US6088450A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Authentication system based on periodic challenge/response protocol
Assignee: Intel Corp
•
Filing: 1996-04-17
•
Granted: 2000-07-11
•
Expires: 2016-04-17
Abstract
Abstract A wireless authentication system to control an operating state of a node being a computer, door control mechanism or any muti-state product based on the proximity of an authorized user to the node. The wireless authentication system comprises a security device implemented within the computer and a user authentication token ("token") in possession of the authorized user. A Challenge/Response protocol is configured between the security device and the token. The first successful Challenge/Response message exchange between the security device and the token places the node in an operational state allowing the authorized user access to the contents and/or networked resources of the node. Later Challenge/Response message exchanges are set to occur periodically to check whether the authorized user possessing the token has left the node unattended thereby causing the node to be placed in a non-operational state.
Inventors
- 👤 Derek L. Davis
- 👤 Lionel Smith
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 20:38
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06F21/35; G07; G07C; G07C9/00; G07C9/20; G07C9/28; H04L63/00; H04L63/04; H04L63/0428; H04L63/0492; H04L63/08; H04L63/0853; H04W; H04W12/00; H04W12/06; H04W12/065; H04W12/068; H04W4/00; H04W4/80; G06F12/00; G06F12/14; G06F12/1408; G06F2221/00; G06F2221/21; G06F2221/2103
Claims Analysis
Total Claims: 55
Claim 1
Independent Claim
109 words
A method to control an operating state of a node, the method comprising: authenticating a token by a user inputting data into the token; authenticating a node by exchanging messages between the token possesed by the user and the node, periodically performing the message exchange to ascertain whether the token is within a predetermined distance from the node, and disabling at least one peripheral device of the node in order to place the node into a non-operational state if the token is determined to be outside a range established by the predetermined distance; and periodically authenticating the token by requiring the user to input the data into the token.
Claim 2
Independent Claim
109 words
A method to control an operating state of a node, the method comprising: authenticating a token by a user inputting data into the token; authenticating a node by exchanging messages between the token possesed by the user and the node, periodically performing the message exchange to ascertain whether the token is within a predetermined distance from the node, and disabling at least one peripheral device of the node in order to place the node into a non-operational state if the token is determined to be outside a range established by the predetermined distance; and periodically authenticating the token by requiring the user to input the data into the token.
Claim 3
Dependent Claim
12 words
The method according to claim 1, wherein the node includes a computer.
Claim 4
Dependent Claim
21 words
The method according to claim 2, wherein the at least one peripheral device includes one of a keyboard and a mouse.
Claim 5
Dependent Claim
28 words
The method according to claim 1, wherein the authentication of the token further includes entering of a subsequently verified alphanumeric password by the user to activate the token.
Claim 6
Dependent Claim
30 words
The method according to claim 4, wherein the periodic authentication of the token includes reloading of the alphanumeric password after a prescribed time period has elapsed to reactive the token.
Claim 7
Dependent Claim
31 words
The method according to claim 1, wherein the authentication of the token includes providing biometric data of the user and determining that the biometric data matches characteristics of an authorized user.
Claim 8
Dependent Claim
14 words
The method according to claim 1, wherein the node includes a door control mechanism.
Claim 9
Dependent Claim
18 words
The method according to claim 1, wherein the periodicity of the first and second message exchanges is programmable.
Claim 10
Dependent Claim
46 words
The method according to claim 1, wherein prior to exchanging the messages, the method comprises: transferring a query message from the node to the token; and transferring a response to the node by the token when the token is within the predetermined distance from the node.
Claim 11
Dependent Claim
50 words
The method according to claim 1, wherein prior to exchanging the messages, the method further comprises transferring a query message from the token to the node; and transferring a response message from the node to the token indicating that the node acknowledges that the token is within the predetermined distance.
Claim 12
Dependent Claim
24 words
The method according to claim 1 further comprising periodically authenticating the token to ensure that the token is being used by the authorized user.
Claim 13
Independent Claim
79 words
A method to control an operating state of a node, the method comprising: authenticating a user from loading alphanumeric data into a token and determining whether the alphanumeric data matches pre-stored alphanumeric data; exchanging at least a first and second messages between the token and the node, the node being placed in an operational state if the second message correctly responds to the first message; and periodically determining whether the token is within a predetermined distance from the node.
Claim 14
Independent Claim
79 words
A method to control an operating state of a node, the method comprising: authenticating a user from loading alphanumeric data into a token and determining whether the alphanumeric data matches pre-stored alphanumeric data; exchanging at least a first and second messages between the token and the node, the node being placed in an operational state if the second message correctly responds to the first message; and periodically determining whether the token is within a predetermined distance from the node.
Claim 15
Dependent Claim
93 words
The method according to claim 12, wherein the periodic determination comprises maintaining the node in the operational state if the token correctly responds due to a presence of the token within the predetermined distance; placing the node in a non-operational state if the token fails to respond due to the presence of the token being more than the predetermined distance away from the node or the token responds incorrectly; and periodically performing the authentication of the user to ascertain that the user in possession of the token is authorized to use the token.
Claim 16
Dependent Claim
18 words
The method according to claim 12, wherein the periodic determination comprises reloading the alphanumeric data by the user.
Claim 17
Dependent Claim
153 words
A wireless authentication system comprising: a computer including a peripheral device; a security device having a wireless transceiver, the security device, including a package containing both (i) a processing unit and (ii) a memory unit coupled to the processing unit, to generate a plurality of messages to be transmitted through the wireless transceiver, each of the plurality of messages is separately transmitted after a prescribed time interval has elapsed; and a token to establish a wireless communication link with the security device, to operate in combination with the security device to respond to the plurality of messages in order to place the computer in an operational state using the plurality of messages when the token is within a predetermined distance from the computer, to place the computer in a non-operational state by disabling the peripheral device, and to authenticate a user of the token by periodically notifying the user to input information therein.
Claim 18
Dependent Claim
153 words
A wireless authentication system comprising: a computer including a peripheral device; a security device having a wireless transceiver, the security device, including a package containing both (i) a processing unit and (ii) a memory unit coupled to the processing unit, to generate a plurality of messages to be transmitted through the wireless transceiver, each of the plurality of messages is separately transmitted after a prescribed time interval has elapsed; and a token to establish a wireless communication link with the security device, to operate in combination with the security device to respond to the plurality of messages in order to place the computer in an operational state using the plurality of messages when the token is within a predetermined distance from the computer, to place the computer in a non-operational state by disabling the peripheral device, and to authenticate a user of the token by periodically notifying the user to input information therein.
Claim 19
Dependent Claim
30 words
The wireless authentication system according to claim 15, wherein each of the plurality of messages generated by the security device is separately transmitted after the prescribed time interval has elapsed.
Claim 20
Dependent Claim
79 words
The wireless authentication system according to claim 16, wherein the token (i) initially receives a first message of the plurality of messages, (ii) generates a message in response to the first message for transmission to the security device to place the computer in the operational state and (iii) generates a message in response to each of the plurality of messages subsequent to the first message as long as the token remains within the predetermined distance from the security device.
Claim 21
Dependent Claim
31 words
The wireless authentication system according to claim 15, wherein the security device further includes a random number generator coupled to the processing unit, the random number generator contained in the package.
Claim 22
Dependent Claim
111 words
The wireless authentication system according to claim 15, wherein the token includes a second data bus; a wireless interface in communication with the second data bus, the wireless interface is further coupled to the wireless transceiver of the security device through the wireless communication link to receive the plurality of messages and to transmit a corresponding plurality of messages in response to the plurality of messages from the security device; a memory element coupled to the second data bus, the memory element to contain cryptographic information; and a processor coupled to the second data bus, the processor to generate the corresponding plurality of messages in response to the plurality of messages.
Claim 23
Dependent Claim
28 words
The wireless authentication system according to claim 19, wherein the token further includes a power source to provide power to at least the memory element and the processor.
Claim 24
Dependent Claim
20 words
The wireless authentication system according to claim 15, wherein the peripheral device includes one of a keyboard and a mouse.
Claim 25
Dependent Claim
115 words
A wireless authentication system comprising: a computer including a transmitter, a receiver, and a security device including a processing unit and a memory unit; and a token in bi-directional communications with the transmitter and receiver of the computer, the token operating in combination with the security device to place the computer in an operational state when the token is determined to be within a predetermined distance from the computer, and to place the computer in a non-operational state when the token is determined to be more than the predetermined distance from the computer, the token further authenticating its user by comparing input data received with a prestored master after a period of time has elapsed.
Claim 26
Dependent Claim
115 words
A wireless authentication system comprising: a computer including a transmitter, a receiver, and a security device including a processing unit and a memory unit; and a token in bi-directional communications with the transmitter and receiver of the computer, the token operating in combination with the security device to place the computer in an operational state when the token is determined to be within a predetermined distance from the computer, and to place the computer in a non-operational state when the token is determined to be more than the predetermined distance from the computer, the token further authenticating its user by comparing input data received with a prestored master after a period of time has elapsed.
Claim 27
Dependent Claim
37 words
The wireless authentication system according to claim 22, wherein the token includes a biometric measurement device to periodically authenticate a user of the token by inputting the data, being biometric data of the user, into the token.
Claim 28
Independent Claim
79 words
A method to control an operating state of a node, the method comprising: activating a token; placing a node into either (i) an operational state if the token is determined to be within a predetermined distance from the node, or (ii) an non-operational state when the token is determined to be located more than the predetermined distance from the node; and re-authenticating the user of the token by periodically requiring the user to input predetermined data into the token.
Claim 29
Independent Claim
79 words
A method to control an operating state of a node, the method comprising: activating a token; placing a node into either (i) an operational state if the token is determined to be within a predetermined distance from the node, or (ii) an non-operational state when the token is determined to be located more than the predetermined distance from the node; and re-authenticating the user of the token by periodically requiring the user to input predetermined data into the token.
Claim 30
Dependent Claim
39 words
The method according to claim 24, wherein the placing of the node into an operational state further includes responding to a query message from the node by the token returning a response that correctly responds to the query message.
Claim 31
Dependent Claim
20 words
The method according to claim 24, wherein the predetermined data input into the token includes a subsequently verified alphanumeric password.
Claim 32
Dependent Claim
33 words
The method according to claim 26, wherein the reauthentication of the user includes reloading of the alphanumeric password after a prescribed time period has elapsed in order to continue activation of the token.
Claim 33
Dependent Claim
20 words
The method according to claim 24, wherein the predetermined data input into the token includes biometric data of the user.
Claim 34
Dependent Claim
33 words
The method according to claim 24, wherein the activation of the token occurs after a user of the token is authenticated based on the predetermined data input into the token by the user.
Claim 35
Dependent Claim
14 words
The method according to claim 24, wherein the node includes a door control mechanism.
Claim 36
Dependent Claim
15 words
The method according to claim 24, wherein the periodicity in reauthenticating the user is programmable.
Claim 37
Dependent Claim
51 words
The method according to claim 24, wherein the placing of the node into an operational state further includes issuing a query message by the token to the node; and receiving a response message by the token indicating that the node acknowledges that the token within the predetermined distance from the node.
Claim 38
Independent Claim
91 words
A method to control an operating state of a node, the method comprising: activating a token upon authentication of the user by loading alphanumeric data into the token and determining that the alphanumeric data matches pre-stored alphanumeric data; determining a state of the node by exchanging at least a first message and a second message between the token and the node, the node being placed in an operational state if the second message correctly responds to the first message; and periodically authenticating that the user is in possession of the token.
Claim 39
Independent Claim
91 words
A method to control an operating state of a node, the method comprising: activating a token upon authentication of the user by loading alphanumeric data into the token and determining that the alphanumeric data matches pre-stored alphanumeric data; determining a state of the node by exchanging at least a first message and a second message between the token and the node, the node being placed in an operational state if the second message correctly responds to the first message; and periodically authenticating that the user is in possession of the token.
Claim 40
Dependent Claim
26 words
The method according to claim 33, wherein the periodic authentication of the node further determines that the token is within a predetermined distance from the node.
Claim 41
Dependent Claim
27 words
The method according to claim 33, wherein the periodic authentication of the node further determines that the user of the token is authorized to access the node.
Claim 42
Dependent Claim
24 words
The method according to claim 33, wherein the periodic authentication of the token comprises reloading data by the user for authentication of the user.
Claim 43
Dependent Claim
16 words
The-method according to claim 36, wherein the data is alphanumeric data for comparison with pre-stored data.
Claim 44
Dependent Claim
23 words
The method according to claim 36, wherein the data includes biometric data for comparison with pre-stored characteristics of at least one authorized user.
Claim 45
Dependent Claim
77 words
A token comprising: an interface to support wireless communications with a node; a memory element; and a processor coupled to the memory element and the interface, the processor to authenticate a user of the token by periodically notifying the user to input information therein and to exchange messages with the node in order to place the node in an non-operational state when the token is determined to be greater than a predetermined distance away from the node.
Claim 46
Dependent Claim
77 words
A token comprising: an interface to support wireless communications with a node; a memory element; and a processor coupled to the memory element and the interface, the processor to authenticate a user of the token by periodically notifying the user to input information therein and to exchange messages with the node in order to place the node in an non-operational state when the token is determined to be greater than a predetermined distance away from the node.
Claim 47
Dependent Claim
17 words
The token according to claim 39, wherein the wireless communications are messages in a radio frequency format.
Claim 48
Dependent Claim
26 words
The token according to claim 39, wherein the processor places the node in the non-operational state by disabling at least one peripheral device of the node.
Claim 49
Dependent Claim
16 words
The token according to claim 39, wherein the at least one peripheral device includes a keyboard.
Claim 50
Dependent Claim
91 words
A node comprising: a peripheral device; a security device having a wireless transceiver and in control of the node, the security device to transmit a plurality of messages, each of the plurality of messages is separately transmitted to a mobile token after a prescribed time interval has elapsed in order to determine whether the token is within a predetermined distance from the security device and to maintain the node in an operational state if the token is authenticated and is determined to be within a predetermined distance from the security device.
Claim 51
Dependent Claim
91 words
A node comprising: a peripheral device; a security device having a wireless transceiver and in control of the node, the security device to transmit a plurality of messages, each of the plurality of messages is separately transmitted to a mobile token after a prescribed time interval has elapsed in order to determine whether the token is within a predetermined distance from the security device and to maintain the node in an operational state if the token is authenticated and is determined to be within a predetermined distance from the security device.
Claim 52
Dependent Claim
38 words
The node according to claim 43, wherein the security device to alter the node from the operational state to a non-operational state if the token is determined to be farther from the security device than the predetermined distance.
Claim 53
Dependent Claim
23 words
The node according to claim 44, wherein the security device alters the node to the non-operational state if the token is not authenticated.
Claim 54
Dependent Claim
23 words
The node according to claim 43, wherein the security device alters the node to the non-operational state if the token is not authenticated.
Claim 55
Dependent Claim
9 words
The node according to claim 43 is a computer.
References Cited (Backward Citations)
US4271482A
Cited
US4310720A
Cited
US4260982A
Cited
US4638120A
Cited
US4467139A
Cited
US4905277A
Cited
US4860352A
Cited
US4907270A
Cited
US4811393A
Cited
US4817140A
Cited
US5140634A
Cited
US5218637A
Cited
US5005200A
Cited
US5097505A
Cited
US5131038A
Cited
US5144667A
Cited
US5280527A
Cited
US5323465A
Cited
US5648763A
Cited
US5293424A
Cited
US5377269A
Cited
US5355414A
Cited
US5381480A
Cited
US5432851A
Cited
US5583486A
Cited
US5539828A
Cited
US5796840A
Cited
US5805712A
Cited
US5568552A
Cited
US5473692A
Cited
US5633932A
Cited
US5805706A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-07-11 | 2004-01-10 | 2004-07-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-07-11 | 2008-01-10 | 2008-07-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-07-11 | 2012-01-10 | 2012-07-11 | $7700.00 | Window Closed / Lapsed |