Patent US6189098B1 successfully refreshed from Google Patents.
US6189098B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Client/server protocol for proving authenticity
Assignee: EMC Corp
•
Filing: 2000-03-16
•
Granted: 2001-02-13
•
Expires: 2020-03-16
Abstract
Abstract A protocol for establishing the authenticity of a client to a server in an electronic transaction by encrypting a certificate with a key known only to the client and the server. The trust of the server, if necessary, can be established by a public key protocol. The client generates and sends over a communications channel a message containing at least a part of a certificate encrypted with the server's public key or a secret session key. The server receives and processes the message to recover at least part of the certificate, verifies and accepts it as proof of the client's authenticity.
Inventors
- 👤 Burton S. Kaliski, Jr.
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 02:09
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06Q; G06Q20/00; G06Q20/04; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/382; G06Q20/3821; G06Q20/38215; G06Q20/40; G06Q20/409; G06Q20/4097; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H04L63/08; H04L63/0823; H04L9/00; H04L9/08; H04L9/0816; H04L9/0838; H04L9/0841; H04L9/32; H04L9/3247; H04L9/3263; H04L9/3268; H04L9/3297; H04L9/50; G06F2211/00; G06F2211/007; G06F2211/008; G06F2211/009; H04L2209/00; H04L2209/30; H04L2209/56
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
61 words
A method for authenticating a client by a server, comprising the steps of: (a) receiving by the client from a credential issuer a digital credential; (b) transmitting credential verification information from the client to the server over an encrypted communications channel; and (c) authenticating the client based on the validity of the credential and in response to the credential verification information.
Claim 2
Independent Claim
61 words
A method for authenticating a client by a server, comprising the steps of: (a) receiving by the client from a credential issuer a digital credential; (b) transmitting credential verification information from the client to the server over an encrypted communications channel; and (c) authenticating the client based on the validity of the credential and in response to the credential verification information.
Claim 3
Dependent Claim
30 words
The method of claim 1 wherein step (b) comprises transmitting credential verification information from the client to the server over an encrypted communications channel, the client comprising a smart card.
Claim 4
Dependent Claim
30 words
The method of claim 1 wherein step (b) comprises transmitting credential verification information from the client to the server over an encrypted communications channel, the client comprising a desk-top computer.
Claim 5
Dependent Claim
51 words
The method of claim 1 wherein step (b) comprises transmitting credential verification information from the client to the server over an encrypted communications channel, the client comprising at least one client chosen from the set of a portable telephone, a notebook computer, a handheld computing device, and a home banking terminal.
Claim 6
Dependent Claim
32 words
The method of claim 1 wherein step (b) comprises transmitting credential verification information from the client to the server over an encrypted communications channel, the communications channel comprising a wireless communications channel.
Claim 7
Dependent Claim
45 words
The method of claim 1 , further comprising the steps of: providing, by a certificate issuer, a certificate comprising a public key of the server; receiving, by the client, the certificate; and verifying, by the client, the certificate comprising the public key of the server.
Claim 8
Dependent Claim
16 words
The method of claim 6 wherein the credential issuer and the certificate issuer are separate entities.
Claim 9
Dependent Claim
55 words
The method of claim 1 , further comprising, before step (a), the step of initiating, by the client, a login session with the credential issuer; and wherein step (a) comprises receiving a credential that is valid for a relatively short validity period; and wherein step (b) comprises transmitting credential verification information during the validity period.
Claim 10
Dependent Claim
61 words
An authentication system, comprising: a credential issuer providing a digital credential; a client receiving the credential from the credential issuer and transmitting credential verification information over an encrypted communications channel; and a server receiving credential verification information over the encrypted communications channel and authenticating the client based on the validity of the credential and in response to the credential verification information.
Claim 11
Dependent Claim
61 words
An authentication system, comprising: a credential issuer providing a digital credential; a client receiving the credential from the credential issuer and transmitting credential verification information over an encrypted communications channel; and a server receiving credential verification information over the encrypted communications channel and authenticating the client based on the validity of the credential and in response to the credential verification information.
Claim 12
Dependent Claim
12 words
The system of claim 9 wherein the client comprises a smart card.
Claim 13
Dependent Claim
12 words
The system of claim 9 wherein the client comprises a desktop computer.
Claim 14
Dependent Claim
32 words
The system of claim 9 wherein the client comprises at least one client selected from the set of a portable telephone, a notebook computer, a handheld computer, and a home banking terminal.
Claim 15
Dependent Claim
16 words
The system of claim 9 wherein the client receives and transmits over a wireless communications channel.
Claim 16
Dependent Claim
32 words
The system of claim 9 further comprising: a certificate issuer providing a certificate comprising a server's public key; and wherein the client receives and verifies the certificate comprising the server's public key.
Claim 17
Dependent Claim
15 words
The system of claim 9 wherein the credential issuer and certificate issuer are different entities.
Claim 18
Dependent Claim
42 words
The system of claim 9 wherein: the client receives the credential in response to a login session initiated by the client; the credential is valid for a relatively short validity period; and the credential verification information is transmitted during the validity period.
Claim 19
Dependent Claim
66 words
A computer readable medium comprising instructions for execution on a processor, the instructions when executed direct the processor to receive credential verification information from a client over an encrypted communications channel, the client having received a digital credential from a credential issuer, and direct the processor to authenticate the client based on the validity of the digital credential and in response to the credential verification information.
Claim 20
Dependent Claim
66 words
A computer readable medium comprising instructions for execution on a processor, the instructions when executed direct the processor to receive credential verification information from a client over an encrypted communications channel, the client having received a digital credential from a credential issuer, and direct the processor to authenticate the client based on the validity of the digital credential and in response to the credential verification information.
References Cited (Backward Citations)
US4309569A
Cited
US4755940A
Cited
EP0148960A1
Cited
US4885778A
Cited
EP0678836A1
Cited
US5005200A
Cited
US5224163A
Cited
US5428684A
Cited
US5222140A
Cited
WO1993010509A1
Cited
US5261002A
Cited
US5367573A
Cited
US5444780A
Cited
US5625693A
Cited
US6085320A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-02-13 | 2004-08-14 | 2005-02-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-02-13 | 2008-08-14 | 2009-02-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-02-13 | 2012-08-14 | 2013-02-13 | $7700.00 | Window Closed / Lapsed |