Patent US6836845B1 successfully refreshed from Google Patents.
US6836845B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for generating queries for secure authentication and authorization of transactions
Assignee: Access Co Ltd
•
Filing: 2000-06-30
•
Granted: 2004-12-28
•
Expires: 2020-06-30
Abstract
Abstract A method and apparatus for authenticating and authorizing online transactions. An authentication cookie is transmitted to a client system. The authentication cookie includes a user encryption key and an encrypted buffer that contains user identification data and a profile code. Subsequent requests for the particular service use the authentication cookie to generate a query that includes the encrypted buffer and user identification data entered by the user. Portions of the query are encrypted using the user encryption key. Queries received at each authentication and authorization server are authenticated by reconstructing the user encryption key using information transmitted in the clear and decrypting the query using both the reconstructed user encryption key and the secret key. The user identification data entered by the user is then compared with the user identification data in the encrypted buffer for further authentication. The profile code is analyzed for determining authorization. If the query is authenticated and authorized, the authentication and authorization server forwards the request to a server that provides the desired service.
Inventors
- 👤 Robert Lennie
- 👤 Carl Chen
- 👤 Gabe Dalbec
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 05:34
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0407; H04L63/0414; G; G06; G06F; G06F1/00; G06F1/16; G06F1/1613; G06F1/1626; G06F1/1632; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/388; G06Q20/40; G06Q20/401; G06Q20/4014; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H04L63/08; H04L9/00; H04L9/32; H04L9/3271; H04L2209/00; H04L2209/56; H04L2209/80
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
186 words
A method for generating a query comprising the steps of: a) receiving a cookie that includes an encrypted buffer that includes a profile code that indicates the services that a user is entitled to use, said profile code encrypted using an encryption key generated using a first seed component, a second seed component and a third seed component, said first seed component further comprising user identification data, said cookie also including said a second seed component and said third seed component, said second seed component and said third seed component not encrypted; b) generating a request buffer that indicates a desired service; c) receiving said user identification data from a user; d) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and e) generating a query that comprises said user identification data received in step c) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step c) not encrypted.
Claim 2
Independent Claim
186 words
A method for generating a query comprising the steps of: a) receiving a cookie that includes an encrypted buffer that includes a profile code that indicates the services that a user is entitled to use, said profile code encrypted using an encryption key generated using a first seed component, a second seed component and a third seed component, said first seed component further comprising user identification data, said cookie also including said a second seed component and said third seed component, said second seed component and said third seed component not encrypted; b) generating a request buffer that indicates a desired service; c) receiving said user identification data from a user; d) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and e) generating a query that comprises said user identification data received in step c) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step c) not encrypted.
Claim 3
Dependent Claim
20 words
A method as recited in claim 1 further comprising the step of: f) transmitting said query to an authentication server.
Claim 4
Dependent Claim
20 words
A method as recited in claim 2 further including the steps of: g) receiving a response from said authentication server.
Claim 5
Dependent Claim
25 words
A method as recited in claim 3 wherein the response received in step g) is encrypted using said second seed component as an encryption key.
Claim 6
Dependent Claim
26 words
A method as recited in claim 1 wherein said user identification data is numerical and wherein said third seed component further comprises a randomly generated number.
Claim 7
Dependent Claim
21 words
A method as recited in claim 5 wherein said encryption key is determined using a hash of at least three elements.
Claim 8
Dependent Claim
32 words
A method as recited in claim 6 wherein said encryption key is determined by a MD- 5 hash of said first seed component, said second seed component and said third seed component.
Claim 9
Dependent Claim
19 words
A method as recited in claim 6 wherein said encrypted buffer is further encrypted using said second seed component.
Claim 10
Dependent Claim
213 words
A computer system comprising: a processor coupled to a bus; a memory unit coupled to said bus and comprising instructions that when executed by said processor implement a method for generating a query comprising the steps of: a) receiving a cookie that includes an encrypted buffer that includes a profile code that indicates the services that a user is entitled to use, said profile code encrypted using an encryption key generated using a first seed component, a second seed component and a third seed component, said first seed component further comprising user identification data, said cookie also including said a second seed component and said third seed component, said second seed component and said third seed component not encrypted; b) generating a request buffer that indicates a desired service; c) receiving said user identification data from a user; d) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and e) generating a query that comprises said user identification data received in step c) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step c) not encrypted.
Claim 11
Dependent Claim
213 words
A computer system comprising: a processor coupled to a bus; a memory unit coupled to said bus and comprising instructions that when executed by said processor implement a method for generating a query comprising the steps of: a) receiving a cookie that includes an encrypted buffer that includes a profile code that indicates the services that a user is entitled to use, said profile code encrypted using an encryption key generated using a first seed component, a second seed component and a third seed component, said first seed component further comprising user identification data, said cookie also including said a second seed component and said third seed component, said second seed component and said third seed component not encrypted; b) generating a request buffer that indicates a desired service; c) receiving said user identification data from a user; d) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and e) generating a query that comprises said user identification data received in step c) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step c) not encrypted.
Claim 12
Dependent Claim
24 words
A computer system as recited in claim 9 wherein said method further comprises the step of: f) transmitting said query to an authentication server.
Claim 13
Dependent Claim
24 words
A computer system as recited in claim 10 wherein said method further comprises the step of: g) receiving a response from said authentication server.
Claim 14
Dependent Claim
22 words
A computer system as recited in claim 11 wherein the response received in step g) is encrypted using said second seed component.
Claim 15
Dependent Claim
26 words
A computer system as recited in claim 9 wherein said user identification data is numerical and wherein said third seed component is a randomly generated number.
Claim 16
Dependent Claim
22 words
A computer system as recited in claim 9 wherein said encryption key is determined using a hash of at least three elements.
Claim 17
Dependent Claim
33 words
A computer system as recited in claim 14 wherein said encryption key is determined using a MD- 5 hash of said first seed component, said second key component, and said third seed component.
Claim 18
Dependent Claim
17 words
A computer system as recited in claim 14 wherein said computer system further comprises a palmtop computer.
Claim 19
Independent Claim
170 words
A method for generating a query from a palmtop computer comprising: a) providing user identification data to a user, said user identification data comprising a first seed component of three seed components used for generating an encryption key; b) receiving a cookie that includes a second seed component and a third seed component of said three seed components used to generate said encryption key, said cookie also including an encrypted buffer encrypted using said encryption key; c) generating a request buffer that indicates a desired service; d) receiving said user identification data from a user; e) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and f) generating a query that comprises said user identification data received in step d) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step d) not encrypted.
Claim 20
Independent Claim
170 words
A method for generating a query from a palmtop computer comprising: a) providing user identification data to a user, said user identification data comprising a first seed component of three seed components used for generating an encryption key; b) receiving a cookie that includes a second seed component and a third seed component of said three seed components used to generate said encryption key, said cookie also including an encrypted buffer encrypted using said encryption key; c) generating a request buffer that indicates a desired service; d) receiving said user identification data from a user; e) encrypting said request buffer using said second seed component as an encryption key so as to form an encrypted portion of a query; and f) generating a query that comprises said user identification data received in step d) and that includes said encrypted portion of said query, said query also including said third seed component and said encrypted buffer, said third seed component and said user identification data received in step d) not encrypted.
Claim 21
Dependent Claim
20 words
A computer system as recited in claim 17 wherein said method further comprises the step of: g) transmitting said query.
Claim 22
Dependent Claim
14 words
The method of claim 18 further comprising the steps of: h) receiving a response.
Claim 23
Dependent Claim
30 words
The method of claim 17 wherein said encryption key is determined using a MD- 5 hash of said first seed component, said second key component, and said third seed component.
References Cited (Backward Citations)
US4386266A
Cited
US5249230A
Cited
US6199113B1
Cited
US6374359B1
Cited
US6470378B1
Cited
US6463533B1
Cited
US6668322B1
Cited
US6324648B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-12-28 | 2008-06-28 | 2008-12-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-12-28 | 2012-06-28 | 2012-12-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-12-28 | 2016-06-28 | 2016-12-28 | $7700.00 | Window Closed / Lapsed |