US6487667B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
System for remote pass-phrase authentication
Assignee: Cranberry Properties LLC
•
Filing: 2000-04-14
•
Granted: 2002-11-26
•
Expires: 2020-04-14
Abstract
Abstract A system and method are disclosed for authenticating users and services communicating over an insecure network. Each user and service has a pass-phrase used for authentication. However, the pass-phrases are not revealed during the authentication process as challenge-response techniques are used to keep the pass-phrase secret. In addition, the users and services do not need to know nor do they learn each other's pass-phrases making the process useful in a distributed environment. Pass-phrases are known by an authentication entity with which the service communicates to authenticate both users and services. Users may have identities in and services may support a number of realms, each of which may be viewed as large collection of users (e.g., CompuServe.com). Users choose the realm in which they would like to be authenticated. In one embodiment of the present invention, the system and method are adapted for use with the HyperText Transfer Protocol of the World Wide Web so that secure transactions may be accomplished between users and services communicating via the Internet.
Inventors
- 👤 Gary S. Brown
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 15:28
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0407; H04L63/0414; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H04L63/0428; H04L63/0435; H04L63/06; H04L63/062; H04L63/08; H04L9/00; H04L9/32; H04L9/3226; H04L9/3271; H04L9/40; G06F2221/00; G06F2221/21; G06F2221/2103; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 46
Claim 1
Independent Claim
84 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity selected according to the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase.
Claim 2
Independent Claim
84 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity selected according to the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase.
Claim 3
Dependent Claim
13 words
The system of claim 1 wherein the first identifier is a null name.
Claim 4
Dependent Claim
26 words
The system of claim 1 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with challenges and responses.
Claim 5
Dependent Claim
22 words
The system of claim 1 wherein the authentication entity is adapted to perform reauthentication for the first entity and the second entity.
Claim 6
Dependent Claim
12 words
The system of claim 1 wherein the first entity is a user.
Claim 7
Dependent Claim
12 words
The system of claim 1 wherein the first entity is a service.
Claim 8
Independent Claim
58 words
A system for authentication comprising: a first entity in a realm; a second entity in the realm; an authentication entity selected according to the realm and adapted to authenticate the first entity and the second entity using challenges and responses in accordance with an identifier and a pass-phrase for each of the first entity and the second entity.
Claim 9
Independent Claim
58 words
A system for authentication comprising: a first entity in a realm; a second entity in the realm; an authentication entity selected according to the realm and adapted to authenticate the first entity and the second entity using challenges and responses in accordance with an identifier and a pass-phrase for each of the first entity and the second entity.
Claim 10
Dependent Claim
12 words
The system of claim 7 wherein the first entity is a user.
Claim 11
Dependent Claim
12 words
The system of claim 7 wherein the first entity is a service.
Claim 12
Dependent Claim
12 words
The system of claim 7 wherein the realm is an online service.
Claim 13
Dependent Claim
19 words
The system of claim 7 wherein the realm is set of user names and pass-phrases at a Web server.
Claim 14
Dependent Claim
22 words
The system of claim 7 wherein the authentication entity is adapted to perform reauthentication for the first entity and the second entity.
Claim 15
Dependent Claim
22 words
The system of claim 7 wherein the first entity, the second entity, and the authentication entity communicate via a global computer network.
Claim 16
Dependent Claim
118 words
An authentication method comprising the steps of: (a) associating a first entity with a first identifier and a first pass-phrase with a realm name; (b) associating a second entity with a second identifier and a second pass-phrase with the realm name; (c) exchanging challenges and responses between the first entity and the second entity; (d) transmitting an authentication request comprising the realm name, first identifier, first pass-phrase, second identifier, second pass-phrase, and challenges and responses to an authentication entity selected according to the realm; (e) verifying at the authentication entity the identity of the first entity and the second entity; and (f) transmitting a session key from the authentication entity to the first entity and the second entity.
Claim 17
Dependent Claim
118 words
An authentication method comprising the steps of: (a) associating a first entity with a first identifier and a first pass-phrase with a realm name; (b) associating a second entity with a second identifier and a second pass-phrase with the realm name; (c) exchanging challenges and responses between the first entity and the second entity; (d) transmitting an authentication request comprising the realm name, first identifier, first pass-phrase, second identifier, second pass-phrase, and challenges and responses to an authentication entity selected according to the realm; (e) verifying at the authentication entity the identity of the first entity and the second entity; and (f) transmitting a session key from the authentication entity to the first entity and the second entity.
Claim 18
Dependent Claim
26 words
The method of claim 14 wherein the step of transmitting a session key comprises the step of transmitting a random session key from the authentication entity.
Claim 19
Dependent Claim
26 words
The method of claim 14 further comprising the step of exchanging communications between the first entity and the second entity in accordance with the session key.
Claim 20
Dependent Claim
22 words
The method of claim 14 wherein the first entity, the second entity, and the authentication entity communicate via a global computer network.
Claim 21
Independent Claim
105 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase, and to authenticate the first entity and the second entity in accordance with authentication proofs for the first entity and the second entity.
Claim 22
Independent Claim
105 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase, and to authenticate the first entity and the second entity in accordance with authentication proofs for the first entity and the second entity.
Claim 23
Dependent Claim
21 words
The system of claim 18 wherein the realm specifies a character set, case conversion, and hash function for performing authentication calculations.
Claim 24
Dependent Claim
13 words
The system of claim 18 wherein the first identifier is a null name.
Claim 25
Dependent Claim
26 words
The system of claim 18 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with challenges and responses.
Claim 26
Dependent Claim
22 words
The system of claim 18 wherein the authentication entity is adapted to perform reauthentication for the first entity and the second entity.
Claim 27
Dependent Claim
18 words
The system of claim 22 wherein the authentication entity performs reauthentication in accordance with a reauthentication cheating technique.
Claim 28
Dependent Claim
12 words
The system of claim 18 wherein the first entity is a user.
Claim 29
Dependent Claim
12 words
The system of claim 18 wherein the first entity is a service.
Claim 30
Independent Claim
101 words
A system for authentication comprising: a realm identifier for a realm associated with a first identifier wherein said realm specifies a character set, case conversion, and hash function for performing authentication calculations, and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase.
Claim 31
Independent Claim
101 words
A system for authentication comprising: a realm identifier for a realm associated with a first identifier wherein said realm specifies a character set, case conversion, and hash function for performing authentication calculations, and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase.
Claim 32
Dependent Claim
33 words
The system of claim 26 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with authentication proofs for the first entity and the second entity.
Claim 33
Dependent Claim
13 words
The system of claim 26 wherein the first identifier is a null name.
Claim 34
Dependent Claim
26 words
The system of claim 26 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with challenges and responses.
Claim 35
Dependent Claim
22 words
The system of claim 26 wherein the authentication entity is adapted to perform reauthentication for the first entity and the second entity.
Claim 36
Dependent Claim
18 words
The system of claim 30 wherein the authentication entity performs reauthentication in accordance with a reauthentication cheating technique.
Claim 37
Dependent Claim
12 words
The system of claim 26 wherein the first entity is a user.
Claim 38
Dependent Claim
12 words
The system of claim 26 wherein the first entity is a service.
Claim 39
Independent Claim
101 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase, and to perform reauthentication for the first entity and the second entity in accordance with a reauthentication cheating technique.
Claim 40
Independent Claim
101 words
A system for authentication comprising: a realm identifier associated with a first identifier and a first pass-phrase for a first entity; a second identifier and a second pass-phrase for a second entity, said second identifier and said second pass-phrase associated with the realm; an authentication entity for the realm, the authentication entity adapted to authenticate the first entity in accordance with the first identifier and the first pass-phrase and the second entity in accordance with the second identifier and the second pass-phrase, and to perform reauthentication for the first entity and the second entity in accordance with a reauthentication cheating technique.
Claim 41
Dependent Claim
33 words
The system of claim 34 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with authentication proofs for the first entity and the second entity.
Claim 42
Dependent Claim
21 words
The system of claim 34 wherein the realm specifies a character set, case conversion, and hash function for performing authentication calculations.
Claim 43
Dependent Claim
13 words
The system of claim 34 wherein the first identifier is a null name.
Claim 44
Dependent Claim
26 words
The system of claim 34 wherein the authentication entity is adapted to authenticate the first entity and the second entity in accordance with challenges and responses.
Claim 45
Dependent Claim
12 words
The system of claim 34 wherein the first entity is a user.
Claim 46
Dependent Claim
12 words
The system of claim 34 wherein the first entity is a service.
References Cited (Backward Citations)
US5369707A
Cited
US5491752A
Cited
US5604803A
Cited
US5535276A
Cited
US5550984A
Cited
US5764890A
Cited
US5872917A
Cited
US5638448A
Cited
US5815665A
Cited
US5740361A
Cited
US6058480A
Cited
US5751812A
Cited
US6035406A
Cited
US6128742A
Cited
US6161185A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2005-11-25 | 2006-05-27 | 2006-11-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2009-11-25 | 2010-05-27 | 2010-11-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2013-11-25 | 2014-05-27 | 2014-11-26 | $7700.00 | Window Closed / Lapsed |