US6516416B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Subscription access system for use with an untrusted network
Assignee: Prism Technologies LLC
•
Filing: 1997-06-11
•
Granted: 2003-02-04
•
Expires: 2017-06-11
Abstract
Abstract A system and method is disclosed for controlling access to computer resources using an untrusted network. The system preferably uses a hardware key connected to each subscriber client computer and adds software to the subscriber client computer and to the existing server computer. A clearinghouse is provided to store client and server identification data, including demographic data, including URL data, usage data and billing information. The clearinghouse authenticates the subscriber and server computers before an operating session occurs. For every new client session, a login mechanism requires the client computer to supply appropriate identification data, including a digital identification generated by the hardware key. The login parameters are verified by the clearinghouse and a session is then started. The system is adapted to protect preselected content from being printed or copied by a client using a web browser. The system architecture permits a geographical distributed system of multiple subscriber client computers, multiple server computers and multiple clearinghouses which can interact with each other.
Inventors
- 👤 Richard L. Gregg
- 👤 Sandeep Giri
- 👤 Timothy C. Goeke
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 12:33
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; G; G06; G06F; G06F21/00; G06F21/10; G06F21/30; G06F21/31; G06F21/34; G06F2221/00; G06F2221/21; G06F2221/2103; G06F2221/2135
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
337 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, comprising: clearinghouse means for storing identity data of said first server computer and the identity data of each of said subscriber client computers; server software means installed on said first server computer adapted to forward its identity data and identity data of each subscriber client computer to said clearinghouse means at the beginning of an operating session in which access to selected computer resources of said first server computer is requested; client software means installed on each of said subscriber client computers adapted to forward its identity data to said first server computer at the beginning of an operating session in which access to selected computer resources is requested; at least one hardware key connected to the subscriber client computer, said key being adapted to generate a predetermined digital identification, which identification is part of said identity data; said server software means installed on the first server computer being adapted to selectively request the subscriber client computer to forward said predetermined digital identification to the first server computer to thereby confirm that said hardware key is connected to said subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said subscriber client computer responsive to a request for selected computer resources of said first server computer by a subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said first server computer responsive to said subscriber client computer making the request for selected computer resources of said first server computer; and, said clearinghouse means being adapted to permit access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making first request.
Claim 2
Independent Claim
337 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, comprising: clearinghouse means for storing identity data of said first server computer and the identity data of each of said subscriber client computers; server software means installed on said first server computer adapted to forward its identity data and identity data of each subscriber client computer to said clearinghouse means at the beginning of an operating session in which access to selected computer resources of said first server computer is requested; client software means installed on each of said subscriber client computers adapted to forward its identity data to said first server computer at the beginning of an operating session in which access to selected computer resources is requested; at least one hardware key connected to the subscriber client computer, said key being adapted to generate a predetermined digital identification, which identification is part of said identity data; said server software means installed on the first server computer being adapted to selectively request the subscriber client computer to forward said predetermined digital identification to the first server computer to thereby confirm that said hardware key is connected to said subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said subscriber client computer responsive to a request for selected computer resources of said first server computer by a subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said first server computer responsive to said subscriber client computer making the request for selected computer resources of said first server computer; and, said clearinghouse means being adapted to permit access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making first request.
Claim 3
Dependent Claim
14 words
A system as defined in claim 1 wherein the untrusted network is the Internet.
Claim 4
Dependent Claim
26 words
A system as defined in claim 1 wherein said subscriber client computer identity data includes a client name, a client password and said predetermined digital identification.
Claim 5
Dependent Claim
19 words
A system as defined in claim 1 wherein successive ones of said intermittent requests occur at predetermined time intervals.
Claim 6
Dependent Claim
69 words
A system as defined in claim 1 wherein said clearinghouse means provides authentication confirmation data to said subscriber client computers and to said first server computer when the identities of the same are authenticated, said authentication confirmation data being encrypted in subsequent communications from each of said first server computer, subscriber client computer and clearinghouse means to another of said first server computer, subscriber client computer and clearinghouse means.
Claim 7
Dependent Claim
44 words
A system as defined in claim 1 wherein said first server computer has the ability to change said predetermined digital identification of the hardware key connected to each of said subscriber client computers, said changed predetermined digital identification being transmitted to said clearinghouse means.
Claim 8
Dependent Claim
42 words
A system as defined in claim 1 further characterized in that it is adapted to monitor the communications between said first server computer and each subscriber client computer during operating sessions and acquire and store demographic data for each subscriber client computer.
Claim 9
Dependent Claim
55 words
A system as defined in claim 7 wherein said demographic data comprises personal profile information, including at least two of the following items of information including: user name, user password, address, type of browser used, operating systems used, phone number, job title, name of employer, type of business, credit card identification and credit card number.
Claim 10
Dependent Claim
24 words
A system as defined in claim 7 wherein said demographic data comprises the history of all URL sites visited by a subscriber client computer.
Claim 11
Dependent Claim
48 words
A system as defined in claim 1 further characterized in that it is adapted to monitor the communications between said first server component and each subscriber client computer during operating sessions and acquire and store billing data based upon the subscriber client computer's usage of server computer resources.
Claim 12
Dependent Claim
34 words
A system as defined in claim 1 further including at least two server computers and at least two clearinghouse means, said server computers and clearinghouse means being capable of being at separate physical locations.
Claim 13
Dependent Claim
29 words
A system as defined in claim 1 wherein said clearinghouse means is adapted to operate as an independent entity and can provide said authentication operations for multiple server computers.
Claim 14
Dependent Claim
47 words
A system as defined in claim 1 wherein said server computer is adapted to selectively query each of said subscriber client computers to generate said predetermined digital identification during an operating session, each of said subscriber client computers generating said digital identification in response to said query.
Claim 15
Dependent Claim
33 words
A system as defined in claim 13 wherein said server computer's selective querying of subscriber client computers occurs by operation of query algorithms, said server computer being adapted to change said query algorithms.
Claim 16
Dependent Claim
37 words
A system as defined in claim 1 wherein said server computer is adapted to selectively prompt said subscriber client computers to enter its identity data including its username and password in the beginning of an operating session.
Claim 17
Dependent Claim
72 words
A system as defined in claim 1 wherein said first server computer is adapted to assign one of a plurality of authorization levels to the computer resources provided by said first server computer, said identity data of each of said subscriber client computers including a particular authorization level, said first server computer only permitting access to particular computer resources by a subscriber client computer that are permitted by said particular authorization level.
Claim 18
Dependent Claim
29 words
A system as defined in claim 16 wherein said computer resources are contained in a plurality of directories containing files, said authorization levels being assigned on a directory level.
Claim 19
Dependent Claim
29 words
A system as defined in claim 16 wherein said computer resources are contained in a plurality of directories containing files, said authorization levels being assigned on a file level.
Claim 20
Independent Claim
382 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, and each of said subscriber client computers has a standard browser application for browsing the untrusted network, comprising: clearinghouse means for storing identity data of said first server computer and the identity data of each of said subscriber client computers; server software means installed on said first server computer adapted to forward its identity data and identity data of each subscriber client computer to said clearinghouse means at the beginning of an operating session in which access to selected computer resources of said first server computer is requested; and, client software means installed on each of said subscriber client computers adapted to forward its identity data to said first server computer at the beginning of an operating session in which access to selected computer resources is requested; said clearinghouse means being adapted to authenticate the identity of said subscriber client computer responsive to a request for selected computer resources of said first server computer by a subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said first server computer responsive to said subscriber client computer making the request for selected computer resources of said first server computer; said clearinghouse means being adapted to permit access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making said request; said server software means installed on the first server computer being adapted to designate specific resource content as being protected and to provide predetermined protection data identifying said resource content as being protected when said data is transmitted to one of said subscriber client computers responsive to a request for said resource content; said client software means installed on each of said subscriber client computers being adapted to monitor said data defining a hierarchical system of protection and selectively disable predetermined application functions of the standard browser application previously installed on said subscriber client computer for said designated specific resources content.
Claim 21
Independent Claim
382 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, and each of said subscriber client computers has a standard browser application for browsing the untrusted network, comprising: clearinghouse means for storing identity data of said first server computer and the identity data of each of said subscriber client computers; server software means installed on said first server computer adapted to forward its identity data and identity data of each subscriber client computer to said clearinghouse means at the beginning of an operating session in which access to selected computer resources of said first server computer is requested; and, client software means installed on each of said subscriber client computers adapted to forward its identity data to said first server computer at the beginning of an operating session in which access to selected computer resources is requested; said clearinghouse means being adapted to authenticate the identity of said subscriber client computer responsive to a request for selected computer resources of said first server computer by a subscriber client computer; said clearinghouse means being adapted to authenticate the identity of said first server computer responsive to said subscriber client computer making the request for selected computer resources of said first server computer; said clearinghouse means being adapted to permit access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making said request; said server software means installed on the first server computer being adapted to designate specific resource content as being protected and to provide predetermined protection data identifying said resource content as being protected when said data is transmitted to one of said subscriber client computers responsive to a request for said resource content; said client software means installed on each of said subscriber client computers being adapted to monitor said data defining a hierarchical system of protection and selectively disable predetermined application functions of the standard browser application previously installed on said subscriber client computer for said designated specific resources content.
Claim 22
Dependent Claim
31 words
A system as defined in claim 19 wherein said application has the application functions of print, save, cut/copy/paste, said protection data identifying various combinations of said functional operations which are disabled.
Claim 23
Dependent Claim
31 words
A system as defined in claim 19 wherein said server computer is adapted to selectively enable and disable said disabling predetermined functionality of said application for said designated specific resource content.
Claim 24
Independent Claim
154 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, wherein each of said subscriber client computers has a standard browser application for browsing the untrusted network, said first server computer being adapted to designate specific resource content as being protected and to provide predetermined protection data identifying said resource content as being protected when said data is transmitted to one of said subscriber client computers responsive to a request for said resource content, said data defining a hierarchical system of protection is being monitored by said subscriber client computer, and said subscriber client computer selectively disables predetermined application functions of the standard browser application previously installed on said subscriber client computer for said designated specific resource content responsive to said predetermined protection data from said first server computer.
Claim 25
Independent Claim
154 words
A system for controlling the operation of and access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network in an operating session, wherein each of said subscriber client computers has a standard browser application for browsing the untrusted network, said first server computer being adapted to designate specific resource content as being protected and to provide predetermined protection data identifying said resource content as being protected when said data is transmitted to one of said subscriber client computers responsive to a request for said resource content, said data defining a hierarchical system of protection is being monitored by said subscriber client computer, and said subscriber client computer selectively disables predetermined application functions of the standard browser application previously installed on said subscriber client computer for said designated specific resource content responsive to said predetermined protection data from said first server computer.
Claim 26
Dependent Claim
31 words
A system as defined in claim 22 wherein said application has the application functions of print, save, cut/copy/paste, said protection data identifying various combinations of said functional operations which are disabled.
Claim 27
Independent Claim
244 words
A method of controlling access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network during an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, comprising the steps of: registering identity data of said first server computer and the identity data of each of said subscriber client computers and storing the registered identity data in a clearinghouse means associated with said first server computer and said subscriber client computers; requiring a subscriber client computer to forward its identity data to said clearinghouse means at the beginning of an operating session in which access to selected computer resources is requested; requiring a subscriber client computer to forward a predetermined digital identification to said first server computer to thereby confirm that a hardware key is connected to said subscriber client computer; attempting to authenticate the identity of said subscriber client computer from said clearinghouse means responsive to a request for selected computer resources of said first server computer by a subscriber client computer; attempting to authenticate the identity of said first server computer from said clearinghouse means responsive to said subscriber client computer making the request for selected computer resources; and, permitting access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making said request.
Claim 28
Independent Claim
244 words
A method of controlling access to selected computer resources of at least a first server computer by at least one subscriber client computer via an untrusted network during an operating session, without necessarily controlling access to other computer resources provided by the first server computer and by other server computers and nonsubscriber client computers, comprising the steps of: registering identity data of said first server computer and the identity data of each of said subscriber client computers and storing the registered identity data in a clearinghouse means associated with said first server computer and said subscriber client computers; requiring a subscriber client computer to forward its identity data to said clearinghouse means at the beginning of an operating session in which access to selected computer resources is requested; requiring a subscriber client computer to forward a predetermined digital identification to said first server computer to thereby confirm that a hardware key is connected to said subscriber client computer; attempting to authenticate the identity of said subscriber client computer from said clearinghouse means responsive to a request for selected computer resources of said first server computer by a subscriber client computer; attempting to authenticate the identity of said first server computer from said clearinghouse means responsive to said subscriber client computer making the request for selected computer resources; and, permitting access to said selected computer resources responsive to successful initial authentication of said first server computer and of said subscriber client computer making said request.
Claim 29
Dependent Claim
22 words
A method as defined in claim 24 wherein said subscriber client computer identity data includes a client name and a client password.
Claim 30
Dependent Claim
38 words
A method as defined in claim 24 wherein access is permitted subsequent to initial successful authentication only when said predetermined digital identification is forwarded to said clearinghouse means subsequently during an operating session by said subscriber client computer.
Claim 31
Dependent Claim
14 words
A method as defined in claim 24 wherein said untrusted network is the Internet.
Claim 32
Dependent Claim
37 words
A method as defined in claim 24 further including the steps of: monitoring the communications between said first server computer and each subscriber client computer during operating sessions; acquiring and storing usage data relating to said communications.
Claim 33
Dependent Claim
21 words
A method as defined in claim 28 further including the step of: acquiring and storing demographic data on each client computer.
Claim 34
Dependent Claim
28 words
A method as defined in claim 28 further including the step of: acquiring and storing billing data based upon the subscriber client computer's usage of server computer resources.
Claim 35
Dependent Claim
28 words
A method as defined in claim 24 wherein said first server computer can change the predetermined digital identification of a hardware key connected to a subscriber client computer.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-02-03 | 2006-08-05 | 2007-02-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-02-03 | 2010-08-05 | 2011-02-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-02-03 | 2014-08-05 | 2015-02-04 | $7700.00 | Window Closed / Lapsed |