Patent US6035406A successfully refreshed from Google Patents.
US6035406A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Plurality-factor security system
Assignee: Quintet Inc
•
Filing: 1997-04-02
•
Granted: 2000-03-07
•
Expires: 2017-04-02
Abstract
Abstract The invention provides a method and system for simultaneously authenticating a user using two or more factors, such as both a password and a physical token or both a password and biometric information. The user presents a physical token including a storage device to a processor and attempts to log in using a first password; the processor includes a login service which receives the first password, accesses the storage device to transform the first password into a second password, and authenticates the second password using an operating system for the processor. The storage device includes encrypted information regarding the second password which can be relatively easily determined in response to the first password, but which cannot be relatively easily determined without the first password. The system or the storage device may also store information for biometric authentication of the user.
Inventors
- 👤 Mohamed A. Moussa
- 👤 Chih S. Chan
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 15:50
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/40; G06F21/32; G06F21/34
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
188 words
A method for operating a processor to simultaneously authentic a user using a plurality of factors, said method including the steps of executing an operating system on said processor; generating an authentication number N; generating a data block for a physical token; writing said data block onto said physical token; generating an authentication fingerprint F responsive to said new data block; storing said authentication number N and said authentication fingerprint F in an authentication database; receiving a user name and associated first password Q, said first password Q being other than a password P associated with said user name by said operating system; receiving said physical token having said data block, said data block including encoded therein said password P and said authentication number N; determining in response to said data block, said authentication fingerprint F; authenticating said authentication fingerprint F; first recovering from said data block, in response to said first password Q, said authentication number N; second recovering from said data block, in response to said first password Q and said authentication number N, said password P; and authentication said password P with said operating system.
Claim 2
Independent Claim
188 words
A method for operating a processor to simultaneously authentic a user using a plurality of factors, said method including the steps of executing an operating system on said processor; generating an authentication number N; generating a data block for a physical token; writing said data block onto said physical token; generating an authentication fingerprint F responsive to said new data block; storing said authentication number N and said authentication fingerprint F in an authentication database; receiving a user name and associated first password Q, said first password Q being other than a password P associated with said user name by said operating system; receiving said physical token having said data block, said data block including encoded therein said password P and said authentication number N; determining in response to said data block, said authentication fingerprint F; authenticating said authentication fingerprint F; first recovering from said data block, in response to said first password Q, said authentication number N; second recovering from said data block, in response to said first password Q and said authentication number N, said password P; and authentication said password P with said operating system.
Claim 3
Dependent Claim
45 words
A method as in claim 1, wherein said step of first recovering includes the steps of determining an index value N0 in response to said first password Q; and reading said authentication number N from said data block in response to said index value N0.
Claim 4
Dependent Claim
66 words
A method as in claim 1, wherein said step of second recovering includes the steps of determining a set of index values Ni in response to said first password Q, one index value Ni for each of a plurality of characters Pi of said password P; reading each of said plurality of characters Pi from said data block in response to corresponding said index values Ni.
Claim 5
Dependent Claim
70 words
A method as in claim 1, including the steps of generating a new authentication number N; generating a new data block for said physical token, including said new authentication number N; writing said new data block onto said physical token; generating a new authentication fingerprint F in response to said new data block; and storing said new authentication number N and said new authentication fingerprint F in said authentication database.
Claim 6
Independent Claim
207 words
A system for simultaneously authenticating a user using a plurality of factors, said system including a processor having an operating system; means for generating an authentication number N; means for generating a data block for a physical token, including said authentication number N; means for writing said data block onto said physical token; means for generating an authentication fingerprint F in response to said data block; means for storing said authentication number N and said authentication fingerprint F in an authentication database; an input device disposed for receiving a user name and an associated first password Q, said first password Q being other than a password P associated with said user name by said operating system; a drive disposed for receiving said physical token, said physical token having said data block, said data block including encoded therein said password P and said authentication number N; said data block having values associated with said authentication fingerprint F associated with said user name; said data block having an authentication number N recoverable in response to said first password Q; said data block having said password P recoverable in response to said first password Q and said authentication number N, and said operating system disposed for authenticating said password P.
Claim 7
Independent Claim
207 words
A system for simultaneously authenticating a user using a plurality of factors, said system including a processor having an operating system; means for generating an authentication number N; means for generating a data block for a physical token, including said authentication number N; means for writing said data block onto said physical token; means for generating an authentication fingerprint F in response to said data block; means for storing said authentication number N and said authentication fingerprint F in an authentication database; an input device disposed for receiving a user name and an associated first password Q, said first password Q being other than a password P associated with said user name by said operating system; a drive disposed for receiving said physical token, said physical token having said data block, said data block including encoded therein said password P and said authentication number N; said data block having values associated with said authentication fingerprint F associated with said user name; said data block having an authentication number N recoverable in response to said first password Q; said data block having said password P recoverable in response to said first password Q and said authentication number N, and said operating system disposed for authenticating said password P.
Claim 8
Dependent Claim
36 words
A system as in claim 5, wherein said authentication number N is recoverable from said data block in response to an index value N0, said index value N0 determinable in response to said first password Q.
Claim 9
Dependent Claim
48 words
A system as in claim 5, wherein each of a plurality of characters Pi of said password P are recoverable from said data block in response to a set of corresponding index values Ni, said set of index values Ni determinable in response to said first password Q.
Claim 10
Dependent Claim
77 words
A system as in claim 5, including means for generating a new authentication number N; means for generating a new data block for said physical token, including said new authentication number N; means for writing said new data block onto said physical token; means for generating a new authentication fingerprint F in response to said new data block; and means for storing said new authentication number N and said new authentication fingerprint F in said authentication database.
Claim 11
Independent Claim
144 words
A system for operating a processor to simultaneously authenticate a user using a plurality of factors, said system including a drive capable of receiving a physical token, said physical token having a data block, said data block including a second password encrypted therein, an authentication number and a set of random value associated with an authentication fingerprint; a login service having said authentication fingerprint and said authentication number associated with said user, said login service configured to receive a first password from said user, reading said data block from said physical token, and determining said second password responsive to said first password, said authentication fingerprint and said authentication number and said data block read from said physical token; and an operating system having said second password associated with said user, said login service additionally configured to provide said second password to said operating system.
Claim 12
Independent Claim
144 words
A system for operating a processor to simultaneously authenticate a user using a plurality of factors, said system including a drive capable of receiving a physical token, said physical token having a data block, said data block including a second password encrypted therein, an authentication number and a set of random value associated with an authentication fingerprint; a login service having said authentication fingerprint and said authentication number associated with said user, said login service configured to receive a first password from said user, reading said data block from said physical token, and determining said second password responsive to said first password, said authentication fingerprint and said authentication number and said data block read from said physical token; and an operating system having said second password associated with said user, said login service additionally configured to provide said second password to said operating system.
References Cited (Backward Citations)
US4405829A
Cited
US4438824A
Cited
US4799153A
Cited
US4736423A
Cited
US5191611A
Cited
US5481720A
Cited
US5036461A
Cited
US5204961A
Cited
US5191613A
Cited
US5497421A
Cited
US5241594A
Cited
US5534855A
Cited
US5506961A
Cited
US5432864A
Cited
US5278904A
Cited
US5581630A
Cited
US5491752A
Cited
US5469576A
Cited
US5455953A
Cited
US5719950A
Cited
US5495533A
Cited
US5907149A
Cited
US5694471A
Cited
US5535276A
Cited
US5799092A
Cited
US5774551A
Cited
US5706427A
Cited
US5841970A
Cited
US5742683A
Cited
US5881226A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-03-07 | 2003-09-06 | 2004-03-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-03-07 | 2007-09-06 | 2008-03-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-03-07 | 2011-09-06 | 2012-03-07 | $7700.00 | Window Closed / Lapsed |