Patent US5887131A successfully refreshed from Google Patents.
US5887131A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for controlling access to a computer system by utilizing an external device containing a hash value representation of a user password
Assignee: Hewlett Packard Development Co LP
•
Filing: 1996-12-31
•
Granted: 1999-03-23
•
Expires: 2016-12-31
Abstract
Abstract A method for permitting access to secured computer resources based upon a two-piece user verification process. In the disclosed embodiment, the user verification process is carried out during a secure power-up procedure. At some point during the secure power-up procedure, the computer user is required to provide an external token or smart card to the computer system. The token or smart card is used to store an authentication value(s) required to enable secured resources. The computer user is then required to enter a plain text user password. Separate passwords can be used to enable various portions of the computer system. Once entered, a one-way hash function is performed on the user password. The resulting hash value is compared to an authentication value (token value) downloaded from the token. If the two values match, the power-on sequence is completed and access to the computer system and/or secured computer resources is permitted. If the two values do not match, power to the entire computer system and/or secured computer resources are disabled. The two-piece nature of the authorization process requires the presence of both the user password and the external token in order to access protected computer resources.
Inventors
- 👤 Michael F. Angelo
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 22:29
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06F2211/00; G06F2211/1097; G06F2221/00; G06F2221/21; G06F2221/2149
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
153 words
A method for permitting access to secured resources in a computer system incorporating circuitry for communicating with an external token that includes an authentication value, the computer system further incorporating a secure power-up procedure or other secure operating mode, the method comprising the steps of: providing a plain text user password to the computer system while the computer system is in a secure period of operation, the secure period of operation being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; communicatively coupling the external token to the computer system; comparing the hash value with the authentication value stored in the external token, the comparison occurring in the computer system; and enabling access to a secured internal computer resource in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 2
Independent Claim
153 words
A method for permitting access to secured resources in a computer system incorporating circuitry for communicating with an external token that includes an authentication value, the computer system further incorporating a secure power-up procedure or other secure operating mode, the method comprising the steps of: providing a plain text user password to the computer system while the computer system is in a secure period of operation, the secure period of operation being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; communicatively coupling the external token to the computer system; comparing the hash value with the authentication value stored in the external token, the comparison occurring in the computer system; and enabling access to a secured internal computer resource in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 3
Dependent Claim
16 words
The method of claim 1, wherein the secure period of operation includes a secure power-up procedure.
Claim 4
Dependent Claim
27 words
The method of claim 1, wherein said step of comparing the hash value with the authentication value stored in the external token occurs in secure computer memory.
Claim 5
Dependent Claim
28 words
The method of claim 1, wherein said step of comparing the hash value with the authentication value stored in the external token occurs in the secured computer resource.
Claim 6
Dependent Claim
30 words
The method of claim 1, wherein said step of performing a one-way hash function on the plain text user password to produce a hash value occurs in secure computer memory.
Claim 7
Dependent Claim
13 words
The method of claim 1, wherein the external token is a smart card.
Claim 8
Dependent Claim
14 words
The method of claim 1, wherein the external token is a Touch Memory™ device.
Claim 9
Dependent Claim
12 words
The method of claim 1, wherein the one-way hash function is SHA.
Claim 10
Independent Claim
161 words
A method for enabling or disabling power in a computer system incorporating circuitry for communicating with an external token that includes an authentication value, the computer system further incorporating a secure power-on process or other secure operating mode and a power supply providing at least one power supply voltage to computer system components, the method comprising the steps of: providing a plain text user password to the computer system while the computer system is in a secure period of operation, the secure period of operation being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; communicatively coupling the external token to the computer system; comparing the hash value with the authentication value stored in the external token; and enabling or disabling at least one power supply voltage in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 11
Independent Claim
161 words
A method for enabling or disabling power in a computer system incorporating circuitry for communicating with an external token that includes an authentication value, the computer system further incorporating a secure power-on process or other secure operating mode and a power supply providing at least one power supply voltage to computer system components, the method comprising the steps of: providing a plain text user password to the computer system while the computer system is in a secure period of operation, the secure period of operation being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; communicatively coupling the external token to the computer system; comparing the hash value with the authentication value stored in the external token; and enabling or disabling at least one power supply voltage in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 12
Dependent Claim
43 words
The method of claim 9, wherein said step of enabling or disabling at least one supply voltage comprises disabling all power supply voltages in the computer system if the hash value is not equal to the authentication value stored in the external token.
Claim 13
Dependent Claim
13 words
The method of claim 9, wherein the external token is a smart card.
Claim 14
Dependent Claim
14 words
The method of claim 9, wherein the external token is a Touch Memory™ device.
Claim 15
Dependent Claim
181 words
A computer system having security capabilities that operate in conjunction with an external token containing an authentication value, the computer system further having system memory and a secure power-on process or other secure operating mode, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a secured internal computer resource coupled to said processor; security code stored in a processor readable medium for causing the processor to perform the steps of: receiving a plain text user password while the computer system is in the secure operating mode, the secure operating mode being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; receiving the authentication value from the external token; comparing, in the computer system, the hash value with the authentication value stored in the external token; and enabling or disabling said secured computer resource in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 16
Dependent Claim
181 words
A computer system having security capabilities that operate in conjunction with an external token containing an authentication value, the computer system further having system memory and a secure power-on process or other secure operating mode, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a secured internal computer resource coupled to said processor; security code stored in a processor readable medium for causing the processor to perform the steps of: receiving a plain text user password while the computer system is in the secure operating mode, the secure operating mode being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; receiving the authentication value from the external token; comparing, in the computer system, the hash value with the authentication value stored in the external token; and enabling or disabling said secured computer resource in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 17
Dependent Claim
16 words
The computer system of claim 13, wherein said secure operating mode is a secure power-on procedure.
Claim 18
Dependent Claim
18 words
The computer system of claim 13, wherein said communication circuitry is configured to communicate with a smart card.
Claim 19
Dependent Claim
19 words
The computer system of claim 13, wherein said communication circuitry is configured to communicate with a Touch Memory™ device.
Claim 20
Dependent Claim
15 words
The computer system of claim 13, wherein said secured computer resource is a disk drive.
Claim 21
Dependent Claim
192 words
A computer system having security capabilities that operate in conjunction with an external token containing an authentication value, the computer system further having system memory and a secure power-on process or other secure operating mode, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a power supply providing at least one power supply voltage to computer system components; power-on code stored in a processor readable medium for causing the processor to perform the steps of: receiving a plain text user password while the computer system is in the secure operating mode, the secure operating mode being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; receiving the authentication value from the external token; comparing, in the computer system, the hash value with the authentication value stored in the external token; and enabling or disabling at least one power supply voltage from said power supply in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 22
Dependent Claim
192 words
A computer system having security capabilities that operate in conjunction with an external token containing an authentication value, the computer system further having system memory and a secure power-on process or other secure operating mode, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a power supply providing at least one power supply voltage to computer system components; power-on code stored in a processor readable medium for causing the processor to perform the steps of: receiving a plain text user password while the computer system is in the secure operating mode, the secure operating mode being independent of the external token; performing a one-way hash function on the plain text user password to produce a hash value; receiving the authentication value from the external token; comparing, in the computer system, the hash value with the authentication value stored in the external token; and enabling or disabling at least one power supply voltage from said power supply in response to the result of said step of comparing the hash value with the authentication value stored in the external token.
Claim 23
Dependent Claim
47 words
The computer system of claim 18, wherein said step of enabling or disabling at least one supply voltage comprises causing the processor to disable all power supply voltages in the computer system if the hash value is not equal to the authentication value stored in the token.
Claim 24
Dependent Claim
49 words
The computer system of claim 18, wherein said step of enabling or disabling at least one supply voltage comprises causing the processor to enable a power supply voltage to a portion of the computer system if the hash value is equal to the authentication value stored in the token.
References Cited (Backward Citations)
US4405829A
Cited
US4604708A
Cited
US4604708B1
Cited
US4799258A
Cited
US4757534A
Cited
US4890323A
Cited
US5704040A
Cited
US5204966A
Cited
US5619066A
Cited
US5375243A
Cited
US5210795A
Cited
US5448045A
Cited
US5655124A
Cited
US5315658B1
Cited
US5276737B1
Cited
US5315658A
Cited
US5276737A
Cited
US5649118A
Cited
US5590199A
Cited
US5623637A
Cited
US5511122A
Cited
US5694471A
Cited
US5537540A
Cited
US5555373A
Cited
US5666415A
Cited
US5699514A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-03-22 | 2002-09-21 | 2003-03-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-03-22 | 2006-09-21 | 2007-03-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-03-22 | 2010-09-21 | 2011-03-23 | $7700.00 | Window Closed / Lapsed |