US6173400B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Methods and systems for establishing a shared secret using an authentication token
Assignee: Oracle America Inc
•
Filing: 1998-07-31
•
Granted: 2001-01-09
•
Expires: 2018-07-31
Abstract
Abstract A method and system for establishing a shared secret between a plurality of devices using an authentication token. An authentication token is used to establish a shared secret between a local device and a remote device to provide user authentication, data encryption, and integrity protection. The authentication token may be used in a variety of ways to authenticate a user. First, a time-synchronized authentication token can generate a first character string that is communicated to a workstation. The workstation can manipulate the first character string to generate a second character string and send the second character string to a server. The server then compares the second character string with a plurality of possible matching character string values and determines the first character string. In another implementation, a challenge from a server can be received and processed by a challenge-response authentication token to generate a character string. The generated character string is then communicated to the workstation to establish a shared secret. A smart card may also be used to establish a shared secret between a local device and a remote device using similar techniques.
Inventors
- 👤 Radia J. Perlman
- 👤 Stephen R. Hanna
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 01:26
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0853; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; H04L9/0844; H04L9/12; H04L9/32; H04L9/3226; H04L9/3234; H04L9/3271; G06F2221/00; G06F2221/21; G06F2221/2103
Claims Analysis
Total Claims: 82
Claim 1
Independent Claim
100 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; generating a first character string on the authentication token; communicating the first character string to a local device; creating a second character string from the first character string on the local device; sending the second character string to a remote device; disambiguating the second character string from a plurality of predicted character string values; and utilizing at least one of the plurality of predicted character string values to establish a shared secret between the local device and the remote device.
Claim 2
Independent Claim
100 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; generating a first character string on the authentication token; communicating the first character string to a local device; creating a second character string from the first character string on the local device; sending the second character string to a remote device; disambiguating the second character string from a plurality of predicted character string values; and utilizing at least one of the plurality of predicted character string values to establish a shared secret between the local device and the remote device.
Claim 3
Dependent Claim
31 words
The method of claim 1 further comprising the step of implementing a shared secret key exchange protocol using the first character string to establish a shared secret with the remote device.
Claim 4
Dependent Claim
41 words
The method of claim 2 wherein the implementing step includes the steps of: disambiguating the first character string from a plurality of predicted character string values; and implementing the shared secret key exchange protocol after the first character string is disambiguated.
Claim 5
Dependent Claim
41 words
The method of claim 2 wherein the implementing step includes the steps of: disambiguating the first character string from a plurality of predicted character string values; and implementing the shared secret key exchange protocol while the first character string is disambiguated.
Claim 6
Dependent Claim
43 words
The method of claim 2 wherein the implementing step includes the steps of: implementing the shared secret key exchange protocol; and disambiguating the first character string from a plurality of predicted character string values after the shared secret key exchange protocol is implemented.
Claim 7
Dependent Claim
39 words
The method of claim 2 wherein the implementing step includes the step of implementing a shared secret key exchange protocol using the first character string and a personal identification number to establish a shared secret with the remote device.
Claim 8
Dependent Claim
27 words
The method of claim 1 wherein the creating step includes the step of implementing a function of the first character string to generate the second character string.
Claim 9
Independent Claim
17 words
The method of claim I wherein the providing step includes the step of providing a smart card.
Claim 10
Dependent Claim
23 words
The method of claim 1 further comprising the steps of proving to the remote device that the local device has the shared secret.
Claim 11
Dependent Claim
77 words
The method of claim 9 wherein the proving step includes the steps of: communicating a third character string from the remote device to the local device; implementing a function on the local device using at least one of the shared secret and the third character string to produce an output; sending the output to the remote device; and comparing the output with a predicted character string value to prove that the local device has the shared secret.
Claim 12
Dependent Claim
23 words
The method of claim 1 further comprising the step of proving to the local device that the remote device has the shared secret.
Claim 13
Dependent Claim
77 words
The method of claim 11 wherein the proving step includes the steps of: communicating a third character string from the local device to the remote device; implementing a function on the remote device using at least one of the shared secret and the third character string to produce an output; sending the output to the local device; and comparing the output with a predicted character string value to prove that the remote device has the shared secret.
Claim 14
Dependent Claim
28 words
The method of claim 1 wherein the creating step includes the step of creating the second character string using the first character string and a personal identification number.
Claim 15
Dependent Claim
28 words
The method of claim 1 wherein the creating step includes the step of implementing a hash function to create the second character string from the first character string.
Claim 16
Dependent Claim
26 words
The method of claim 1 wherein the sending step includes the step of sending only a portion of the second character string to the remote device.
Claim 17
Dependent Claim
43 words
The method of claim 1 further comprising the step of communicating an instruction from the remote device to the local device for information required to disambiguate the second character string from the at least one of a plurality of predicted character string values.
Claim 18
Dependent Claim
42 words
The method of claim 16 further comprising the step of generating an output value on the workstation, in response to the instruction, used to disambiguate the second character string from the at least one of a plurality of predicted character string values.
Claim 19
Dependent Claim
18 words
The method of claim 1 further comprising the step of activating the authentication token with an activation code.
Claim 20
Dependent Claim
30 words
The method of claim 1 wherein the providing step includes the step of providing an authentication token that is approximately time-synchronized with at least one of the plurality of devices.
Claim 21
Independent Claim
72 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; communicating a first character string from a remote device to the authentication token; processing the first character string using the authentication token to generate a second character string; sending the second character string to a local device; and utilizing the second character string to establish a shared secret with a remote device.
Claim 22
Independent Claim
72 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; communicating a first character string from a remote device to the authentication token; processing the first character string using the authentication token to generate a second character string; sending the second character string to a local device; and utilizing the second character string to establish a shared secret with a remote device.
Claim 23
Dependent Claim
18 words
The method of claim 20 further comprising the step of activating the authentication token with an activation code.
Claim 24
Dependent Claim
28 words
The method of claim 20 wherein the sending step includes the step of communicating a personal identification number along with the second character string to the local device.
Claim 25
Dependent Claim
30 words
The method of claim 20 wherein the utilizing step includes the step of implementing a shared secret key exchange protocol with the second character string to establish a shared secret.
Claim 26
Dependent Claim
35 words
The method of claim 20 wherein the utilizing step includes the step of implementing a shared secret key exchange protocol with the second character string and a personal identification number to establish a shared secret.
Claim 27
Independent Claim
35 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; and utilizing the authentication token to establish a shared secret among the plurality of devices.
Claim 28
Independent Claim
35 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing an authentication token; and utilizing the authentication token to establish a shared secret among the plurality of devices.
Claim 29
Dependent Claim
17 words
The method of claim 25 wherein the providing step includes the step of providing a smart card.
Claim 30
Independent Claim
42 words
A system for establishing a shared secret among a plurality of devices, comprising: an authentication token; a local device; and a remote device, wherein the authentication token is used to establish a shared secret between the local device and the remote device.
Claim 31
Independent Claim
42 words
A system for establishing a shared secret among a plurality of devices, comprising: an authentication token; a local device; and a remote device, wherein the authentication token is used to establish a shared secret between the local device and the remote device.
Claim 32
Dependent Claim
16 words
The system of claim 27 wherein the authentication token is approximately time-synchronized with the remote device.
Claim 33
Dependent Claim
12 words
The system of claim 27 wherein the authentication token includes a processor.
Claim 34
Dependent Claim
15 words
The system of claim 27 wherein the authentication token is configured to receive an input.
Claim 35
Dependent Claim
15 words
The system of claim 27 wherein the authentication token is configured to produce an output.
Claim 36
Dependent Claim
12 words
The system of claim 27 wherein the authentication token includes a display.
Claim 37
Dependent Claim
20 words
The system of claim 32 wherein the authentication token includes means for generating a character string viewable on the display.
Claim 38
Dependent Claim
12 words
The system of claim 27 wherein the local device is a workstation.
Claim 39
Dependent Claim
12 words
The system of claim 27 wherein the remote device is a server.
Claim 40
Dependent Claim
13 words
The system of claim 27 wherein the authentication token is a smart card.
Claim 41
Independent Claim
105 words
A system for establishing a shared secret among a plurality of devices, comprising: a local device; a remote device; an authentication token; means for generating a first character string on the authentication token; means for communicating the first character string to the local device; means for manipulating the first character string using a predetermined function to generate a second character string; means for sending the second character string to the remote device; and means for matching the second character string with at least one of a plurality of predicted character string values to establish a shared secret between the local device and the remote device.
Claim 42
Independent Claim
105 words
A system for establishing a shared secret among a plurality of devices, comprising: a local device; a remote device; an authentication token; means for generating a first character string on the authentication token; means for communicating the first character string to the local device; means for manipulating the first character string using a predetermined function to generate a second character string; means for sending the second character string to the remote device; and means for matching the second character string with at least one of a plurality of predicted character string values to establish a shared secret between the local device and the remote device.
Claim 43
Dependent Claim
14 words
The system of claim 37 wherein the authentication token is an approximate time-synchronized token.
Claim 44
Dependent Claim
30 words
The system of claim 37 wherein the manipulating means include means for executing a hash function using the first character string as an input to produce the second character string.
Claim 45
Dependent Claim
35 words
The system of claim 37 wherein the manipulating means include means for executing a hash function using the first character string and a personal identification number as an input to produce the second character string.
Claim 46
Dependent Claim
26 words
The system of claim 37 further comprising means for implementing a shared secret key exchange protocol using the first character string to produce a shared secret.
Claim 47
Dependent Claim
34 words
The system of claim 41 wherein the implementing means includes means for implementing a shared secret key exchange protocol using the first character string and a personal identification number to produce a shared secret.
Claim 48
Dependent Claim
29 words
The system of claim 37 wherein the sending means include means for sending less than a total number of bits of the second character string to the remote device.
Claim 49
Dependent Claim
42 words
The system of claim 37 further comprising means for transferring an instruction from the remote device to the local device for information required to disambiguate the second character string from the at least one of a plurality of predicted character string values.
Claim 50
Dependent Claim
38 words
The system of claim 44 wherein the transferring means include means for providing a constant with the instruction from the remote device to the local device that is processed with the second character string using a hash algorithm.
Claim 51
Dependent Claim
20 words
The system of claim 37 wherein the generating means includes means for activating the authentication token with an activation code.
Claim 52
Independent Claim
86 words
A system for establishing a shared secret among a plurality of devices, comprising: a local device; a remote device; an authentication token; means for determining a first character string using the remote device; means for sending the first character string to the authentication token; means for processing the first character string to produce a second character string; and means for communicating the second character string into the local device such that the remote device and the local device share the second character string as a secret.
Claim 53
Independent Claim
86 words
A system for establishing a shared secret among a plurality of devices, comprising: a local device; a remote device; an authentication token; means for determining a first character string using the remote device; means for sending the first character string to the authentication token; means for processing the first character string to produce a second character string; and means for communicating the second character string into the local device such that the remote device and the local device share the second character string as a secret.
Claim 54
Dependent Claim
13 words
The system of claim 47 wherein the authentication token is a challenge-response token.
Claim 55
Dependent Claim
17 words
The system of claim 47 further comprising means for entering an activation code into the authentication token.
Claim 56
Dependent Claim
18 words
The system of claim 47 further comprising means for entering a personal identification number into the local device.
Claim 57
Dependent Claim
21 words
The system of claim 47 further comprising means for implementing a shared secret key exchange protocol using the second character string.
Claim 58
Independent Claim
47 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; communicating data from the smart card to a local device; and utilizing the data to establish a shared secret between the local device and a remote device.
Claim 59
Independent Claim
47 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; communicating data from the smart card to a local device; and utilizing the data to establish a shared secret between the local device and a remote device.
Claim 60
Dependent Claim
18 words
The method of claim 52 further comprising the step of activating the smart card with an activation code.
Claim 61
Dependent Claim
14 words
The method of claim 53 wherein the activation code is a personal identification number.
Claim 62
Dependent Claim
12 words
The method of claim 53 wherein the activation code is a biometric.
Claim 63
Dependent Claim
21 words
The method of claim 52 wherein the providing step includes the step of providing a smart card with an internal clock.
Claim 64
Dependent Claim
22 words
The method of claim 52 wherein the providing step includes the step of providing a smart card that utilizes an external clock.
Claim 65
Independent Claim
59 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; establishing a shared secret between the smart card and a remote device; and communicating the shared secret from the smart card to a local device to establish the shared secret between the local device, smart card, and remote device.
Claim 66
Independent Claim
59 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; establishing a shared secret between the smart card and a remote device; and communicating the shared secret from the smart card to a local device to establish the shared secret between the local device, smart card, and remote device.
Claim 67
Dependent Claim
46 words
The method of claim 58 wherein the establishing step includes the steps of: generating a first character string on the smart card; communicating the first character string to the remote device; and utilizing the first character string to establish a shared secret with the remote device.
Claim 68
Dependent Claim
48 words
The method of claim 58 wherein the establishing step includes the steps of: communicating a first character string from the remote device to the smart card; and processing the first character string on the smart card to generate a second character string used to establish a shared secret.
Claim 69
Dependent Claim
18 words
The method of claim 58 further comprising the step of activating the smart card with an activation code.
Claim 70
Dependent Claim
14 words
The method of claim 61 wherein the activation code is a personal identification number.
Claim 71
Dependent Claim
12 words
The method of claim 61 wherein the activation code is a biometric.
Claim 72
Dependent Claim
21 words
The method of claim 58 wherein the providing step includes the step of providing a smart card with an internal clock.
Claim 73
Dependent Claim
22 words
The method of claim 58 wherein the providing step includes the step of providing a smart card that utilizes an external clock.
Claim 74
Independent Claim
51 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; establishing a shared secret between the smart card and a remote device; and utilizing the smart card and the shared secret in transactions between the remote device and a local device.
Claim 75
Independent Claim
51 words
A method for establishing a shared secret among a plurality of devices, comprising the steps of: providing a smart card; establishing a shared secret between the smart card and a remote device; and utilizing the smart card and the shared secret in transactions between the remote device and a local device.
Claim 76
Dependent Claim
46 words
The method of claim 66 wherein the establishing step includes the steps of: generating a first character string on the smart card; communicating the first character string to the remote device; and utilizing the first character string to establish a shared secret with the remote device.
Claim 77
Dependent Claim
48 words
The method of claim 66 wherein the establishing step includes the steps of: communicating a first character string from the remote device to the smart card; and processing the first character string on the smart card to generate a second character string used to establish a shared secret.
Claim 78
Dependent Claim
18 words
The method of claim 66 further comprising the step of activating the smart card with an activation code.
Claim 79
Dependent Claim
14 words
The method of claim 69 wherein the activation code is a personal identification number.
Claim 80
Dependent Claim
12 words
The method of claim 69 wherein the activation code is a biometric.
Claim 81
Dependent Claim
21 words
The method of claim 66 wherein the providing step includes the step of providing a smart card with an internal clock.
Claim 82
Dependent Claim
22 words
The method of claim 66 wherein the providing step includes the step of providing a smart card that utilizes an external clock.
References Cited (Backward Citations)
US4924378A
Cited
US5371692A
Cited
US5241599A
Cited
US5448045A
Cited
EP0566811A1
Cited
US5491752A
Cited
US5455953A
Cited
US5416842A
Cited
US5602918A
Cited
US5892902A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-01-09 | 2004-07-10 | 2005-01-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-01-09 | 2008-07-10 | 2009-01-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-01-09 | 2012-07-10 | 2013-01-09 | $7700.00 | Window Closed / Lapsed |