Patent US5732137A successfully refreshed from Google Patents.
US5732137A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for secure remote authentication in a public network
Assignee: Sun Microsystems Inc
•
Filing: 1997-01-03
•
Granted: 1998-03-24
•
Expires: 2017-01-03
Abstract
Abstract A client workstation provides a login address as an anonymous ftp (file transfer protocol) request, and a password as a user's e-mail address. A destination server compares the user's e-mail address provided as a password to a list of authorized users' addresses. If the user's e-mail address is located on the list of authorized users' addresses maintained by the destination server, the destination server generates a random number (X), and encrypts the random number in an ASCII representation using encryption techniques provided by the Internet Privacy Enhanced Mail (PEM) procedures. The encrypted random number is stored in a file as the user's anonymous directory. The server further establishes the encrypted random number as one-time password for the user. The client workstation initiates an ftp request to obtain the encrypted PEM random number as a file transfer (ftp) request from the destination server. The destination server then sends the PEM encrypted password random number, as an ftp file, over the Internet to the client workstation. The client workstation decrypts the PEM encrypted file utilizing the user's private RSA key, in accordance with established PEM decryption techniques. The client workstation then provides the destination server with the decrypted random number password, which is sent in the clear over the Internet, to login to the destination server. Upon receipt of the decrypted random number password, the destination server permits the user to login to the anonymous directory, thereby completing the user authentication procedure and accomplishing login.
Inventors
- 👤 Ashar Aziz
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 14:06
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/42; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3228; H04L2209/00; H04L2209/42
Claims Analysis
Total Claims: 40
Claim 1
Independent Claim
122 words
A method for authentication of a remote user of a computer system, comprising the steps of: receiving a user identification code of said remote user and determining if said user identification code is authorized; if said user identification code is authorized, generating a one time password, storing said one time password and encrypting said one time password to form an encrypted one time password; providing said encrypted one time password to said remote user; receiving from said remote user a decrypted one time password which is decrypted from said encrypted one time password, and comparing said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 2
Independent Claim
122 words
A method for authentication of a remote user of a computer system, comprising the steps of: receiving a user identification code of said remote user and determining if said user identification code is authorized; if said user identification code is authorized, generating a one time password, storing said one time password and encrypting said one time password to form an encrypted one time password; providing said encrypted one time password to said remote user; receiving from said remote user a decrypted one time password which is decrypted from said encrypted one time password, and comparing said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 3
Dependent Claim
23 words
The method as in claim 1 wherein said step of generating is configured to generate a random number as said one time password.
Claim 4
Dependent Claim
35 words
The method as in claim 1 wherein if said decrypted one time password is not received within a predetermined time t from said remote user, said stored one time password is invalidated for further use.
Claim 5
Dependent Claim
30 words
The method as in claim 1 wherein the step of receiving a user identification code includes the step of receiving an anonymous ftp request from the user as a login.
Claim 6
Dependent Claim
148 words
A computer system which embodies authentication of a remote user, comprising: an input and output device including an interface to the remote user; a storage device; and a processing device configured to: receive a user identification code of said remote user via the interface; determine if said user identification code is authorized; if said user identification code is authorized, generate a one time password, store said one time password in said storage device and encrypt said one time password to form an encrypted one time password; transmit via said interface said encrypted one time password to said remote user; receive from said remote user a decrypted one time password which has been decrypted from said encrypted one time password, and compare said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 7
Dependent Claim
148 words
A computer system which embodies authentication of a remote user, comprising: an input and output device including an interface to the remote user; a storage device; and a processing device configured to: receive a user identification code of said remote user via the interface; determine if said user identification code is authorized; if said user identification code is authorized, generate a one time password, store said one time password in said storage device and encrypt said one time password to form an encrypted one time password; transmit via said interface said encrypted one time password to said remote user; receive from said remote user a decrypted one time password which has been decrypted from said encrypted one time password, and compare said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 8
Dependent Claim
24 words
The computer system as in claim 5 wherein said processing device is further configured to generate a random number as said one time password.
Claim 9
Dependent Claim
44 words
The computer system as in claim 5 wherein said processing device is further configured such that if said decrypted one time password is not received within a predetermined time t from said remote user, said stored one time password is invalidated for further use.
Claim 10
Dependent Claim
27 words
The computer system as in claim 5 wherein said processing device is further configured to receive an anonymous ftp request from the remote user as a login.
Claim 11
Dependent Claim
191 words
A computer program product comprising: a computer usable medium having computable readable code embodied therein that authenticates a remote user of a computer system, the computer readable code comprising: a first module which is configured to receive a user identification code of said remote user and determine if said user identification code is authorized; a second module, which is operatively coupled to the first module and which is configured to, if said user identification code is authorized, generate a one time password, store said one time password and encrypt said one time password to form an encrypted one time password; a third module, which is operatively coupled to the second module and which is configured to provide said encrypted one time password to said remote user; a fourth module, which is operatively coupled to the third module and which is configured to receive from said remote user a decrypted one time password which has been decrypted from said encrypted one time password, and compare said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 12
Dependent Claim
191 words
A computer program product comprising: a computer usable medium having computable readable code embodied therein that authenticates a remote user of a computer system, the computer readable code comprising: a first module which is configured to receive a user identification code of said remote user and determine if said user identification code is authorized; a second module, which is operatively coupled to the first module and which is configured to, if said user identification code is authorized, generate a one time password, store said one time password and encrypt said one time password to form an encrypted one time password; a third module, which is operatively coupled to the second module and which is configured to provide said encrypted one time password to said remote user; a fourth module, which is operatively coupled to the third module and which is configured to receive from said remote user a decrypted one time password which has been decrypted from said encrypted one time password, and compare said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.
Claim 13
Dependent Claim
25 words
The computer program product as in claim 9 wherein said second module is further configured to generate a random number as said one time password.
Claim 14
Dependent Claim
55 words
The computer program product as in claim 9 wherein said second module is further configured to store said one time password for a predetermined time t, such that if said decrypted one time password is not received within said time t from said remote user, said stored one time password is invalidated for further use.
Claim 15
Dependent Claim
27 words
The computer program product as in claim 9 wherein said first module is further configured to receive an anonymous ftp request from the user as a login.
Claim 16
Independent Claim
104 words
A method of authentication of a user for access to a remote computer system, comprising the steps of: providing a user identification code of said user to said remote computer to be used to determine if said user identification code is authorized; if said user identification code is authorized, receiving an encrypted one time password from said remote computer which has been encrypted from a stored one time password; and decrypting said encrypted one time password and providing said decrypted one time password to said remote computer, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 17
Independent Claim
104 words
A method of authentication of a user for access to a remote computer system, comprising the steps of: providing a user identification code of said user to said remote computer to be used to determine if said user identification code is authorized; if said user identification code is authorized, receiving an encrypted one time password from said remote computer which has been encrypted from a stored one time password; and decrypting said encrypted one time password and providing said decrypted one time password to said remote computer, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 18
Dependent Claim
16 words
The method as in claim 13 wherein said stored one time password is a random number.
Claim 19
Dependent Claim
62 words
The method as in claim 13 wherein said step of providing said decrypted one time password requires said decrypted one time password be provided to said remote computer within a predetermined time t for which said stored one time password is stored at the remote computer, beyond which the remote computer would have invalidated said stored one time password for further use.
Claim 20
Dependent Claim
31 words
The method as in claim 13 wherein said step of providing a user identification code includes the step of providing an anonymous ftp request as a login to the remote computer.
Claim 21
Dependent Claim
134 words
A computer system which authenticates a user of the system for access to a remote computer, comprising: an input and output device including an interface to the remote computer; a storage device; and a processing device configured to: provide a user identification code of said user to said remote computer system via said interface to be used to determine if said user identification code is authorized, if said user identification code is authorized, receive via said interface an encrypted one time password from said remote computer which has been encrypted from a stored one time password, and decrypt said encrypted one time password and provide said decrypted one time password to said remote computer via said interface, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 22
Dependent Claim
134 words
A computer system which authenticates a user of the system for access to a remote computer, comprising: an input and output device including an interface to the remote computer; a storage device; and a processing device configured to: provide a user identification code of said user to said remote computer system via said interface to be used to determine if said user identification code is authorized, if said user identification code is authorized, receive via said interface an encrypted one time password from said remote computer which has been encrypted from a stored one time password, and decrypt said encrypted one time password and provide said decrypted one time password to said remote computer via said interface, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 23
Dependent Claim
17 words
The computer system as in claim 17 wherein said stored one time password is a random number.
Claim 24
Dependent Claim
27 words
The computer system as in claim 17 wherein said processing device is further configured to provide an anonymous ftp request to the remote computer as a login.
Claim 25
Dependent Claim
154 words
A computer program product comprising: a computer useable medium having computable readable code embodied therein for authenticating a user for access to a remote computer system, the computer readable code comprising: a first module configured to provide a user identification code of said user to said remote computer to be used to determine if said user identification code is authorized; a second module which is operatively coupled to the first module and which is configured to, if said user identification code is authorized, receive an encrypted one time password from said remote computer which has been encrypted from a stored one time password; and a third module which is operatively coupled to the second module and which is configured to decrypt said encrypted one time password and provide said decrypted one time password to said remote computer, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 26
Dependent Claim
154 words
A computer program product comprising: a computer useable medium having computable readable code embodied therein for authenticating a user for access to a remote computer system, the computer readable code comprising: a first module configured to provide a user identification code of said user to said remote computer to be used to determine if said user identification code is authorized; a second module which is operatively coupled to the first module and which is configured to, if said user identification code is authorized, receive an encrypted one time password from said remote computer which has been encrypted from a stored one time password; and a third module which is operatively coupled to the second module and which is configured to decrypt said encrypted one time password and provide said decrypted one time password to said remote computer, whereby the user is authenticated if said decrypted one time password matches said stored one time password.
Claim 27
Dependent Claim
18 words
The computer program product as in claim 20 wherein said stored one time password is a random number.
Claim 28
Dependent Claim
29 words
The computer program product as in claim 20 wherein said first module is further configured to provide an anonymous ftp request to the remote computer system as a login.
Claim 29
Independent Claim
156 words
A method for user authentication between a first computer and a second computer, comprising the steps of: providing from said first computer to said second computer a user identification code identifying a user of said first computer; receiving by said second computer said user identification code and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; providing by said second computer said encrypted one time password to said first computer; decrypting by said first computer said one time password and providing said decrypted one time password to said second computer; and comparing by said second computer said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 30
Independent Claim
156 words
A method for user authentication between a first computer and a second computer, comprising the steps of: providing from said first computer to said second computer a user identification code identifying a user of said first computer; receiving by said second computer said user identification code and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; providing by said second computer said encrypted one time password to said first computer; decrypting by said first computer said one time password and providing said decrypted one time password to said second computer; and comparing by said second computer said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 31
Dependent Claim
20 words
The method as in claim 23 wherein said one time password generated by said second computer is a random number.
Claim 32
Dependent Claim
29 words
The method as in claim 23 wherein said first computer also provides to the second computer an anonymous ftp request as a login along with said user identification code.
Claim 33
Independent Claim
183 words
A system for user authentication between a first computer and a second computer, comprising: an element included in said first computer which is structured to provide to said second computer a user identification code identifying a user of said first computer; an element included in said second computer which is structured to receive said first request and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; a transmission element included in said second computer which is structured to provide said encrypted one time password to said first computer; a decrypting element included in said first computer which is structured to decrypt said one time password and providing said decrypted one time password to said second computer; and wherein said second computer compares said received decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 34
Independent Claim
183 words
A system for user authentication between a first computer and a second computer, comprising: an element included in said first computer which is structured to provide to said second computer a user identification code identifying a user of said first computer; an element included in said second computer which is structured to receive said first request and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; a transmission element included in said second computer which is structured to provide said encrypted one time password to said first computer; a decrypting element included in said first computer which is structured to decrypt said one time password and providing said decrypted one time password to said second computer; and wherein said second computer compares said received decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 35
Dependent Claim
20 words
The system as in claim 26 wherein the one time password generated by the second computer is a random number.
Claim 36
Dependent Claim
43 words
The system as in claim 26 wherein said element included in said first computer which is structured to provide to said second computer said user identification code is also structured to provide to the second computer an anonymous ftp request as a login.
Claim 37
Dependent Claim
237 words
A computer program product comprising: a computer useable medium having computable readable code embodied therein for user authentication between a first computer and a second computer, the computer readable code comprising: a first module which is configured to provide from said first computer to said second computer a user identification code identifying a user of said first computer; a second module which is coupled to the first module and which is structured to receive by said second computer said user identification code and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; a third module which is coupled to the second module and which is structured to provide by said second computer said encrypted one time password to said first computer; a fourth module which is coupled to the third module and which is structured to decrypt by said first computer said one time password and provide said decrypted one time password to said second computer; and a fifth module which is coupled to the fourth module and which is structured to compare by said second computer said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 38
Dependent Claim
237 words
A computer program product comprising: a computer useable medium having computable readable code embodied therein for user authentication between a first computer and a second computer, the computer readable code comprising: a first module which is configured to provide from said first computer to said second computer a user identification code identifying a user of said first computer; a second module which is coupled to the first module and which is structured to receive by said second computer said user identification code and determining if said user identification code is authorized, such that if said user identification code is authorized, said second computer: generates a one time password; stores said one time password; and encrypts said one time password to form an encrypted one time password; a third module which is coupled to the second module and which is structured to provide by said second computer said encrypted one time password to said first computer; a fourth module which is coupled to the third module and which is structured to decrypt by said first computer said one time password and provide said decrypted one time password to said second computer; and a fifth module which is coupled to the fourth module and which is structured to compare by said second computer said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said user is authenticated.
Claim 39
Dependent Claim
25 words
The computer program product as in claim 29 wherein said second module is further configured to generate a random number as said one time password.
Claim 40
Dependent Claim
38 words
The computer program product as in claim 29 wherein the first module is further configured to provide by the first computer to the second computer an anonymous ftp request as a login along with said user identification code.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-03-23 | 2001-09-22 | 2002-03-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-03-23 | 2005-09-22 | 2006-03-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-03-23 | 2009-09-22 | 2010-03-24 | $7700.00 | Window Closed / Lapsed |