Patent US5774525A successfully refreshed from Google Patents.
US5774525A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus utilizing dynamic questioning to provide secure access control
Assignee: International Business Machines Corp
•
Filing: 1997-08-14
•
Granted: 1998-06-30
•
Expires: 2017-08-14
Abstract
Abstract A method and corresponding apparatus utilizes questioning to provide secure access control including the steps of storing information in a database; generating at least one question based upon the information stored in the data base; communicating to the user the generated question(s); receiving a response associated with the question(s), interpreting the response to determine whether the response conforms to the information upon which is based the associated question(s); and outputting an authorization status indicating whether or not the user is authorized for access according to the determination. The question(s) concerns a relationship among portions of information contained in said data base. This feature is advantageous because it protects against an eavesdropper gaining access to the service or facility and provides the capability of generating a relatively large number of different questions from a small data base. Furthermore, the questions asked of the user may be based on dynamic data, which advantageously protects against eavesdroppers gaining access to the service or facility. In addition, the number and/or type of questions generated by the first module may correspond to a security level of the system. The security level may be set by the service or facility, or may be set the system control module according to user input.
Inventors
- 👤 Dimitri Kanevsky
- 👤 Marcel Mordechay Yung
- 👤 Wlodek Wlodzimierz Zadrozny
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 18:10
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/40; H; H04; H04M; H04M3/00; H04M3/38; H04M3/382; H04M3/42; H04M3/487; H04M3/493; G06F2221/00; G06F2221/21; G06F2221/2103
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
106 words
An apparatus for controlling access to a service or facility according to answers provided by a user in response to questions asked of the user, said apparatus comprising: a data base storing information; a first module that generates at least one question based upon said information stored in said data base, wherein said at least one question concerns an arithmetic relationship among portions of information contained in said data base, and wherein said at least one question does not explicitly disclose said portions of information contained in said database; and means for communicating to the user said at least one question generated by said first module.
Claim 2
Independent Claim
106 words
An apparatus for controlling access to a service or facility according to answers provided by a user in response to questions asked of the user, said apparatus comprising: a data base storing information; a first module that generates at least one question based upon said information stored in said data base, wherein said at least one question concerns an arithmetic relationship among portions of information contained in said data base, and wherein said at least one question does not explicitly disclose said portions of information contained in said database; and means for communicating to the user said at least one question generated by said first module.
Claim 3
Dependent Claim
54 words
The apparatus of claim 1, further comprising: means for receiving a response associated with said at least one question, wherein said response is generated by the user; and a second module that interprets said response to determine whether said response conforms to said information upon which is based the associated at least one question.
Claim 4
Dependent Claim
35 words
The apparatus of claim 2, further comprising a system control module that outputs an authorization status indicating whether or not the user is authorized for access according to the determination made by said second module.
Claim 5
Dependent Claim
31 words
The apparatus of claim 1, wherein said first module generates a number of questions to be asked of the user, wherein said number corresponds to a security level of said apparatus.
Claim 6
Dependent Claim
37 words
The apparatus of claim 1, wherein said first module generates a plurality of questions each having an associated security level, wherein cumulative security level of said plurality of questions corresponds to a security level of said apparatus.
Claim 7
Dependent Claim
25 words
The apparatus of claim 2, wherein said response is spoken voice and said second module further comprises a speech recognition module for processing said response.
Claim 8
Dependent Claim
24 words
The apparatus of claim 2, wherein said response is handwriting and said second module further comprises a handwriting recognition module for processing said response.
Claim 9
Dependent Claim
47 words
The apparatus of claim 3, wherein upon receiving said authorization status indicating the user is authorized for access, said first module generates at least one new question, and said second module updates said data base according to a response associated with said at least one new question.
Claim 10
Dependent Claim
18 words
The apparatus of claim 1, wherein said information stored in said data base includes static and dynamic information.
Claim 11
Independent Claim
165 words
A method for controlling access to a service or facility according to answers provided by a user in response to questions asked of the user, the method comprising the steps of: controlling a first module to generate at least one question based upon data stored in a data base, wherein said at least one question concerns an arithmetic relationship among portions of information contained in said data base, and wherein said at least one question does not explicitly disclose said portions of information contained in said database; communicating to the user said at least one question; receiving a response associated with said at least one question, wherein said response is generated by the user; controlling a second module to interpret said response to determine whether said response conforms to said data upon which is based the associated at least one question; and outputting an authorization status indicating whether or not the user is authorized for access according to the determination made by said second module.
Claim 12
Independent Claim
165 words
A method for controlling access to a service or facility according to answers provided by a user in response to questions asked of the user, the method comprising the steps of: controlling a first module to generate at least one question based upon data stored in a data base, wherein said at least one question concerns an arithmetic relationship among portions of information contained in said data base, and wherein said at least one question does not explicitly disclose said portions of information contained in said database; communicating to the user said at least one question; receiving a response associated with said at least one question, wherein said response is generated by the user; controlling a second module to interpret said response to determine whether said response conforms to said data upon which is based the associated at least one question; and outputting an authorization status indicating whether or not the user is authorized for access according to the determination made by said second module.
Claim 13
Dependent Claim
35 words
The method of claim 10, wherein said first module generates a plurality of questions each having an associated security level, wherein cumulative security level of said plurality of questions corresponds to a system security level.
Claim 14
Dependent Claim
25 words
The method of claim 10, wherein said response is spoken voice and said second module further comprises a speech recognition module for processing said response.
Claim 15
Dependent Claim
24 words
The method of claim 10, wherein said response is handwriting and said second module further comprises a handwriting recognition module for processing said response.
Claim 16
Dependent Claim
55 words
The method of claim 10, further comprising the steps of: upon receiving said authorization status indicating the user is authorized for access, controlling said first module to generate at least one new question, and controlling said second module to update said data base according to a response associated with said at least one new question.
Claim 17
Dependent Claim
18 words
The method of claim 10, wherein said information stored in said data base includes static and dynamic information.
Claim 18
Dependent Claim
28 words
The method of claim 10, wherein said first module generates a number of questions to be asked of the user, wherein said number corresponds to a security level.
References Cited (Backward Citations)
US4991205A
Cited
US4528442A
Cited
US4653097A
Cited
US4624008A
Cited
US5056141A
Cited
US4827518A
Cited
US5216720A
Cited
US5181238A
Cited
US5136633A
Cited
US5127043A
Cited
US5204894A
Cited
US5247497A
Cited
US5345549A
Cited
US5311594A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-06-29 | 2001-12-29 | 2002-06-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-06-29 | 2005-12-29 | 2006-06-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-06-29 | 2009-12-29 | 2010-06-30 | $7700.00 | Window Closed / Lapsed |