US6480958B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Single-use passwords for smart paper interfaces
Assignee: Xerox Corp
•
Filing: 1998-06-01
•
Granted: 2002-11-12
•
Expires: 2018-06-01
Abstract
Abstract A security control system for remote computers includes a first local input/output device for entering a user name and regular password. A password generator ( 10 ) returns a single-use password which is an encrypted combination of the user name, a representation of the regular password, and date and time information. A second local input device is used for entering the single-use password. A remote computer ( 50 ) receives the single-use password. The remote computer ( 50 ) has a cache ( 76 ) of previously received single-use passwords. The remote computer ( 50 ) compares the single-use password to the cache ( 76 ) of previously received single-use passwords. If there is a match further access is denied. Also included is a decryption key ( 78 ) which is used to regenerate the user name, the representation of the regular password, and the date and time information. If the date and time is older than a predetermined date and time threshold further access is denied. The remote computer ( 50 ) also compares the user name and the representation of the regular password to a stored list ( 86 ). If there is no match further access is again denied.
Inventors
- 👤 Steven J. Harrington
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-10 01:47
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31
Claims Analysis
Total Claims: 36
Claim 1
Independent Claim
280 words
A security control system for remote computers comprising: a first local input/output device for entering a user name and regular password; a password generator accessed by the first local input/output device such that the password generator, in response to the user name and regular password, returns to the first input/output device a single-use password which is an encrypted combination of the user name, a representation of the regular password, and date and time information corresponding to the date and time the user name and regular password were entered; a second local input device for entering the single-use password; and, a remote computer which receives the single-use password, the remote computer having; a cache of previously received single-use passwords, wherein the remote computer compares the single-use password to the cache of previously received single-use passwords such that if there is a match further access to the remote computer is denied; a decryption key, wherein the remote computer uses the decryption key to generate the user name, the representation of the regular password, and the date and time information from the single-use password; a predetermined date and time threshold, wherein the remote computer compares the date and time generated by the decryption key to the predetermined date and time threshold such that if the date and time generated by the decryption key is older further access to the remote computer is denied; and, a list of representations of regular passwords with corresponding user names, wherein the remote computer compares the user name and the representation of the regular password generated by the decryption key to the list such that if there is no match further access to the remote computer is denied.
Claim 2
Dependent Claim
280 words
A security control system for remote computers comprising: a first local input/output device for entering a user name and regular password; a password generator accessed by the first local input/output device such that the password generator, in response to the user name and regular password, returns to the first input/output device a single-use password which is an encrypted combination of the user name, a representation of the regular password, and date and time information corresponding to the date and time the user name and regular password were entered; a second local input device for entering the single-use password; and, a remote computer which receives the single-use password, the remote computer having; a cache of previously received single-use passwords, wherein the remote computer compares the single-use password to the cache of previously received single-use passwords such that if there is a match further access to the remote computer is denied; a decryption key, wherein the remote computer uses the decryption key to generate the user name, the representation of the regular password, and the date and time information from the single-use password; a predetermined date and time threshold, wherein the remote computer compares the date and time generated by the decryption key to the predetermined date and time threshold such that if the date and time generated by the decryption key is older further access to the remote computer is denied; and, a list of representations of regular passwords with corresponding user names, wherein the remote computer compares the user name and the representation of the regular password generated by the decryption key to the list such that if there is no match further access to the remote computer is denied.
Claim 3
Dependent Claim
24 words
The security control system according to claim 1 , wherein the first input/output device is a telephone and the password generator is remotely located.
Claim 4
Dependent Claim
25 words
The security control system according to claim 2 , wherein the user name and regular password are entered via a numeric keypad of the telephone.
Claim 5
Dependent Claim
32 words
The security control system according to claim 2 , wherein the user name and regular password are entered verbally and are interpreted via a voice recognition device included in the password generator.
Claim 6
Dependent Claim
21 words
The security control system according to claim 2 , wherein the single-use password returned by the password generator is returned verbally.
Claim 7
Dependent Claim
31 words
The security control system according to claim 2 , wherein the single-use password returned by the password generator is returned in hard-copy format via one of a fax and a printer.
Claim 8
Dependent Claim
34 words
The security control system according to claim 1 , wherein previously entered single-use passwords are deleted from the cache when their date and time information is older than the predetermined date and time threshold.
Claim 9
Dependent Claim
22 words
The security control system according to claim 1 , wherein representations of the regular passwords are the same as the regular passwords.
Claim 10
Dependent Claim
22 words
The security control system according to claim 1 , wherein representations of the regular passwords are encrypted versions of the regular passwords.
Claim 11
Dependent Claim
31 words
The security control system according to claim 1 , wherein the single-use password is entered by having the second local input device read the single-use password from a hard copy thereof.
Claim 12
Dependent Claim
24 words
The security control system according to claim 10 , wherein the second local input device includes one of a fax machine and a scanner.
Claim 13
Dependent Claim
191 words
Method of controlling access to a remote computer from a local device comprising: (a) entering information including a user name and a regular password into a password generator; (b) combining the entered information with date and time information to generate combined data; (c) encrypting the combined data to generate a single-use password; (d) inputting the single-use password into the local device; (e) determining if the single-use password had been previously input; (i) denying access to the remote computer if it is determined that the single-use password had been previously input; (f) decrypting the single-use password to generate the combined data; (g) determining if the date and time information from the combined data is older than a predetermined threshold; (i) denying access to the remote computer if it is determine that the date and time information from the combined data is older than the predetermined threshold; (h) determining if entered information from the combined data is valid; (i) denying access to the remote computer if it is determined that entered information from the combined data is not valid; and, (i) granting access to the remote computer if access is not otherwise denied.
Claim 14
Dependent Claim
191 words
Method of controlling access to a remote computer from a local device comprising: (a) entering information including a user name and a regular password into a password generator; (b) combining the entered information with date and time information to generate combined data; (c) encrypting the combined data to generate a single-use password; (d) inputting the single-use password into the local device; (e) determining if the single-use password had been previously input; (i) denying access to the remote computer if it is determined that the single-use password had been previously input; (f) decrypting the single-use password to generate the combined data; (g) determining if the date and time information from the combined data is older than a predetermined threshold; (i) denying access to the remote computer if it is determine that the date and time information from the combined data is older than the predetermined threshold; (h) determining if entered information from the combined data is valid; (i) denying access to the remote computer if it is determined that entered information from the combined data is not valid; and, (i) granting access to the remote computer if access is not otherwise denied.
Claim 15
Dependent Claim
45 words
The method of claim 12 , wherein the step of combining further includes: encrypting the regular password prior to combining such that the combined data generated includes the entered user name, an encrypted version of the entered regular password, and the date and time information.
Claim 16
Dependent Claim
49 words
The method of claim 13 , wherein the step of determining if entered information from the combined data is valid further includes: comparing the entered user name and encrypted version of the regular password against a list of valid user names and corresponding valid encrypted versions of regular passwords.
Claim 17
Dependent Claim
22 words
The method of claim 12 , wherein the step of inputting further includes: reading the single-use password from a hard copy thereof.
Claim 18
Dependent Claim
33 words
The method of claim 12 , wherein the step of determining if the single-use password had been previously input further includes: comparing the single-use password against a cache of previously input single-use passwords.
Claim 19
Dependent Claim
29 words
The method of claim 16 , further including: deleting from the cache of previously input single-use passwords those which have time and date information older than the predetermined threshold.
Claim 20
Dependent Claim
61 words
The method of claim 12 , wherein the step of determining if enter information from the combined data is valid further includes: encrypting the entered regular password to generate an encrypted version thereof; and, comparing the entered user name and encrypted version of the regular password against a list of valid user names and corresponding valid encrypted versions of regular passwords.
Claim 21
Dependent Claim
27 words
The method of claim 12 , wherein the step of entering information further includes: entering information via a telephone to a remote location housing the password generator.
Claim 22
Dependent Claim
105 words
An access control system for remote devices comprising: a first local input/output device for entering authorization information; a password generator accessed by the first input/output device such that the password generator, in response to the authorization information, returns to the first input/output device a limited-use password which is an encrypted version of a combination of the authorization information with instance-dependent information; a second local input device for entering the limited-use password; and, an access controller which receives the limited-use password, wherein the access controller interprets and determines validity of the limited-use password such that access to a remote device is denied for invalid limited-use passwords.
Claim 23
Dependent Claim
105 words
An access control system for remote devices comprising: a first local input/output device for entering authorization information; a password generator accessed by the first input/output device such that the password generator, in response to the authorization information, returns to the first input/output device a limited-use password which is an encrypted version of a combination of the authorization information with instance-dependent information; a second local input device for entering the limited-use password; and, an access controller which receives the limited-use password, wherein the access controller interprets and determines validity of the limited-use password such that access to a remote device is denied for invalid limited-use passwords.
Claim 24
Dependent Claim
23 words
The access control system according to claim 20 , wherein the remote device is one of a printer, a copier, and a computer.
Claim 25
Dependent Claim
26 words
The access control system according to claim 20 , wherein the limited-use password is entered by having the second input device read a hard copy thereof.
Claim 26
Dependent Claim
23 words
The access control system according to claim 22 , wherein the second input device is one of a fax machine and a scanner.
Claim 27
Dependent Claim
24 words
The access control system according to claim 20 , wherein the first input/output device is a computer and the password generator is locally located.
Claim 28
Dependent Claim
24 words
The access control system according to claim 20 , wherein the first input/output device is a telephone and the password generator is remotely located.
Claim 29
Dependent Claim
22 words
The access control system according to claim 25 , wherein the authorization information is entered via a numeric keypad of the telephone.
Claim 30
Dependent Claim
29 words
The access control system according to claim 25 , wherein the authorization information is entered verbally and is interpreted via a voice recognition device included in the password generator.
Claim 31
Dependent Claim
20 words
The access control system according to claim 20 , wherein the authorization information includes a user name and system password.
Claim 32
Dependent Claim
30 words
The access control system according to claim 28 , wherein the instance-dependent information includes date and time information corresponding to a date and time when the authorization information is entered.
Claim 33
Dependent Claim
48 words
The access control system according to claim 29 , wherein the encrypted version of the combination of the authorization information with the instance-dependent information is an encrypted version of a combination of the user name, an encrypted version of the system password, and the date and time information.
Claim 34
Dependent Claim
27 words
The access control system according to claim 30 , wherein the access controller uses the date and time information to determine if the limited-use password is expired.
Claim 35
Dependent Claim
41 words
The access control system according to claim 20 , wherein the limited-use password is valid for a single use and the access controller uses a cache of previously received limited-use passwords to determine if the limiteduse password has already been entered.
Claim 36
Dependent Claim
50 words
The access control system according to claim 20 , wherein the limited-use password is valid for a predetermined number of uses and the access controller uses a cache of previously received limited-use passwords to determine if the limited-use password has already been entered more than the predetermined number of times.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-11-11 | 2006-05-13 | 2006-11-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-11-11 | 2010-05-13 | 2010-11-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-11-11 | 2014-05-13 | 2014-11-12 | $7700.00 | Window Closed / Lapsed |