Dual key reflexive encryption security system

Claim 2

A security system for granting access to a host computer in response to a demand from a remote computer, each said computer having a central processing unit (CPU), an operating system, and a printer port, said security system comprising; a permanent encryption key mounted on said remote computer, said permanent encryption key having an associated identifier; a selectable encryption key in said host computer providing corresponding coding/encoding to said permanent encryption key and selectable utilizing said associated identifier; a transitory encryption key generated in said host computer and transmitted to and emplaced within the remote computer for use thereby; comparator means in said host computer for authenticating access demands in response to encrypted identifying data transmitted from said remote computer and encrypted with said said transitory encryption key; whereby access is granted by the host computer to the remote computer upon said unencrypted identifier provided by the remote computer enabling the selection of said selectable encryption key, the encryption therewith of a transitory encryption key and the transmission thereof to said remote computer, and the successful comparison at the host computer of encrypted identifying data encrypted with the transitory key at the remote computer.

Claim 3

A security system as described in claim 1 further comprising: validating program in said host computer for authenticating access demands, said validating program having a transitory encryption key; and, an encryption program in said remote computer capable of detecting, upon the occurrence of an access demand, the presence of said validating program in said host computer.

Claim 4

A security system as described in claim 2 wherein said unencrypted identifying data is an identification number and said encrypted identifying data is a password.

Claim 5

A security system as described in claim 3 wherein said encryption program at said remote computer using the permanent encryption key, decodes the transitory key received from the host computer, and, using the transitory key, encodes the password for reflexively transmission to the host computer, said validating program means authenticating the access demand by decoding the encrypted password and comparing the same to a record thereof.

Claim 6

A security system as described in claim 4 wherein said permanent encryption key is a data encryption standard (DES) token and wherein after decoding, said transitory key is placed on a write-only portion of said DES token.

Claim 7

A security system described in claim 3 wherein said remote computer has installed therein a communications program, wherein upon the remote computer detecting said validating program, the encryption program interrupts said communications program during said authenticating procedures; and, upon authentication, resumes said communications program.

Claim 8

A security system as described in claim 1 wherein said unencrypted identifying data is an identification number and said encrypted identifying data is a challenge statement received encrypted from the said host computer using the selectable encryption key.

Claim 9

A security system as described in claim 7 wherein said encryption program at said remote computer using the permanent encryption key, decodes the transitory key received from the host computer, and, using the transitory key, encodes the challenge statement for reflexively transmission to the host computer, said validating program means authenticating the access demand by decoding the encrypted challenge statement and comparing the same to a record thereof.

Claim 10

A security system as described in claim 8 wherein said permanent encryption key is a data encryption standard (DES) token and wherein after decoding, said transitory encryption key is placed on a write-only portion of said DES token.

Claim 11

A security system described in claim 9 wherein said remote computer has installed therein a communications program, wherein upon the remote computer detecting said validating program, the encryption program interrupts said communications program during said authenticating procedures; and, upon authentication, resumes said communications program.

Claim 14

A method as described in claim 11 wherein said identifying data is an identification number and a password.

Claim 15

A method as described in claim 12 wherein step (3) further comprises the substeps of: (a) sending unencrypted an identification member from said second computer to said first computer; (b) by use of said selectable encryption key, sending encrypted a transitory key from said first computer to said second computer; (c) by use of said permanent encryption key, decoding at the second computer said encrypted transitory key; (d) by use of said transitory key at the second computer, sending encrypted said password from said second computer to said first computer; and, (e) completing authentication at the first computer by decrypting said password and comparing the same to a record thereof.

Claim 16

A method as described in claim 13 wherein said permanent encryption key is a data encryption standard (DES) token and wherein said transitory key is placed on a write-only portion of said DES token.

Claim 17

A method as described in claim 14 wherein said second computer has installed therein a communications program, said method further comprising the step of: upon the second computer detecting said validating program, interrupting said communications program during said authenticating procedures; and, said method further comprising the step of: upon authentication, resuming the communications program.

Claim 18

A method as described in claim 11 wherein said identifying data is an identification number and a challenge statement.

Claim 19

A method as described in claim 16 wherein step (3) further comprises the substeps of: (a) sending unencrypted an identification number from said second computer to said first computer; (b) by use of said selectable encryption key, sending encrypted transitory key with a challenge statement from said first computer to second remote computer; (c) by use of said permanent encryption key, decoding at the second computer said encrypted transitory key; (d) by use of said transitory key at the second computer, sending encrypted said challenge statement from said second computer to said first computer; (e) completing authentication at the first computer by decrypting said challenge statement and comparing the same to a record thereof.

Claim 20

A method as described in claim 17 wherein said permanent encryption key is a data encryption standard (DES) token and wherein said transitory key is placed on a write-only portion of said DES token.

Claim 21

A method as described in claim 18 wherein said second computer has installed therein a communications program, said method further comprising the step of: upon the second computer detecting said validating program, interrupting said communications program during said authenticating procedures; and, said method further comprising the step of: upon authentication, resuming the communications program.

Claim 24

A security system for granting access to a host computer in response to a demand from a remote computer, each said computer having a central processing unit (CPU), an operating system, a communications program and a printer port, said security system comprising; a permanent encryption key mounted on said remote computer, said permanent encryption key having an associated identifier; a selectable encryption key in said host computer providing corresponding coding/encoding to said permanent encryption key and selectable utilizing said associated identifier; a transitory encryption key generated by said host computer and transmitted to the remote computer for use thereby; validating program means for performing authenticating procedures, said validating progrtam means in said host computer for authenticating access demands, said validating program means including said transitory encryption key; an encryption program in said remote computer capable of detecting, upon the occurrence of an access demand, the presence of said validating program in said host computer, and, upon the remote computer detecting said validating program, the encryption program interrupts said communications program during said authenticating procedures; comparator means in said host computer for authenticating access demands in response to encrypted identifying data transmitted from said remote computer and encrypted with said said transitory encryption key; said encryption program, upon completion of said authentication procedures, resumes said communications program; whereby access is granted by the host computer to the remote computer upon said unencrypted identifier provided by the remote computer enabling the selection of said selectable encryption key, the encryption therewith of a transitory encryption key and the transmission thereof to said remote computer, and the successful comparison at the host computer of encrypted identifying data encrypted with the transitory key at the remote computer.

Claim 25

A security system for granting access to a host computer in response to a demand from a remote computer, each said computer having a central processing unit (CPU), an operating system, a communications program and a printer port, said security system comprising; a permanent encryption key mounted on said remote computer, said permanent encryption key having an associated identifier; a selectable encryption key in said host computer providing corresponding coding/encoding to said permanent encryption key and selectable utilizing said associated identifier; a transitory encryption key generated by said host computer and transmitted to the remote computer for use thereby; validating program means for performing authenticating procedures, said validating progrtam means in said host computer for authenticating access demands, said validating program means including said transitory encryption key; an encryption program in said remote computer capable of detecting, upon the occurrence of an access demand, the presence of said validating program in said host computer, and, upon the remote computer detecting said validating program, the encryption program interrupts said communications program during said authenticating procedures; comparator means in said host computer for authenticating access demands in response to encrypted identifying data transmitted from said remote computer and encrypted with said said transitory encryption key; said encryption program, upon completion of said authentication procedures, resumes said communications program; whereby access is granted by the host computer to the remote computer upon said unencrypted identifier provided by the remote computer enabling the selection of said selectable encryption key, the encryption therewith of a transitory encryption key and the transmission thereof to said remote computer, and the successful comparison at the host computer of encrypted identifying data encrypted with the transitory key at the remote computer.

Claim 26

A security system as described in claim 21 wherein said unencrypted identifying data is an identification number and said encrypted identifying data is a password.

Claim 27

A security system as described in claim 22 wherein said encryption program at said remote computer using the permanent encryption key, decodes the transitory key received from the host computer, and, using the transitory key, encodes the password for reflexively transmission to the host computer, said validating program means authenticating the access demand by decoding the encrypted password and comparing the same to a record thereof.

Claim 28

A security system as described in claim 21 wherein said unencrypted identifying data is an identification number and said encrypted identifying data is a challenge statement received encrypted from the said host computer using the selectable encryption key.

Claim 29

A security system as described in claim 24 wherein said encryption program at said remote computer using the permanent encryption key, decodes the transitory key received from the host computer, and, using the transitory key, encodes the challenge statement for reflexively transmission to the host computer, said validating program means authenticating the access demand by decoding the encrypted challenge statement and comparing the same to a record thereof.

Claim 30

A security system as described in claim 25 wherein said encryption key is a data encryption standard (DES) token and wherein after decoding, said transitory key is placed on a write-only portion of said DES token.

Claim 31

A security system described in claim 26 wherein said remote computer has installed therein a communications program, wherein upon the remote computer detecting said validating proram, the encryption program interrupts said communications program during said authenticating procedures; and, upon authentication, resumes said communications program.