Patent US5117877A successfully refreshed from Google Patents.
Patent US6058480A successfully refreshed from Google Patents.
US6058480A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for remote pass-phase authentication
Assignee: Yahoo Inc
•
Filing: 1998-01-08
•
Granted: 2000-05-02
•
Expires: 2018-01-08
Abstract
Abstract A system and method are disclosed for authenticating users and services communicating over an insecure network. Each user and service has a pass-phrase used for authentication. However, the pass-phrases are not revealed during the authentication process as challenge-response techniques are used to keep the pass-phrase secret. In addition, the users and services do not need to know nor do they learn each other's pass-phrases making the process usefuil in a distributed environment. Pass-phrases are known by an authentication entity with which the service communicates to authenticate both users and services. Users may have identities in and services may support a number of realms, each of which may be viewed as large collection of users (e.g., CompuServe.com). Users choose the realm in which they would like to be authenticated. In one embodiment of the present invention, the system and method are adapted for use with the HyperText Transfer Protocol of the World Wide Web so that secure transactions may be accomplished between users and services communicating via the Internet.
Inventors
- 👤 Gary S. Brown
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 15:54
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0407; H04L63/0414; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H04L63/0428; H04L63/0435; H04L63/06; H04L63/062; H04L63/08; H04L9/00; H04L9/32; H04L9/3226; H04L9/3271; H04L9/40; G06F2221/00; G06F2221/21; G06F2221/2103; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 12
Claim 1
Independent Claim
228 words
A system for remote pass-phrase authentication comprising: a plurality of authentication deities; a plurality of services, said services adapted for communication with said authentication deities; a plurality of user computers adapted for communication with said services; a selected service and a selected authentication deity, said selected service and selected authentication deity transmitted from one of said plurality of user computers to said selected service; a service random challenge transmitted from said selected service to said one of said plurality of user computers; a user response to said service random challenge, said user response transmitted from said one of said plurality of user computers to said selected service; a user random challenge transmitted from said one of said plurality of user computers to said selected service; a service response to said user random challenge; an authentication request comprising said selected authentication deity, a user name associated with said one of said plurality of user computers, a service name associated with said selected service, said service challenge, said user challenge, said service response, said user response, said authentication request transmitted from said selected service to said selected authentication deity; and an authentication response transmitted from said selected authentication deity to said selected service, said authentication response based on said authentication request, a pass-phrase associated with said one of said plurality of user computers, and a pass-phrase for said selected service.
Claim 2
Independent Claim
228 words
A system for remote pass-phrase authentication comprising: a plurality of authentication deities; a plurality of services, said services adapted for communication with said authentication deities; a plurality of user computers adapted for communication with said services; a selected service and a selected authentication deity, said selected service and selected authentication deity transmitted from one of said plurality of user computers to said selected service; a service random challenge transmitted from said selected service to said one of said plurality of user computers; a user response to said service random challenge, said user response transmitted from said one of said plurality of user computers to said selected service; a user random challenge transmitted from said one of said plurality of user computers to said selected service; a service response to said user random challenge; an authentication request comprising said selected authentication deity, a user name associated with said one of said plurality of user computers, a service name associated with said selected service, said service challenge, said user challenge, said service response, said user response, said authentication request transmitted from said selected service to said selected authentication deity; and an authentication response transmitted from said selected authentication deity to said selected service, said authentication response based on said authentication request, a pass-phrase associated with said one of said plurality of user computers, and a pass-phrase for said selected service.
Claim 3
Dependent Claim
22 words
The system of claim 1 wherein said authentication response comprises an authentication proof for said one of said plurality of user computers.
Claim 4
Dependent Claim
17 words
The system of claim 1 wherein said authentication response comprises an authentication proof for said selected service.
Claim 5
Dependent Claim
31 words
The system of claim 1 wherein said authentication response includes one or more of the group consisting of affirmative responses, negative responses, no service responses, invalid service responses, and problem responses.
Claim 6
Dependent Claim
26 words
The system of claim 1 further comprising a session key for said use by said one of said plurality of user computers and said selected service.
Claim 7
Dependent Claim
13 words
The system of claim 5 wherein said session key is used for encryption.
Claim 8
Dependent Claim
15 words
The system of claim 5 wherein said session key is used for a reauthentication process.
Claim 9
Independent Claim
293 words
A method of authentication, said method comprising the steps of (a) assigning a first identifier and a first pass-phrase to a first entity, said first identifier and said first pass-phrase associated with a realm; (b) assigning a second identifier and a second pass-phrase to a second entity, said second identifier and said second pass-phrase associated with said realm; (c) storing said first identifier, said first pass-phrase, said second identifier, and said second pass-phrase at an authentication entity; (d) requesting access to said second entity, said request initiated by said first entity and including said first identifier; (e) transmitting a first challenge from said second entity to said first entity; (f) transmitting a second challenge from said first entity to said second entity; (g) calculating a first response involving said realm, first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, said first response calculated by said first entity; (h) calculating a second response involving said realm, said second identifier, said second pass-phrase, said second challenge, said first identifier, and said first challenge, said second response calculated by said second entity; (i) transmitting said first response to said second entity; (j) transmitting said realm, said first identifier, said first challenge, said first response, said second identifier, said second challenge, and said second response to said authentication entity; (k) verifying said first response, said verification involving said realm, said first identifier, said first pass-phrase, said first challenge, said first response, said second identifier, and said second challenge, and said verification performed by said authentication entity; and (l) verifying said second response, said verification involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and said verification performed by said authentication entity.
Claim 10
Independent Claim
293 words
A method of authentication, said method comprising the steps of (a) assigning a first identifier and a first pass-phrase to a first entity, said first identifier and said first pass-phrase associated with a realm; (b) assigning a second identifier and a second pass-phrase to a second entity, said second identifier and said second pass-phrase associated with said realm; (c) storing said first identifier, said first pass-phrase, said second identifier, and said second pass-phrase at an authentication entity; (d) requesting access to said second entity, said request initiated by said first entity and including said first identifier; (e) transmitting a first challenge from said second entity to said first entity; (f) transmitting a second challenge from said first entity to said second entity; (g) calculating a first response involving said realm, first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, said first response calculated by said first entity; (h) calculating a second response involving said realm, said second identifier, said second pass-phrase, said second challenge, said first identifier, and said first challenge, said second response calculated by said second entity; (i) transmitting said first response to said second entity; (j) transmitting said realm, said first identifier, said first challenge, said first response, said second identifier, said second challenge, and said second response to said authentication entity; (k) verifying said first response, said verification involving said realm, said first identifier, said first pass-phrase, said first challenge, said first response, said second identifier, and said second challenge, and said verification performed by said authentication entity; and (l) verifying said second response, said verification involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and said verification performed by said authentication entity.
Claim 11
Independent Claim
367 words
A method of authentication, said method comprising the steps of: (a) assigning a first identifier and a first pass-phrase to a first entity, said first identifier and said first pass-phrase associated with a realm; (b) assigning a second identifier and a second pass-phrase to a second entity, said second identifier and said second pass-phrase associated with said realm; (c) storing said first identifier, said first pass-phrase, said second identifier, and said second pass-phrase at an authentication entity; (d) transmitting a first challenge from said second entity to said first entity; (e) transmitting a second challenge from said first entity to said second entity; (f) calculating a first response involving said realm, said first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, said first response calculated by said first entity; (g) calculating a second response involving said realm, said second identifier, said second pass-phrase, said second challenge, said first identifier, and said first challenge, said second response calculated by said second entity; (h) transmitting said first response to said second entity; (i) transmitting said realm, said first identifier, said first challenge, said first response, said second identifier, said second challenge, and said second response to said authentication entity; (j) verifying said first response, said verification involving said realm, said first identifier, said first pass-phrase, said first challenge, said first response, said second identifier, and said second challenge, and said verification performed by said authentication entity; (k) verifying said second response, said verification involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and said verification performed by said authentication entity; (l) generating a session key for said first entity and said second entity, said session key generated by said authentication entity; (m) obscuring said session key for said first entity, said obscuring involving said realm, said first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, and performed by said authentication entity; (n) obscuring said session key for said second entity, said obscuring involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and performed by said authentication entity.
Claim 12
Independent Claim
367 words
A method of authentication, said method comprising the steps of: (a) assigning a first identifier and a first pass-phrase to a first entity, said first identifier and said first pass-phrase associated with a realm; (b) assigning a second identifier and a second pass-phrase to a second entity, said second identifier and said second pass-phrase associated with said realm; (c) storing said first identifier, said first pass-phrase, said second identifier, and said second pass-phrase at an authentication entity; (d) transmitting a first challenge from said second entity to said first entity; (e) transmitting a second challenge from said first entity to said second entity; (f) calculating a first response involving said realm, said first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, said first response calculated by said first entity; (g) calculating a second response involving said realm, said second identifier, said second pass-phrase, said second challenge, said first identifier, and said first challenge, said second response calculated by said second entity; (h) transmitting said first response to said second entity; (i) transmitting said realm, said first identifier, said first challenge, said first response, said second identifier, said second challenge, and said second response to said authentication entity; (j) verifying said first response, said verification involving said realm, said first identifier, said first pass-phrase, said first challenge, said first response, said second identifier, and said second challenge, and said verification performed by said authentication entity; (k) verifying said second response, said verification involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and said verification performed by said authentication entity; (l) generating a session key for said first entity and said second entity, said session key generated by said authentication entity; (m) obscuring said session key for said first entity, said obscuring involving said realm, said first identifier, said first pass-phrase, said first challenge, said second identifier, and said second challenge, and performed by said authentication entity; (n) obscuring said session key for said second entity, said obscuring involving said realm, said first identifier, said first challenge, said second identifier, said second pass-phrase, and said second challenge, and performed by said authentication entity.
References Cited (Backward Citations)
US5369707A
Cited
US5604803A
Cited
US5535276A
Cited
US5550984A
Cited
US5638448A
Cited
US5751812A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-05-02 | 2003-11-01 | 2004-05-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-05-02 | 2007-11-01 | 2008-05-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-05-02 | 2011-11-01 | 2012-05-02 | $7700.00 | Window Closed / Lapsed |