the user, of: providing the next following expected password upon the occurrence of matching passwords, and comparing the next following expected password with the next following offered password provided by the user device.
Claim 17
Dependent Claim
41 words
A method as in claim 12 further including: communicating the next following expected password directly to the user device, comparing it with the next following offered password in the user device, and providing an indication of a match to the user.
Claim 18
Dependent Claim
50 words
A method as in claim 7, together with the further steps, for identifying the verification computer to the user, of: providing the next following expected password upon the occurrence of matching passwords, and comparing the next following expected password with the next following offered password provided by the user device.
Claim 19
Dependent Claim
41 words
A method as in claim 14 further including: communicating the next following expected password directly to the user device, comparing it with the next following offered password in the user device, and providing an indication of a match to the user.
Claim 20
Independent Claim
452 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, wherein, to obtain the offered password, the user device performs the steps of: retrieving a stored pointer from a pointer store, retrieving a member from a stored list of previously generated passwords in accordance with said retrieved point, the retrieved member constituting said offered password, and incrementing the contents of said pointer store, including the prior steps of: storing a respective username for a new user, storing a respective user specific code int he associated user specific code store for the new user, generating an initial pointer and storing the initial pointer in the associated pointer store for the new user, generating with said predetermined algorithm the respective list of passwords to be stored in a user device to be issued to the new user, retrieving an initial member of a stored list of numbers in accordance with said initial pointer; applying said respective user-specific code as said first input, said retrieved initial member as said second input and producing subsequent values for said second input by repeated incrementing of said initial pointer, entering the generated list of passwords into a store in the user device with the first password so generated being stored in the first location of the store, and issuing the user device to the new user, modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the resulting PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
Claim 21
Independent Claim
452 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, wherein, to obtain the offered password, the user device performs the steps of: retrieving a stored pointer from a pointer store, retrieving a member from a stored list of previously generated passwords in accordance with said retrieved point, the retrieved member constituting said offered password, and incrementing the contents of said pointer store, including the prior steps of: storing a respective username for a new user, storing a respective user specific code int he associated user specific code store for the new user, generating an initial pointer and storing the initial pointer in the associated pointer store for the new user, generating with said predetermined algorithm the respective list of passwords to be stored in a user device to be issued to the new user, retrieving an initial member of a stored list of numbers in accordance with said initial pointer; applying said respective user-specific code as said first input, said retrieved initial member as said second input and producing subsequent values for said second input by repeated incrementing of said initial pointer, entering the generated list of passwords into a store in the user device with the first password so generated being stored in the first location of the store, and issuing the user device to the new user, modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the resulting PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
Claim 22
Dependent Claim
50 words
A method as in claim 16 together with the further steps, for identifying the verification computer to the user, of: providing the next following expected password upon the occurrence of matching passwords, and comparing the next following expected password with the next following offered password provided by the user device.
Claim 23
Independent Claim
241 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, previously modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
Claim 24
Independent Claim
241 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, previously modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
Claim 25
Independent Claim
295 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, wherein, to obtain the offered password, the user device performs the steps of: retrieving a stored pointer from a pointer store, retrieving a member from a stored list of previously generated passwords in accordance with said retrieved point, the retrieved member constituting said offered password, and incrementing the contents of said pointer store, previously modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
Claim 26
Independent Claim
295 words
A method of identifying a user comprising the steps of: communicating to a verification computer a public username and an offered password, the offered password being provided by a user device in the possession of the user, utilizing in the verification computer the communicated username to identify a respective pointer store and a respective user-specific code store associated with the communicated username, retrieving a stored pointer from said respective pointer store, retrieving a member of a stored list of numbers in accordance with said retrieved pointer, retrieving a stored user-specific code from said respective user specific code store, generating an expected password with a predetermined algorithm having a first input formed by said retrieved user-specific code and a second input formed by the retrieved member, comparing the communicated offered password with the expected password, and, upon the occurrence of a match, treating the user as identified and incrementing the contents of said respective pointer store, wherein, to obtain the offered password, the user device performs the steps of: retrieving a stored pointer from a pointer store, retrieving a member from a stored list of previously generated passwords in accordance with said retrieved point, the retrieved member constituting said offered password, and incrementing the contents of said pointer store, previously modifying the user-specific code in accordance with a first personal identification number (PIN) and a second predetermined algorithm, storing the PIN-modified user-specific code in said associated user-specific code store, communicating from the user a second PIN to the verification computer, and utilizing the second PIN and the inverse of the second predetermined algorithm to produce a user-specific code for use as said first input to said predetermined algorithm, the correct user-specific code being produced only when the second PIN is the same as the first PIN.
References Cited (Backward Citations)
US4630201A
Cited
WO1985003787A1
Cited
US4614861A
Cited
US4998279A
Cited
US5168520A
Cited
US4720860A
Cited
US5023908A
Cited
US4856062A
Cited
US4885778A
Cited
US4758718A
Cited
US4802217A
Cited
US5058161A
Cited
EP0234100A2
Cited
US4974193A
Cited
US5068894A
Cited
WO1991006926A1
Cited
US5097505A
Cited
US5130519A
Cited
US5317636A
Cited
US5478994A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-02-25 | 2000-08-26 | 2001-02-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-02-25 | 2004-08-26 | 2005-02-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-02-25 | 2008-08-26 | 2009-02-25 | $7700.00 | Window Closed / Lapsed |