US6651168B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Authentication framework for multiple authentication processes and mechanisms
Assignee: International Business Machines Corp
•
Filing: 1999-01-29
•
Granted: 2003-11-18
•
Expires: 2019-01-29
Abstract
Abstract An authentication framework subsystem enables a computer system to authenticate a user with a selected one of a plurality of authentication processes. Each of the authentication processes has a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system. The invention includes an authentication framework in the computer system. An application program interface in the authentication framework provides an interface to an I/O component, such as a graphical user interface (GUI), of the computer system. A plurality of authentication modules interface with the framework. Each module has a conversation function driver defining a programmed sequence of steps to authenticate a user with a distinct authentication process. A conversation function in the application program interface, defines a programmed sequence of steps for controlling the I/O component in response to generic instructions that have the same format but different sequences for each of the authentication modules.
Inventors
- 👤 I-Lung Kao
- 👤 Ivan Matthew Milman
- 👤 David J. Schneider
- 👤 Ronald Gene Willard
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 17:40
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41; G06F21/32; G06F21/34
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
301 words
An authentication subsystem for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, comprising: a first conversation function driver coupled to a first authentication module, defining a first programmed sequence of steps to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; a second conversation function driver coupled to a second authentication module, defining a second programmed sequence of steps to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; an authentication framework in the computer system; and a generic conversation function including an interpreter/processor in the authentication framework coupled to the user display and input device, defining a generic programmed sequence of steps for selectively re-configuring the user display and input device layouts and a command line interface in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to selectively re-configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to selectively re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 2
Dependent Claim
301 words
An authentication subsystem for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, comprising: a first conversation function driver coupled to a first authentication module, defining a first programmed sequence of steps to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; a second conversation function driver coupled to a second authentication module, defining a second programmed sequence of steps to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; an authentication framework in the computer system; and a generic conversation function including an interpreter/processor in the authentication framework coupled to the user display and input device, defining a generic programmed sequence of steps for selectively re-configuring the user display and input device layouts and a command line interface in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to selectively re-configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to selectively re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 3
Dependent Claim
67 words
The authentication subsystem of claim 1 , wherein said first authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 4
Dependent Claim
67 words
The authentication subsystem of claim 2 , wherein said second authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 5
Dependent Claim
16 words
The authentication subsystem of claim 1 , wherein said display device includes a graphical user interface.
Claim 6
Dependent Claim
16 words
The authentication subsystem of claim 1 , wherein said display device includes a command line interface.
Claim 7
Dependent Claim
14 words
The authentication subsystem of claim 1 , wherein said input device is a keyboard.
Claim 8
Dependent Claim
22 words
The authentication subsystem of claim 1 , wherein said first authentication module provides credentials derived from authentication to a single sign-on system.
Claim 9
Dependent Claim
295 words
An authentication method for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, comprising: defining a first programmed sequence of steps in a first conversation function driver coupled to a first authentication module, to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; defining a second programmed sequence of steps in a second conversation function driver coupled to a second authentication module, to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; and defining a generic programmed sequence of steps in a generic conversation function including an interpreter/processor in an authentication framework coupled to the user display and input device, for selectively re-configuring the user display and input device layouts and a command line in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to re- configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 10
Dependent Claim
295 words
An authentication method for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, comprising: defining a first programmed sequence of steps in a first conversation function driver coupled to a first authentication module, to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; defining a second programmed sequence of steps in a second conversation function driver coupled to a second authentication module, to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; and defining a generic programmed sequence of steps in a generic conversation function including an interpreter/processor in an authentication framework coupled to the user display and input device, for selectively re-configuring the user display and input device layouts and a command line in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to re- configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 11
Dependent Claim
67 words
The authentication method of claim 8 , wherein said first authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 12
Dependent Claim
67 words
The authentication method of claim 9 , wherein said second authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 13
Dependent Claim
16 words
The authentication method of claim 8 , wherein said display device includes a graphical user interface.
Claim 14
Dependent Claim
16 words
The authentication method of claim 8 , wherein said display device includes a command line interface.
Claim 15
Dependent Claim
14 words
The authentication method of claim 8 , wherein said input device is a keyboard.
Claim 16
Dependent Claim
22 words
The authentication method of claim 8 , wherein said first authentication module provides credentials derived from authentication to a single sign-on system.
Claim 17
Dependent Claim
311 words
A computer program product in a computer-readable medium for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, the computer program product comprising: program code for defining a first programmed sequence of steps in a first conversation function driver coupled to a first authentication module, to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; program code for defining a second programmed sequence of steps in a second conversation function driver coupled to a second authentication module, to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; and program code for defining a generic programmed sequence of steps in a generic conversation function including an interpreter/processor an authentication framework coupled to the user display and input device, for selectively re-configuring the user display and input device layouts and a command line in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to re-configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 18
Dependent Claim
311 words
A computer program product in a computer-readable medium for enabling a computer system to authenticate a user with a selected one of a plurality of authentication processes, each having a distinct sequence of steps and a unique input/output (I/O) interface for exchanging authentication information with the computer system, the computer program product comprising: program code for defining a first programmed sequence of steps in a first conversation function driver coupled to a first authentication module, to authenticate a user with a first authentication process, said first driver having access to first display configuration information and first input device configuration information used during said first authentication process, to configure a user display and input device for the first authentication process; program code for defining a second programmed sequence of steps in a second conversation function driver coupled to a second authentication module, to authenticate a user with a second authentication process, said second driver having access to second display configuration information and second input device configuration information used during said second authentication process, to configure the user display and input device for the second authentication process; and program code for defining a generic programmed sequence of steps in a generic conversation function including an interpreter/processor an authentication framework coupled to the user display and input device, for selectively re-configuring the user display and input device layouts and a command line in response to said first programmed sequence of steps or said second programmed sequence of steps; said generic conversation function receiving said first programmed sequence of steps from the first conversation driver, to re-configure the user display and input device for authenticating a user during the first authentication process; said generic conversation function receiving said second programmed sequence of steps from the second conversation driver, to re-configure the user display and input device for authenticating a user during the second authentication process.
Claim 19
Dependent Claim
68 words
The computer program product of claim 15 , wherein said first authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 20
Dependent Claim
68 words
The computer program product of claim 16 , wherein said second authentication process is selected from the group consisting of a userid/password authentication process, a smart card authentication process, a fingerprint authentication process, a biometric authentication process, a voice print scanning authentication process, a hand and face geometry scanning authentication process, a body odor profiling authentication process, a vein scanning authentication process, and a signature recognition authentication process.
Claim 21
Dependent Claim
17 words
The computer program product of claim 15 , wherein said display device includes a graphical user interface.
Claim 22
Dependent Claim
17 words
The computer program product of claim 15 , wherein said display device includes a command line interface.
Claim 23
Dependent Claim
15 words
The computer program product of claim 15 , wherein said input device is a keyboard.
Claim 24
Dependent Claim
23 words
The computer program product of claim 15 , wherein said first authentication module provides credentials derived from authentication to a single sign-on system.
References Cited (Backward Citations)
US5481720A
Cited
US5620079A
Cited
US5586260A
Cited
US5617570A
Cited
US5544322A
Cited
US5774551A
Cited
US5706427A
Cited
US5684950A
Cited
US6388657B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-11-17 | 2007-05-19 | 2007-11-18 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-11-17 | 2011-05-19 | 2011-11-18 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-11-17 | 2015-05-19 | 2015-11-18 | $7700.00 | Window Closed / Lapsed |