US5699514A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Access control system with lockout
Assignee: Nokia of America Corp
•
Filing: 1995-12-26
•
Granted: 1997-12-16
•
Expires: 2015-12-26
Abstract
Abstract An access control system stores two codes for each user that is authorized to access a resource, a primary code and a secondary code. When a user desiring access inputs the primary code to the system, the code is compared with the stored code for that user. If the primary code is valid, the user is allowed to access the resource. However, if the primary code is entered incorrectly, a count of the number of invalid attempts for that user is incremented, and if the count does not exceed a first threshold, the user can try again. When the number of invalid access attempts for the user exceeds the first threshold, the system requires the user to correctly input both the primary and secondary codes, before access to the resource is allowed. A second count is also maintained of the number of failed attempts in providing both codes. When the number of failed attempts exceeds a second threshold, the user is "locked out", i.e, prevented, from gaining access to the resource for a specified period of time, even if the correct primary and secondary codes are entered during that period. The arrangement is more convenient than using a single, longer code in a conventional access control system with lock out, because, most of the time, a user only needs the primary code to access the resource. However, even if the first threshold is exceeded, an authorized user can still get access to the resource by correctly inputting both codes. The dual code system reduces the inconvenience caused by authorized users being locked out while also increasing security.
Inventors
- 👤 Sanja Durinovic-Johri
- 👤 Patricia E. Wirth
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 20:26
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G07; G07C; G07C9/00; G07C9/30; G07C9/32; G07C9/33; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2105; G06F2221/2131; G06F2221/2147
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
143 words
A method of controlling access to a resource comprising the steps of: permitting access to said resource by a user if said user a) in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, or b) subsequently in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code stored for said user within a predetermined number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and denying access to said resource if access is not permitted within said predetermined number of second attempts.
Claim 2
Independent Claim
143 words
A method of controlling access to a resource comprising the steps of: permitting access to said resource by a user if said user a) in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, or b) subsequently in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code stored for said user within a predetermined number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and denying access to said resource if access is not permitted within said predetermined number of second attempts.
Claim 3
Independent Claim
187 words
A method of controlling access to a resource by a user, including the steps of: a) allowing said user to gain access to said resource if said user in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, b) upon failure of said user to gain access to said resource pursuant to step a), allowing said user to gain access to said resource if said user, in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code assigned to said user within a fixed number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and c) upon failure of said user to gain access to said resource pursuant to steps a) and b), denying access to said resource by said user for a predetermined period of time.
Claim 4
Independent Claim
187 words
A method of controlling access to a resource by a user, including the steps of: a) allowing said user to gain access to said resource if said user in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, b) upon failure of said user to gain access to said resource pursuant to step a), allowing said user to gain access to said resource if said user, in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code assigned to said user within a fixed number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and c) upon failure of said user to gain access to said resource pursuant to steps a) and b), denying access to said resource by said user for a predetermined period of time.
Claim 5
Dependent Claim
36 words
The method of claim 2 wherein in step b), said user is allowed access to said resource only if said user presents both said first and second access codes within said predetermined number of second attempts.
Claim 6
Dependent Claim
17 words
The method of claim 3 wherein said second access code is longer than said first access code.
Claim 7
Independent Claim
183 words
An apparatus for restricting the use of a resource to authorized users, comprising: (1) means for storing specific primary and secondary access codes to each authorized user, (2) means for allowing a user to access said resource by (a) correctly entering the specific primary access code assigned to said user without making more than a first threshold value C 1 incorrect entries of said specific primary access code in a time period T 1 , or (b) if more than C 1 incorrect entries are made in said time period T 1 , by then correctly entering both the specific primary access code and the specific secondary access code assigned to said user without making more than a second threshold value C 2 incorrect entries of said specific primary and secondary access codes in a time period T 2 , and (3) means for blocking said user from further access for a predetermined time period if access is not allowed by said allowing means, even if said user thereafter correctly enters both said primary and secondary access codes during said predetermined time period.
Claim 8
Independent Claim
183 words
An apparatus for restricting the use of a resource to authorized users, comprising: (1) means for storing specific primary and secondary access codes to each authorized user, (2) means for allowing a user to access said resource by (a) correctly entering the specific primary access code assigned to said user without making more than a first threshold value C 1 incorrect entries of said specific primary access code in a time period T 1 , or (b) if more than C 1 incorrect entries are made in said time period T 1 , by then correctly entering both the specific primary access code and the specific secondary access code assigned to said user without making more than a second threshold value C 2 incorrect entries of said specific primary and secondary access codes in a time period T 2 , and (3) means for blocking said user from further access for a predetermined time period if access is not allowed by said allowing means, even if said user thereafter correctly enters both said primary and secondary access codes during said predetermined time period.
Claim 9
Dependent Claim
17 words
The apparatus defined in claim 5 wherein C 1 <C 2 and T 1 >T 2 .
Claim 10
Independent Claim
144 words
An apparatus for controlling access to a resource comprising: means for permitting access to said resource by a user if said user a) in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, or b) subsequently in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code stored for said user within a predetermined number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and means for denying access to said resource if access is not permitted within said predetermined number of second attempts.
Claim 11
Independent Claim
144 words
An apparatus for controlling access to a resource comprising: means for permitting access to said resource by a user if said user a) in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts to match with said stored first predetermined access code, or b) subsequently in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second predetermined access code stored for said user within a predetermined number of second attempts at matching entered digits to match entered digits with said stored second predetermined access code, and means for denying access to said resource if access is not permitted within said predetermined number of second attempts.
Claim 12
Dependent Claim
204 words
Apparatus for controlling access to a resource by a user, including a) means for allowing said user to gain access to said resource if said user in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts, wherein said stored first predetermined access code is compared with said digits in each of said first attempts, b) means for allowing said user to gain access to said resource upon failure of said user to gain access to said resource by presenting said first fixed access code, if said user in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second access code stored for said user within a predetermined number of second attempts, wherein said stored second predetermined access code is compared with said digits in each of said second attempts, and c) means for denying access to said resource by said user for a predetermined period of time upon failure of said user to gain access to said resource by presenting said second fixed access code.
Claim 13
Dependent Claim
204 words
Apparatus for controlling access to a resource by a user, including a) means for allowing said user to gain access to said resource if said user in a given access attempt, enters all digits of a first multi-digit access code assigned to said user that matches a first predetermined access code stored for said user within a predetermined number of first attempts, wherein said stored first predetermined access code is compared with said digits in each of said first attempts, b) means for allowing said user to gain access to said resource upon failure of said user to gain access to said resource by presenting said first fixed access code, if said user in a given access attempt, enters all digits of a first and second multi-digit access code assigned to said user that matches a second access code stored for said user within a predetermined number of second attempts, wherein said stored second predetermined access code is compared with said digits in each of said second attempts, and c) means for denying access to said resource by said user for a predetermined period of time upon failure of said user to gain access to said resource by presenting said second fixed access code.
Claim 14
Dependent Claim
33 words
The apparatus of claim 8 wherein said user is allowed access to said resource only if said user presents both said first and second access codes within said predetermined number of second attempts.
Claim 15
Dependent Claim
17 words
The apparatus of claim 9 wherein said second access code is longer than said first access code.
References Cited (Backward Citations)
US3953769A
Cited
US4684945A
Cited
US4847614A
Cited
US4761808A
Cited
US4962449A
Cited
US5091939A
Cited
US5226080A
Cited
US5495235A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-12-15 | 2001-06-16 | 2001-12-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-12-15 | 2005-06-16 | 2005-12-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-12-15 | 2009-06-16 | 2009-12-16 | $7700.00 | Window Closed / Lapsed |