US5949882A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for allowing access to secured computer resources by utilzing a password and an external encryption algorithm
Assignee: Hewlett Packard Development Co LP
•
Filing: 1996-12-13
•
Granted: 1999-09-07
•
Expires: 2016-12-13
Abstract
Abstract A method for permitting access to secured computer resources based upon a two-piece user verification process. In one embodiment of the invention, the user verification process is carried out during a secure power-up procedure. At some point during the secure power-up procedure, the computer user is required to provide an external token or smart card that is coupled to the computer through specialized hardware. The token or smart card is used to store an encryption algorithm furnished with an encryption key that is unique or of limited production. The computer user is then required to enter a plain text user password. Once entered, the user password is encrypted using the encryption algorithm contained in the external token to create a peripheral password. The peripheral password is compared to a value stored in either secure system memory or in memory contained within a secured resource itself. If the two values match, access to the secured resource is permitted. In an alternate embodiment of the invention, the two-piece authentication process is conducted during normal computer operation outside of the secure power-on sequence. In this embodiment of the invention, the user password is entered by means of a secure keyboard communications channel. In either embodiment, the two-piece nature of the authorization process requires the presence of both the user password and the external token in order to generate the peripheral password.
Inventors
- 👤 Michael F. Angelo
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 18:43
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06F2211/00; G06F2211/007; G06F2211/1097
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
148 words
A method for enabling or disabling power in a computer system incorporating circuitry for communicating with an external token that includes a cryptographic algorithm and an encryption key, the computer system further incorporating a secure power-on process or other secure operating mode and a power supply providing at least one power supply voltage to computer system components, the method comprising the steps of: providing a user password to the computer system; communicatively coupling the external token to the computer system; providing the user password to the cryptographic algorithm stored in the token; encrypting the user password with the cryptographic algorithm and the encryption key to produce a system password; comparing the system password with a stored value; and enabling or disabling at least one power supply voltage in response to the result of said step of comparing the system password with a value stored in the computer system.
Claim 2
Independent Claim
148 words
A method for enabling or disabling power in a computer system incorporating circuitry for communicating with an external token that includes a cryptographic algorithm and an encryption key, the computer system further incorporating a secure power-on process or other secure operating mode and a power supply providing at least one power supply voltage to computer system components, the method comprising the steps of: providing a user password to the computer system; communicatively coupling the external token to the computer system; providing the user password to the cryptographic algorithm stored in the token; encrypting the user password with the cryptographic algorithm and the encryption key to produce a system password; comparing the system password with a stored value; and enabling or disabling at least one power supply voltage in response to the result of said step of comparing the system password with a value stored in the computer system.
Claim 3
Dependent Claim
30 words
The method of claim 1, wherein said step of providing a user password to the computer system is performed while the computer system is in a secure period of operation.
Claim 4
Dependent Claim
16 words
The method of claim 2, wherein the secure period of operation includes a secure power-up procedure.
Claim 5
Dependent Claim
22 words
The method of claim 1, wherein said step of comparing the peripheral password with a stored value occurs in secure computer memory.
Claim 6
Dependent Claim
23 words
The method of claim 1, wherein said step of comparing the peripheral password with a stored value occurs in the secured computer resource.
Claim 7
Dependent Claim
25 words
The method of claim 1, wherein said step of encrypting the user password with the cryptographic algorithm and the encryption key occurs in the token.
Claim 8
Dependent Claim
21 words
The method of claim 6, further comprising the step of communicating the peripheral password from the token to the computer system.
Claim 9
Dependent Claim
53 words
The method of claim 1, wherein said step of providing the user password to the cryptographic algorithm comprises downloading both the cryptographic algorithm and the user password to secure computer memory, and wherein said step of encrypting the user password with the cryptographic algorithm and the encryption key occurs in secure computer memory.
Claim 10
Dependent Claim
12 words
The method of claim 1, wherein the token is a smart card.
Claim 11
Dependent Claim
12 words
The method of claim 1, wherein the token is a memory device.
Claim 12
Dependent Claim
15 words
The method of claim 1, wherein the encryption key is unique or of limited production.
Claim 13
Dependent Claim
152 words
A computer system having security capabilities that operate in conjunction with an external token containing a cryptographic algorithm and an encryption key, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a power supply providing at least one power supply voltage to computer system components; security code stored in a processor readable medium such that, upon execution, the processor performs the steps of: receiving a user password; providing the user password to the external token; receiving a system password from the external token, wherein the system password is an encrypted version of the user password; comparing the system password with a stored value; and enabling or disabling at least one power supply voltage from said power supply in response to the result of said step of comparing the system password with a value stored in the computer system.
Claim 14
Dependent Claim
152 words
A computer system having security capabilities that operate in conjunction with an external token containing a cryptographic algorithm and an encryption key, comprising: a system bus; a processor coupled to said system bus; communication circuitry coupled to said processor for communicating with the external token; a power supply providing at least one power supply voltage to computer system components; security code stored in a processor readable medium such that, upon execution, the processor performs the steps of: receiving a user password; providing the user password to the external token; receiving a system password from the external token, wherein the system password is an encrypted version of the user password; comparing the system password with a stored value; and enabling or disabling at least one power supply voltage from said power supply in response to the result of said step of comparing the system password with a value stored in the computer system.
Claim 15
Dependent Claim
22 words
The computer system of claim 12, wherein said security code is executed while the computer system is in a secure operating mode.
Claim 16
Dependent Claim
16 words
The computer system of claim 13, wherein said secure operating mode is a secure power-on procedure.
Claim 17
Dependent Claim
25 words
The computer system of claim 12, wherein said security code step of comparing the peripheral password with a stored value occurs in computer system memory.
Claim 18
Dependent Claim
26 words
The computer system of claim 12, wherein said security code step of comparing the peripheral password with a stored value occurs in said secured computer resource.
Claim 19
Dependent Claim
14 words
The computer system of claim 12, wherein the external token is a smart card.
Claim 20
Dependent Claim
14 words
The computer system of claim 12, wherein the external token is a memory device.
Claim 21
Dependent Claim
16 words
The computer system of claim 12, wherein the encryption key is unique or of limited production.
References Cited (Backward Citations)
US4405829A
Cited
US4799258A
Cited
US4890323A
Cited
US4969188A
Cited
US5485519A
Cited
US5375243A
Cited
US5276737A
Cited
US5315658A
Cited
US5276737B1
Cited
US5315658B1
Cited
US5377269A
Cited
US5590199A
Cited
US5432851A
Cited
US5511122A
Cited
US5537540A
Cited
US5666415A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-09-06 | 2003-03-08 | 2003-09-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-09-06 | 2007-03-08 | 2007-09-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-09-06 | 2011-03-08 | 2011-09-07 | $7700.00 | Window Closed / Lapsed |