WO1999046691A1 - Systemes de securite des communications sur internet, intranet et d'autres reseaux utilisant des cles d'entree et de sortie - Google Patents

Systemes de securite des communications sur internet, intranet et d'autres reseaux utilisant des cles d'entree et de sortie Download PDF

Info

Publication number
WO1999046691A1
WO1999046691A1 PCT/US1998/010355 US9810355W WO9946691A1 WO 1999046691 A1 WO1999046691 A1 WO 1999046691A1 US 9810355 W US9810355 W US 9810355W WO 9946691 A1 WO9946691 A1 WO 9946691A1
Authority
WO
WIPO (PCT)
Prior art keywords
access
user
server
key codes
individual
Prior art date
Application number
PCT/US1998/010355
Other languages
English (en)
Inventor
Farrell Newton
Gareth Williams
Original Assignee
Farrell Newton
Gareth Williams
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Farrell Newton, Gareth Williams filed Critical Farrell Newton
Priority to JP2000536009A priority Critical patent/JP2002507025A/ja
Priority to AU77971/98A priority patent/AU7797198A/en
Publication of WO1999046691A1 publication Critical patent/WO1999046691A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H04L63/0838—Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/145—Countermeasures against malicious traffic the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
    • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
    • G06F2211/008—Public Key, Asymmetric Key, Asymmetric Encryption

Definitions

  • the purpose of the security check is to prevent unlicensed CD-ROM disks from being played on a Sega game machine.
  • the CD-ROM disk identifier disclosed in this patent is not unique to each individual CD-ROM disk, but instead merely indicates a kind of the CD-ROM disk. All CD-ROM disks of the same type have the same disk identifier. In the patent, two kinds of identifiers, "SEGADISKSYSTEM” and "SEGABOOTDISC" are described.
  • the security code indicates that the CD-ROM disk is duly licensed and also contains a program which generates a message displayed on the user's monitor that the disk is licensed.
  • the object of the present invention is to provide a practical and effective security system for secure remote terminal or terminal emulation or computer access to a host computer. This is accomplished by using ultra long pass- words and/or ultra large databases of identification keys, i.e., by a CD-ROM disk or other portable large capacity storage medium containing a database of identification keys, long identification keys, or a combination thereof.
  • the subsequent descriptions of the invention will be in terms of CD-ROM disks, although other portable storage media are contemplated for use, including Zip disks, floppy disks, digital versatile disks (DVD disks), Bernoulli disks, portable hard drives (e.g. PCMCIA hard drives), and portable semiconductor memory units (e.g. PCMCIA memory units) .
  • the authentication system further includes a remote terminal with a portable large capacity storage medium reader or connector, and a communications device or system which connects the remote terminal to a host com- puter which has a large capacity storage medium.
  • a microprocessor or logic circuitry may be added to the portable memory medium in certain applications to implement additional security features or user features.
  • the system of the present invention may be incor- porated into a portable electronic devices.
  • the new security system may utilize one or more CD-ROM disks, other portable storage media, other storage devices including redundant arrays of inexpensive disks and hard drives, or any hybrid thereof containing databases of the user identification keys .
  • the invention also contemplates encryption and other security methods for authenticating the identity of users.
  • an enhanced security system entails the use of separate entrance and exit codes at the beginning and end respectively of the communication session, along with multiple authentication codes during each session, as required for super security.
  • the invention also includes means for the tagging or identification of hackers who attempt to penetrate the new system; a programming means for such tagging or identification may be implemented on the portable storage media, in the central computers (servers) of the new system, or both.
  • FIG. 1 is a schematic diagram of an exemplary preferred embodiment illustrating the various steps required to practice the fundamental security system of the present invention, as well as illustrating the components which comprise the required hardware and software of one CD-ROM- based implementation of the fundamental system itself;
  • Fig. 2 is a schematic diagram of an alternate preferred embodiment including a double-sided key or password.
  • the new and improved security system of the present invention provides individual users with what are characterized as "ultra long identification keys" which are embodied on a physical object such as a CD-ROM disk which is provided to the authorized individual user.
  • the individual user code will comprise at least 20 characters or digits (requi- ring 20 or 10 bytes, respectively) of information as a bare minimum (it being understood that the typical password employed for consumer credit cards and the like is 16 characters) , although the use of a CD-ROM disk "key" enables even passwords of hundreds of characters to be readily employed.
  • the initial step in the new security method is to generate individual user access codes for each and every contemplated user who is to be granted authorized access to a network or a database or source or repository of information which is desired to be protected and which is stored in or in conjunction with a "home" server or base computer.
  • the individual user access key codes are generated using algorithms or circuitry or combinations thereof which may be optionally provided with means to generate individual encryption keys as well, in accordance with well known methods and industry standards for generating encryption key codes. It is of course to be understood that in accordance with the principles of the present invention, the individual access key code is "ultra long" and is of a length that is otherwise too long and too cumbersome to be conveniently typed into a system by an individual.
  • a central registry or other compilation of all of the individualized user access codes is established and is optionally encrypted for loading on the home or main computer terminal or server on which the secured database is to be located or in association with which the server is to function as a security mechanism.
  • each of the individualized user access key codes is separately recorded, for example by ganged optical recording machines of the type known to the art for recording information onto CD- ROM disks.
  • Each disk is in the form of a "CD-ROM key" which is individualized for a particular end user (for example, a customer of a catalog sales organization, a user of a secure database, a customer of a financial institution, etc . ) .
  • the user In order to provide authorized access to an authorized user of the database or "transaction program", the user at his remote personal computer terminal which is equipped with a CD-ROM reader, loads the CD-ROM disk into his computer and logs onto an access program or user program (which may optionally be recorded on the CD-ROM disk as well) .
  • the user program then transmits the user's in- dividual access key code (which optionally may be encrypted) over a communication network or over a telephone network to the host computer or server, which will be appropriately programmed to check the user's access key code against the registry of stored authorized individual user access key codes.
  • the server program will further include the requisite steps to interdict and end any attempt to gain access to the server or transaction program through a transmitted access code which is not stored in the database of authorized individual user access key codes.
  • the server program will disconnect and may optionally inform the user that an unauthorized key access code has been transmitted.
  • the communica- tion between the user's remote computer and the host server will continue with the host computer's program including steps to grant access to the user's program and begin the session.
  • the host computer program or server program and the user program may optionally encrypt the session using the user's encryption key or keys, which are also stored in the server's database and on the individual user's CD-ROM disk.
  • the optional encryption might also include encryption keys which are stored on the user's CD-ROM disk key.
  • access to the secured database or "secured server transaction program” can proceed with the authorized user communicating through his own personal computer with the host server to conduct whatever "transaction" he may wish to effect, ranging from the simple ordering of merchandise, to the conduct of financial transactions, to conduct of research into a secured data- base, or any other type of two-way communication which is capable of being conducted between a remote computer terminal and a host computer over a communication network or a telephone network.
  • a level of security heretofore unavailable to remote con- sumers communicating with a host computer is provided by the new system which utilizes ultra long identification key codes typically impressed upon or otherwise recorded upon "large keys" in the form of a CD-ROM disk or the like.
  • the ultra long identification keys are checked and approved through databases of such identification keys which are stored in a remote host computer or server.
  • Security may also be enhanced by providing multiple keys or a database or table of keys (which may be a onetime pad of keys) on each user's CD-ROM disk.
  • the user program may provide the keys in sequence or according to a pre-arranged pattern or algorithm, or from a location requested by the server.
  • the server might request the keys in sequence or from random locations; i.e. in a random order, or according to some other algorithm.
  • the user program may provide or the server may request more than one key or multiple keys at different times during the session.
  • the use of a one-time pad of keys also insures that no key is transmitted twice; hence intercepting or decrypting a key will not allow an attacker to gain access to the system.
  • the key generation algorithm will run on the server itself or even on the users' computers; in the latter case, means to avoid generating duplicate keys is required (e.g. by a randomization func- tion in the key generation algorithm or circuitry, plus a check for duplicate keys whenever a new key is added to the database) .
  • each user is issued a unique CD-ROM disk containing one or more unique identification keys.
  • An individual user inserts his CD-ROM disk "key” into a computer connected via a network or other communications device to a host computer; also referred to herein as a server.
  • An access program on the CD-ROM "key” connects to and forwards the unique identification key from the CD-ROM disk key to the host computer in encrypted form.
  • a security authentication program stored on the server then decrypts the identification key, compares the identification key with an identification key from the database of user identification keys located on a large capacity storage device connected to the host computer, and verifies the user's identity.
  • the host computer or the user's access program may include a program or routine which will also demand that the user type in a password. If the identification key matches the identification key in the host computer's database of user identification keys and if the user enters the correct password, the host computer, through its programming, will grant access to the user.
  • the host computer may be further programmed to require or challenge the user's remote access terminal program to re-authenticate itself at regular intervals or from time-to-time during the communication session. Or, the user's program may so reauthenticate itself and the host computer may be programmed to expect such reauthen- tication. This helps defend against hackers who try to capture an identification key en route to the host computer or who misappropriate or steal a user's connection. Unless a hacker has the user's unique CD-ROM "key", he would be 99/46691
  • the user's program may require the host computer (server) to reauthenticate itself at regular intervals or from time-to-time during a communication session. Or, the server program may so re-authenticate itself and the user program may include code to expect such re-authentication. This helps defend against hackers who attempt to impersonate the host computer (server) . Alternatively, the host computer and remotely accessed terminal program may request or expect identification keys periodically from each other. It should be noted that such re-authentication may optionally be required at critical points in a communication session, e.g. to complete a transaction or to access a database. Such reauthentication may be required before, to initiate the action; or after, to validate the action; or both.
  • defensive methods have been developed including the use of multiple, different identification keys; encrypting the identification keys or messages, ideally by time-dependent means, e.g. by combining the identification keys with time-of-day information, then encrypting.
  • Another defensive method for authenticating a user to the host computer and the host computer to the user with the identification keys is the exchange of identification keys one digit at a time.
  • the user's access program (running on the user's terminal or computer) transmits the first digit of its identification key to the host. The host computer determines whether the digit transmitted was correct.
  • the host computer transmits the first digit of its identification key to the user's terminal or computer.
  • the user's access program determines whether the digit returned by the host is correct. This process continues until either the user program and host computer have given each other all the digits of their respective identification keys or until an incorrect digit is received by the host computer or user's access program.
  • the host computer is programmed to send an encryption key to the remote terminal.
  • the terminal program executing on the remote terminal uses the encryption key to encrypt the unique identification key on the CD-ROM disk. Then the encrypted identification key is sent to the host computer for verification. If the encryption means is a public key encryption algorithm with a sufficiently long key, a third party would have great difficulty extracting the unencrypted identification.
  • a variation to this method is to have part of the encryption key contained on the user's CD-ROM "key" with the other part sent from the host computer. The host computer always has access to a complete database of all the encryption keys and identification keys. Without the portion of the encryption key from the CD-ROM or host computer, the remote terminal program is unable to decrypt messages.
  • the encryption key from the host computer is varied with time, selected randomly, or unique to each user session, the user's computer will essentially never transmit the same encrypted identification key twice.
  • the remote terminal program may pad the identification key with random, null, or nonsense prefixes or suffixes or interpolated characters .
  • the encryption algorithm is preferably provided with good diffusion (wherein a change in any character in the plain text changes many or all of the characters in the encrypted text) .
  • the pad will preferably be specified by the host computer so that previously used encrypted identification keys do not repeat .
  • the pad may vary in a pre-determined manner with time.
  • the pad may be the day, hour, and minute clock.
  • the host computer will then be programmed to check that the pad is correct based upon the day, hour, and minute.
  • the pad may also vary with each logon.
  • the user ID or user number may be padded as discussed above .
  • the encryption key is included on the user's CD-ROM key disk and is never transmitted.
  • the remote terminal program may pad the identification key as previously discussed.
  • the host computer will be programmed to look up the encryption key for the user's claimed identity in a stored database of encryption and identification keys.
  • the host computer will decrypt the unique identification key, remove the padding, and compare the decrypted key with the key retrieved from the host computer database, thereby verifying the user's identity.
  • the added characters will insure that the user's computer will essentially never transmit the same identification key twice.
  • the central server selects the encryption key of the moment from a table on the user's CD- ROM; a copy of the table being in the central server. This avoids transmitting the encryption key over the connection; all that is transmitted is which entry in the key table is to be used, not the encryption key itself.
  • the remote terminal transmits to the host computer a plain text or encrypted user ID or identification key from an identification key database on the user's CD-ROM key.
  • a second encrypted identification key is sent from the remote terminal to the host computer.
  • the first identification key is used by the host computer to look up a unique encryption key for that user.
  • the second identification key is then decrypted using the unique encryption key and the user's claimed identity. If the decrypted identification key is correct, the user's claimed identity is then verified.
  • the encryption key is never transmitted since both the remote terminal and the host computer have the encryption key stored locally.
  • other parts of the transmission, or the entire transmission or session may be encrypted using a unique user-specific encryption key on the user's CD-ROM disk.
  • the server When the server is aware of the user's identity, it will look up the key in its own table; hence the key need never be transmitted between user and server or vice- versa. Again, techniques such as padding would typically be used.
  • This embodiment not only provides additional security, it also securely authenticates the host computer to the remote terminal program.
  • An "imposter" server would lack the database of user encryption keys and would be unable to decrypt the remote terminal ' s messages and accordingly would be unable to respond plausibly to the remote terminal .
  • a one-time pad stored on both the user's CD-ROM disk key and the host computer may be used as the encryption means or key to encrypt the user's identification key to provide additional security.
  • the host computer After receiving the encrypted identification key, the host computer is programmed to look up the one-time pad under the user's claimed identity in a database of one-time pads. After decrypting the identification key, the host computer will authenticate the user's identity.
  • a one-time pad of unique identification keys may be stored on each user's CD-ROM key disk.
  • the central server would then demand a new key every time, and verify the new key against its own copy of that user's on- time pad of ID keys.
  • the central server can keep track of which one-time-pad keys have been used to prevent re-use. If the user's portable storage medium is writable, the user terminal software or access software may be used to keep a usage record or table on the portable storage medium, or the user may overwrite the keys that have been used. If the user only accesses the server from the one terminal, the user may keep a usage record or table on the user terminal, e.g. on the hard drive.
  • usage records may be kept in both the central server and on the user's portable storage medium or terminal, and any discrepancy between the usage records on the user's portable storage medium or terminal and on the server would suggest an attempt by a third party to illicitly gain access.
  • a discrepancy will be indicated by any attempt by either the user program or the server to re-use a one-time-pad key or one-time-pad entry that has already been used with the server or user program respectively.
  • Such a discrepancy will also be indicated by any attempt to use a key or pad entry out-of-sequence or any other "out -of-synch episode" .
  • Both one-time pad arrangements also avoid transmitting the same user authentication key or message twice.
  • the one-time pad can be used to encrypt other important information communicated. For example, with use of a 250 kilobyte user-specific one-time pad (e.g. in conjunction with a consumer catalog) to encrypt the user's credit card number, assuming that one byte is used to encrypt each digit, then a sixteen digit credit card number would use 16 bytes of the 250 kilobyte one-time pad. Assuming the user performed ten transactions a day, the 250 kilobyte one-time pad would last more than four years. For any of the aforementioned identification techniques, the terminal program and the host computer also may be programmed to demand that the user enter by typing (through a keyboard) a password previously specified. The password will be compared with the user passwords stored on the CD-ROM or host computer corresponding to the user ID.
  • a 250 kilobyte user-specific one-time pad e.g. in conjunction with a consumer catalog
  • the most secure encryption techniques can take up to 1000 times longer to process than more routine encryption methods, unless a special-purpose processor for the particular algorithm is added to the user s computer.
  • One method to increase speed is to use the most secure means to encrypt only the most sensitive portions of the transmission and use faster encryption methods for less critical portions of the transmission. Because of the large capacity and speed of a CD-ROM, databases of encryption keys for each encryption method and host computer can be easily stored and accessed.
  • Portions of the transmission that are common and do not need to be protected can be transmitted as plain text.
  • a special encryption device may be attached to the host computer in order to expedite encryption and decryp- tion of transmitted data. Since the host computer will most likely service many users, the encryption device should prove very economical when amortized over the large number of users .
  • the cost of having extremely large keys and databases of keys is the cost of the space on a CD-ROM which is not available for other information and the space needed to store these keys on the computer host. Since the cost of producing CD-ROM disks is modest, the use of CD-ROM disks has become quite economical. Thus the new authentication system of the invention is more economical and more effective than the prior art systems.
  • a user's CD-ROM key may contain different identification keys or tables or databases of identification keys for use with different servers or to provide access to different data- bases or services on any individual server.
  • different databases of identification keys and encryption keys would be allocated to provide access to each vendor's host computer or database.
  • a user's CD-ROM key may contain different identification keys or tables or databases of identification keys to provide different levels of access to one or more host computers.
  • the host computer may be programmed to grant different access privileges to different users. For example, in a corporate network, the president's CD-ROM key would grant maximum access to all information on the host computer, while a clerk's CD-ROM key would only grant limited access to specific data.
  • different consumers might have different credit limits.
  • the requisite privilege or privilege level might either be encoded on the CD-ROM or, preferably, would be included in a database on the host computer.
  • a single authorization server or set of authorization servers can be used to authorize access to many other servers or to may different databases or services.
  • the table of what is authorized for a given user would typically be kept in the single server or set of servers for ease of updating, although it could be kept on the users ' portable storage media (e.g. the user's CD-ROM disk) or on the central computer (server) or divided between the two.
  • the other servers can access the single server or set of servers to obtain the authorization; alternatively, the user program might contact the other servers through the single server or set of servers (e.g. if the authoriza- tion server function is implemented by an Internet service provider's server) .
  • a single server or set of servers is used to authorize access to other servers or to different databases or servers, new servers or databases or services can be authorized for a given user by simply updating the table of wheat is authorized for the user. Typically, the table or the portion of the table being updated would be in the single server or set of servers.
  • an authorization table on the portable storage medium could be updated in the same fashion.
  • the user will be able to use an existing CD-ROM or other portable storage medium to access new servers, databases or services. It is also desirable to allow existing CD-ROM keys to be used to access new servers or databases or servers when the different host computers authorize access, as an alternative to or in lieu of referring access requests to a central server or set of servers per above.
  • each CD-ROM disk would include identification keys or tables or databases of identification keys that are initially not assigned to any server or database or service. These would then be assigned later to access new servers, computers, programs, databases or information functions or services.
  • This arrangement averts the need for distributing new CD-ROM disks whenever a new server is added.
  • Information about the new server or database or service, such as its name,, network address, and telephone number, along with the identification of the database of keys on the CD-ROM disk assigned to the new server must be added to the user's access program. For example, if 200 keys or key tables or one-time-pads of keys are already assigned to existing servers, the 201st key might be assigned to a new server.
  • This information would be included (in either encrypted or unencrypted form) on an update floppy disk or other portable medium, posted on a bulletin board or server, or updated automatically by the remote terminal access program during a subsequent communication session. Such information is typically the same for all users being granted access to the new server. If the user key is on a writable portable storage medium, the update information would typically be written directly to the portable storage medium.
  • the user's access program would typically store the update information for the new servers in a small file on the user's hard drives. If the users have a writable CD-ROM drive, the information could be added to the CD-ROM disk key. If the information about each server comprises no more than 50 characters, a 10 kilobyte disk file could contain information on at least 100 new servers. A file a few megabytes in size would allow a short description of each server. Eventually, the new servers would be included on updated CD-ROM disk keys distributed to all users.
  • CD-ROM key of the invention Informational, transactional, and promotional databases and services are all of ever- increasing commercial interest. Access can be controlled, verified, or tabulated by the CD-ROM key of the invention.
  • the individual CD-ROM disks may be provided with all or portions of these databases. The portions of the databases that change infrequently might be encoded on the users ' CD- ROM disks and updated when new disks are produced, whereas variable portions might typically be stored on the server.
  • the response speed of the user authentication system may be increased if the server or host computer being accessed begins the communication session in parallel with checking the user identification key from the user program against the database of user identification keys to authorize the user. This may be advantageous if the database of keys has a slow response time, e.g. during peak usage hours. It may also be advantageous if the server or host computer being accessed must take the time to contact another server or set of servers to check the database and obtain authorization, as discussed hereinbefore.
  • the host computer being accessed to run a fast key-check algorithm to check whether the user identification key is a valid key, and whether or not it belongs to the particular user.
  • the server being accessed could use this validity check and then grant a provisional or limited access, pending checking of the user identification key against the database .
  • provisional initiation of the transaction upon receipt of a valid identification by the host computer might be permitted, but the transaction is completed only when the ID is verified in the server's database.
  • This arrangement further improves response time for the user and reduces the speed requirements on the storage means. For example, a credit card transaction could be started upon receipt of a valid ID but not completed until after the ID has been checked with the database and approved.
  • the CD-ROM key of the invention may contain both unencrypted and encrypted versions of one or more identification keys.
  • the encryption is done before or as the disk is imprinted using a key and encryption method unknown to the user and using encryption means that are ideally unknown to the user.
  • the host computer which has the key, would be programmed to demand both the unencrypted version of the identification key and the encrypted version of the key.
  • the host computer then would be programmed to decrypt the encrypted version of the key and compare it with the unencrypted version. If the two keys are the same, then the user identification key is virtually certainly a valid key.
  • the public key would be held by the host computer only (and the inverse or private key would be held by the disk maker only) .
  • An intruder would have to generate a counterfeit identification with the corresponding encrypted version, which would require the inverse or private key.
  • Obtaining the key would be virtually impossible, even if the would- be counterfeiter obtained huge numbers of different user disks. Since the server does not have the private key, even illicitly accessing the server would not allow a counterfeiter to make new counterfeit user identification keys. Accordingly, counterfeiting of valid user identification numbers cannot be done.
  • a further security measure includes appending the encrypted version of the identification key to the unencrypted version to form a single longer key.
  • the final key may comprise two different encrypted versions of the unencrypted key.
  • the final key may be a function of both the unencrypted version and of a parity, hash, encryption function, or other function of the unencrypted version.
  • Such key-validity-check algorithms help protect against attempts to counterfeit or simulate user disks or portable storage media; they do not protect against the use of stolen user disks or portable storage media to gain at least provisional or limited access to the server.
  • One method to help protect against the use of stolen user disks or portable storage media to gain at least provisional or limited access in the above system is to provide each server with a list or database of known stolen keys; this database is much smaller than the complete database of user keys; it also can be checked more rapidly.
  • the computer does not make mistakes in entering an identification key. Accordingly, unless line disruption is indicated, the preferred software implementation will disconnect the user after only one attempt using any invalid CD-ROM identification key. This allows speedy rejection of attempts by hackers or other transgressors and avoids tying up the system with their illicit attempts. By disconnecting after one attempt, hackers cannot rapidly try multiple identification keys.
  • the server database of a preferred implementation of the invention contains an encrypted or otherwise altered version of the user identification keys.
  • the server of the invention employs a trap-door authentication algorithm to compare the user ID or access key recovered from the incoming data stream with the altered version in the server's own database for that user's claimed identity.
  • the trap-door authentication algorithm authenticates the user if and only if the encrypted identification key in the server's database represents the same identification key as the one embedded or encrypted in the incoming data stream.
  • the trap-door authentication algorithm is impractical to be used to recover the actual identification key from the encrypted key in the host computer's database. Since the server database does not contain the actual identification keys, and the trap-door authentication function is of no help in recovering them, mere possession of the host computer's database is not sufficient to recover the identification keys. Thus, stealing or copying the host computer's database of identification keys will not allow a thief to counterfeit the users' unique CD-ROM key access disks and thus will not allow the thief to access the system as a legitimate user.
  • One such trap door authentication algorithm is implemented as follows.
  • the users' unique identification keys are encrypted with a difficult-to-decrypt long-key code.
  • the encrypted key is copied into the host computer's database and the unencrypted identification key is written onto the user's CD- ROM key.
  • the host computer takes the identification key recovered from the incoming data stream from the user, encrypts it with the same means used to encrypt the database, and compares the encrypted key with the database entry for that user. If the keys are identical, the user is authenticated and access is granted.
  • each CD-ROM key is provided with multiple databases of identification and encryption keys.
  • the server or host computer is programmed to use or have access only to one database.
  • the copies of the other databases on the user's CD-ROM are stored in a vault. If the host computer's identification keys were ever stolen, the host computer can simply be loaded with one of the user databases from the vault and use the new identification keys. Since the user already has the new database of his new keys on his CD-ROM, there is no need to provide a new CD-ROM to all the users, and the thief remains locked out of the host computer.
  • the server then simply requests the new or different keys from the users ' program rather then requesting the previously used keys; the users' programs access a different location on the users ' CD-ROM keys or portable storage medium keys. If the users have individual databases or one-time pads of keys, the users' programs then access a different database on the users' CD- ROM keys or portable storage medium keys.
  • the server might also transmit a re-authentication code to access any key or database of keys or one-time-pad of keys.
  • a secure means to direct the users' computers to use a different database of identification keys on the CD-ROM is used. Any of the previously described authentication algorithms can be used for this purpose.
  • One technique is for the server to encrypt by private key the message with a time-dependent pad.
  • the user program on the CD-ROM then uses the public key, which is also stored on the CD-ROM, to decrypt the message, then checks that the time-dependent pad is correct and switches to an alternate user ID or identification key database.
  • the private key and the replacement database are given to the host computer at the same time.
  • the host computer may be provided with multiple databases wherein a specific combination is required to access any identification keys.
  • one database contains a one-time pad and the other contains the database of identification keys encrypt - ed using the one-time pad. A thief who stolen or copied only the database would be unable to recover any keys .
  • the change to another user ID can be made permanent by recording a word in a small file on the hard drive. Once the file is altered on all of the company's computers, the change is complete . This could be done at the next log-on for each user.
  • the host computer can use an array of inexpensive CD-ROM drives to store the database of identification keys. Advantages of this novel CD-ROM array approach include that the cost per megabyte is comparable to or less than that of magnetic disk drives, and that a drive failure almost always leaves the recorded data intact. The CD-ROM disk can simply be changed to another drive. In addition, there is the security advantage that the written data is in permanent form.
  • magnetic tape can optionally be used as a back-up means or as a redundant storage means for use in regenerating data. , or to store user keys or portions of the users' key tables or databases that are not yet needed.
  • the storage means then comprises a fast storage means (e.g. CD-ROM disks or hard disk drives) that stores data that is apt to be needed in the near future, and a slow storage means with larger capacity and lower cost (the magnetic tape) to store keys that are not yet needed.
  • the users ' CD-ROM disks may also contain a network access program, encryption routines, and other data and programs of utility to the users.
  • the portable large storage media may contain a readonly portion and a read-write portion, typically a write- once read-many portion or a write few, read many portion.
  • the read-only portion would typically contain programs or information common to many users, e.g. network access programs and/or encryption routines and/or other data or programs of utility to many users.
  • the readonly portion might include catalogs, advertising, or other commercial information.
  • the read-write portion or write- once read-many portion would typically contain the unique user access key codes and unique user encryption keys (if used) and any other information unique to the particular user .
  • the read-only portion of the users' disks could be imprinted quickly and economical - ly by pressing.
  • the individualized portion typically a write-once, read-many portion, would then be quickly recorded on an appropriate recording CD-ROM drive. This approach may prove advantageous in a variety of high- volume applications.
  • the medium may be "recharged" with new keys.
  • media keys are semiconductor memory units or cards, rewritable CD-ROM disks, floppy disks, and the like.
  • a user key comprising a portable storage medium with less capacity can be "recharged” from another user key compris- ing a portable storage medium of greater capacity.
  • a user's memory card key could be re-charged from that user's CD-ROM key.
  • a portable storage medium key can be re-charged at a secure computer, workstation, terminal, or facility.
  • a yet further alternative is an exchange program wherein a user's used-up portable storage medium is exchanged for a re-charged or fresh storage medium with a new supply of keys .
  • Conventional authentication means or any of the authentica- tion means of the invention can be used to insure that only the proper user with the proper storage key can re-charge same .
  • the portable storage medium key of the invention may be re-charged with additional funds or the like.
  • transaction information could be logged onto the portable storage medium, either as verification, or for later down-loading; e.g. if the card or portable storage medium is used with systems that do not contact the server of the secure system of the invention; e.g. systems that are not connected to a network .
  • the present invention may also be incorporated in a portable electronic device.
  • the portable electronic device may comprise portable storage media for storing the ultra- long identification keys and/or database of iden- tification keys.
  • a microprocessor and/or logic circuitry hereinafter referred to as a microprocessor, may be incorporated in the portable electronic device.
  • a microprocessor for many forms of memory IC, a simple microprocessor can be fabricated on the same IC at small or negligible cost. If the portable storage medium is a portable hard disk drive, the microprocessor or logic functions can typically be implemented by adding additional code or programming to the microprocessor already present in the hard disk drive; again the cost would be negligible.
  • the microprocessor can provide additional security functions.
  • any of the tasks described here as being performed by the microprocessor and/or clock of a portable electronic device may be performed by the microprocessor and/or clock of the remote terminal.
  • the microprocessor can be programmed to "re-charge" the storage medium with new keys, per above, including the relevant security precautions. Additional- ly, the microprocessor can be programmed to log transaction information, per above, e.g. for stand-alone use in situations where the user uses the portable electronic device to conduct transactions without access to a PC. In many implementations of such portable electronic devices, the microprocessor will provide additional security to prevent unauthorized individuals or software from accessing or copying or using the identification keys on the portable storage medium.
  • the microprocessor may be programmed to request a password from the user whenever the user attempts to access the identification keys on the portable storage medium.
  • the user In order to access the identification keys on the portable storage media, the user must enter his or her appropriate user identification password. The user may enter the password through the remote terminal or a keypad on the portable storage media.
  • the microprocessor may refuse access to the identification keys on the portable storage medium for a fixed period of time if several incorrect user passwords are typed in consecutively. For example, the microprocessor may prevent access to the identification keys on the portable storage media for an hour when three incorrect user identification passwords are typed in consecutively.
  • the portable electronic device may further comprise a clock.
  • the clock could be used, for example, to time the duration for which the microprocessor refuses access to the portable storage medium, as described hereinabove.
  • the duration of refusal could be timed by a software timing loop or by keeping a running sum of the (known) execution times of each of the functions executed by the microprocessor.
  • Clock circuits are inexpensive, and use little power. They can readily be powered for years by a small watch battery or the like. If the portable storage medium is a semiconductor memory, a clock circuit can readily be incorporated on the same IC as the memory and microprocessor.
  • the microprocessor may disable access to the portable storage medium if multiple incorrect user passwords are typed in consecutively. For example, the microprocessor may disable access when ten incorrect user passwords are typed in consecutively. Re- enabling the system might require human intervention from the central server or provision of a special password or erasure of the contents of the portable storage medium.
  • the microprocessor may limit the number of passwords or one-time-pad entries accessed from the portable storage device in any pre- specified amount of time. This would prevent rapid copying of the identification keys stored on the portable storage medium.
  • a timing function such as a clock or a software timing loop or running sum of execution times is required.
  • the microprocessor may be programmed to limit the number of identification keys or one-time-pad entries or the like accessed from the portable storage device in a given number of seconds, minutes, hours or days.
  • the microprocessor could prevent accessing identification keys or one-time-pad entries at a rate faster than they would be used by the user's terminal program, or could prevent accessing one-time-pad keys at a rate faster than the maximum transmission rate between the remote terminal and the host computer.
  • Other desirable rate limitations will readily be apparent to those skilled in the art .
  • the microprocessor may be programmed to output a time-dependent identification key or one-time-pad entry or the like; i.e. it may output a number that depends upon the time-of-day (including date) from the clock as well as upon the contents of the portable storage device.
  • the memory location or key accessed might depend upon the time-of-day, rather than the memory locations or keys being accessed in sequential order; i.e. the microprocessor selects the appropriate number or key from the portable storage medium based upon the current time.
  • the microprocessor may combine the entry accessed from the portable storage medium with time-of-day information. For example, the keys could be added or concatenated and the result encrypted by the microprocessor and sent from the portable electronic device.
  • time-dependent key techniques will readily be apparent to those skilled in the art.
  • the host computer server
  • the host computer would correspondingly be programmed to expect the result to be used as an identification key or as an encryption means; accordingly, the number outputted by the portable electronic device would be usable only at the time it was obtained.
  • the time-dependent key techniques can be used with any portable storage medium to produce keys that are only valid when produced; if the portable storage medium does not have its own local microprocessor, the above algorithms or similar algorithms can be implemented on the processor in the user's terminal or PC. They can also be used on the host computer or server; with the above algorithms or similar algorithms being implemented by the server or an outboard microprocessor, possibly associated with the key storage means. Accordingly, the above time-dependent key techniques can be operated in reverse to authenticate the server to the user in addition to authenticating the user to the server.
  • the microprocessor may be programmed to access the portable storage medium only if the user terminal is running on the user's machine.
  • the microprocessor can require an access protocol or password (possibly incorporating time-of-day information) .
  • the microprocessor may be programmed to access the portable storage medium only if the user terminal is accessing the host computer. For example, it might require an encrypted time-of-day function from the host computer. In addition to limiting access to the portable storage medium to legitimate requests, this authentication function would typically be made available to the user's terminal program.
  • an electronic portable storage medium or a portable electronic device may further comprise a PCMCIA interface or a serial port or a parallel port or SCSI port or "Firewire” port or infrared link or radio link or a "memory reader” or any other port or communication means capable of enabling it to pass information to and receive information from the user's terminal or computer.
  • a portable electronic device or memory medium which communicates with the remote terminal via an infrared link or radio link
  • the transmissions between the portable electronic device and the remote terminal are encrypted.
  • the processor and/or logic circuitry in the portable electronic device may also optionally handle communication with the user's computer or PC.
  • the portable electronic device may additionally record which identification keys and/or one-time-pad entries or the like have been previously accessed, hence presumably used; rather than the user's terminal program or access software performing this function. If the portable storage medium is rewritable, the identification keys, one-time-pads, and the like, may be overwritten once used. Alternatively, if the portable storage medium is writable, a usage record, table or list may be kept. Alternatively, e.g. if the portable storage medium is read-only, the portable storage device may further comprise a secondary writable portable storage medium, and a usage record, table or list may be kept there. This prevents an identification key or one-time- pad entry or the like from being used more than once.
  • Usage records can be alternatively kept in the server or host computer. Preferably usage records can be kept in both places and any discrepancy between usage records on the user's portable storage medium and on the server would suggest an attempt by a third party to illicitly gain access. Again, such a discrepancy might be indicated by any attempt by either the user program or the server to reuse a one-time-pad key or one-time-pad entry that has already been used with the server or user program respectively. Such a discrepancy may also be indicated by any attempt to use a key or pad entry out-of-sequence or any other "out-of-synch episode".
  • any attempt to use a known stolen user key or invalid or counterfeit user key suggests an attack, as does a usage pattern that suggests a user key may be stolen.
  • either or both may be programmed to contact or otherwise to notify the server. If the incident is detected by the server, the server may be programmed to contact the portable electronic device or user program.
  • Procedures for dealing with a suspected attack include but are not limited to: blocking access to the portable memory medium or portable electronic device for a set time; disabling access to the portable memory unit or portable electronic device (especially if the incident suggests that the unit or device has been stolen) ; blocking access by that device or unit or user to the server, either for a set time or until the situation is resolved (e.g. by the server operator); notifying the true user (e.g. by E-mail or telephone to the true user) ; or notifying the server operator.
  • the portable electronic device comprises a portable storage media, a microprocessor, and a modem. The microprocessor may handle the authentication protocols with the server.
  • the microprocessor may handle all encryption of information transmitted by the remote terminal via the modem and all decryption of information received from the host computer by the remote terminal via the modem. Including a modem also allows the microprocessor to be programmed to allow the user to conduct stand-alone transactions via the network and without later downloading when the user does not have access to a regular terminal or PC.
  • the host computer server
  • the remote terminal or portable electronic device would read the identification key from the appropriate location in the memory medium and it would be transmitted to the host computer.
  • the present security system in a most preferred embodiment, entails the use of a "double-sided" key technique comprising the use of separate entrance and exit keys at the beginning and end respectively of the communication session.
  • the remote terminal program (or portable electronic device) transmits an identification key to the host computer (server) at the beginning of the communication session, thereby authenticating itself to gain access.
  • the remote terminal (or portable electronic device) transmits a second identification key to the server at the end of the communication session; typically, this can be used to validate the session.
  • the server is programmed such that it will not process the information transmitted unless both identification keys are correct; e.g.
  • the user transactions would be received by the server during the session, but not accepted or validated or processed unless or until a valid exit key is received at the end of the session.
  • the first key functions to grant provisional access; the second key functions to provide the final authorization for the transactions.
  • the server In order to authenticate the server to the user's terminal program (or portable electronic device) , the server would transmit to the user separate entrance and exit keys in a directly analogous manner; one would typi- cally then have an exchange of identification keys between the user program and the server at both the beginning and the end of the communication session. Additionally, the identification keys may be time-dependent, e.g. using the techniques described hereinabove.
  • Authenticating the user and server to each other at the beginning and end of the session blocks attempts to simply "hijack" the communication session. However, it does not block attempts to insert information into or delete information from otherwise valid sessions.
  • the use of time-dependent identification keys imposes the further constraint that any tampering must be done in real time, and also blocks attempts to obtain valid entrance and exit keys, e.g. by using "man in the middle” techniques, and use them later.
  • authentication means to authenticate the entire session, or at least authenticate critical portions of the session, such as transaction information or transac- tion requests should always be included for maximizing security.
  • the session or critical portions thereof may be encrypted.
  • An unbroken encryption technique will serve to authenticate the encrypted messages or information.
  • encrypting the critical portions of the session using a one-time-pad stored on the portable storage medium key and in the central server will authenticate that information
  • check- functions Another technique to authenticate a session or the critical portions thereof is to calculate one or more check-sums or check- functions (hereinafter called check- functions) using means whereby it is (a) difficult or impossible to counterfeit the check-functions, and (b) difficult or impossible to fabricate spurious messages with the same check- function (s) as intercepted legitimate messages .
  • check-functions can be included in or combined with the above- discussed end-of-session key.
  • the end-of-session key will not only authenticate the user or server but it will also authenticate the contents of the session. For example, if the check-function (s) from the user to the server include the transaction information from the user, it authenticates that transaction information; if it includes the relevant messages from the server as well, it authenticates those as well; thus confirming that the user received the messages sent by the server. Moreover, if the check-function includes the entire session, it authenticates the entire session. If the check- function (s) include time-of-day information, either for the communication session or for individual messages, it authenticates that time-of-day information as well.
  • check- function (s) with the end-of-session key using a combining function that has good "diffusion", so that an attacker cannot separate the check- functions from the end-of-session key and attack them separately.
  • a combining function that has good "diffusion”
  • an attacker cannot separate the check- functions from the end-of-session key and attack them separately.
  • Other techniques include convolution or encrypting the combination of the two, using an encryption algorithm with good diffusion.
  • the combining function (s) have good "diffusion" so that it is not possible for a hacker to discover that some bits involve only the password, some bits involve only the checksum (s) and some bits only involve the time-of-day information; a combining function with good diffusion helps scramble them all together. Good diffusion may be achieved by simply adding the check-sums or functions to part or all of the exit signature, or convolve them or use other algorithms that mix the information. Yet another means would be to encrypt the two together with an encryption function that has good diffusion.
  • weight function there are various ways to combine a weight function with the messages or portions thereof; one way is to binary add without carrying on a bit-by-bit basis; another way is to group and multiply or group and add, typically throwing away the higher-order bits. One then typically sums the results of these operations.
  • the checksum or check function typically would either be that sum, or, preferably, the lower-order digits or bits of that sum.
  • One way of doing so is to have the starting point or order or both depend upon a number taken from a one-time-pad or provided by the server or user program or calculated from time-of-day information, etc. Since there are N! orderings for a set, the same pad can (optionally) be re-used at little risk (especially if only the lower-order bits of the sum are used, per above) .
  • Yet another way to calculate a check- function is to encrypt the message (s) locally, then calculate the checkfunction on the encrypted messages.
  • checksum or check- function may be combined with or include time-of-day information or (better) a function computed from time-of- day information.
  • the double-sided key or password technique of the invention can use keys or passwords from our portable storage medium, or from an algorithm or from a string sent out by the server, or by any other means of generating passwords.
  • the double-sided keys could be implemented by a unique algorithm for each user; for example, by encrypting the time-of-day with a key unique to each user.
  • the second password can come from the same database or circuit or algorithm as the first, or from a separate database or circuit or algorithm than the first. Note also that we can use two or more passwords, either from a single portable storage medium, database, circuit or algorithm, or from two or more algorithms, or two or more circuits or ICs. Alternatively, in lieu of a second key or password, the key or password is divided; one part is sent at the beginning of the session and the second part is sent at the end of the session.
  • the double-sided key technique conserves keys and therefore is particularly suitable for implementations of the new security system invention using semiconductor memory keys or portable electronic device keys with semiconductor memories, and for other implementations of the invention using portable memory media of limited capacity.
  • any of the techniques to detect and foil an illicit attack including attempts to break into the system or steal identification keys or hijack a communica- tion session may be combined with a program to create an entrapment session to keep the attacker or intruder linked or on the line to allow his call to be traced with a view to identifying or apprehending him.
  • the entrapment session might also include programming to elicit additional information from the attacker or intruder or his computer or from servers along the way.
  • any of the portable storage means of the present invention might also comprise programming to plant a "cookie” or information packet or a covert program or "identification virus” on an attacker's computer to facilitate subsequent identification of the attacker or at least of the computer he or she used.
  • the cookie or covert program would be planted upon detection of an illicit attack by any of the means described above.
  • Such programming may be a part of any user terminal program or user access program on the portable storage means or needed to run the portable storage means; it may also be a part of any software drivers needed to access same, or of any other user program included on or with our system.
  • the only function of the "identification virus” is detection and identification of hackers; it is a totally benign virus. It should be programmed to be non-executing unless queried or activated, e.g. by a server.
  • the server upon detection of an illicit attack, the server will plant the cookie or covert program in the attacker's computer, using means well-known to those skilled in the art (conventional cookies are normally planted by central servers and not by programming on the user's computer) .
  • a service provider's computer may be programmed to plant such a cookie or covert program upon detection of an illicit attack; the new security program would thus enable service providers to police their services.
  • the cookie would be routinely asked for or searched for by other programs that link to the computer or by Internet service providers or by the secured servers .
  • the covert program would routinely be activated or searched for or queried by other programs that link to the computer or by service providers or by the secured servers of the invention.
  • the covert program might also include means to capture the attacker's true identity; e.g. when the attacker uses it to access the Internet.
  • Such an ID program could additionally search out identifying information on the hacker's system, including but not limited to: name(s), software serial numbers, hardware identifying or serial numbers, account numbers, log-on information (e.g. user names, but preferably not passwords), or any other number or character string that is unique or associated with the owner or user(s) of the computer or with the computer itself. If the covert program is successful while the attacker is linked to the server (e.g. while the attacker is tied up with a dummy session as mentioned above) , it could then send the information to the server immediately.
  • the server e.g. while the attacker is tied up with a dummy session as mentioned above
  • covert program or identifying program or “identification virus” would typically include means to covertly access the central or host computer to permit the call to be traced, or means to send a covert E- mail to the server, along the lines "Here I am, come and get me . " , or other means to contact the central or host computer. Accordingly, the covert program would act as a "hacker homing device” or Internet dye marker, analogous to the dye markers used by banks . Additionally, any such covert program or cookie might record specific actions taken by the attacker, particularly actions that indicate criminal intent or intent to defraud. Alternatively, it could record the entire illicit access attempt (s) .
  • the system of the invention can include means to record the hacker's session, plus other sessions immediately after (e.g. in case the hacker uses the legitimate user's machine for something else; e.g. to send an E-mail.)
  • a particular advantage of the "identification virus” approach is that it is typically attached to an existing program and is not detectable as a separate file.
  • the tracer cookie of the invention might be appended to an existing cookie.
  • other means to hide the covert program or cookie or the like may be used; these include but are not limited to creating one or more hidden files, masquerading as a system or application file, marking it's block on the disk as "unusable” (and reversing same when one attempts to read it) and the like.
  • a virus might be non-executing unless queried or except under other restricted circumstances.
  • Such "cookies" or markers or programs could be planted in any of the intermediate servers or machines along the way; for example, this would allow the maintainers or operators of the servers to notify an Internet service provider that the service is being attacked.
  • auxiliary or dedicated processor or computer such as a "firewall processor”, or on a network processor, router, or switching system, instead of the host computer or server.
  • An auxiliary or dedicated processor or computer eliminates the need for the host computer to perform the authentication, decreasing the processing load of the host computer.
  • the CD-ROM or the other portable storage medium can be used to control access to, through, or under the control of, any stored-program processor capable of directly or indirectly accessing storage capacity sufficient to hold the requisite database of user key codes.
  • Indirect access may comprise remote access via a network or may comprise access from another processor or memory system.
  • the read-write portion or write- once read-many portion would typically contain the unique user access key codes and unique user encryption keys (when used) and any other information unique to the particular user.
  • the read-only portion of the users' disks could be imprinted quickly and economically by pressing.
  • the individualized portion typically a write-once, read-many portion, would then be quickly recorded on an appropriate recording CD-ROM drive. This approach may prove advantageous in a variety of high- volume applications.

Abstract

L'invention concerne un système de sécurité fondé sur l'utilisation de clés ultralongues pour limiter l'accès à un ordinateur ou à un serveur central, par un réseau tel que l'Internet ou Intranet, à partir d'un ordinateur à distance au moyen d'une 'clé de passage à double face' mise en oeuvre sur un support de mémoire portatif tel qu'un CD-ROM. La clé comporte des codes d'entrée ultralongs révisés de façon continue qui permettent d'accéder au serveur, et des codes de sortie ultralongs révisés de façon continue qui permettent d'authentifier ou de valider les transactions opérées au cours d'un accès autorisé et avant la fin de la connexion autorisée. Si le code de sortie approprié n'est pas reçu, les transactions de la connexion sont effacées, ce qui permet d'interrompre une connexion piratée. De plus, le support de mémoire portatif comporte des outils défensifs servant à écarter des attaques par intrusion dans le système de sécurité, notamment des marqueurs couleur électroniques et des balises électroniques de retour à l'origine qui servent à identifier et à localiser les intrus.
PCT/US1998/010355 1998-03-09 1998-05-22 Systemes de securite des communications sur internet, intranet et d'autres reseaux utilisant des cles d'entree et de sortie WO1999046691A1 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
JP2000536009A JP2002507025A (ja) 1998-03-09 1998-05-22 入口及び出口キー利用のインターネット、イントラネット及び他のネットワーク通信保護システム
AU77971/98A AU7797198A (en) 1998-03-09 1998-05-22 Internet, intranet and other network communication security systems utilizing entrance and exit keys

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US3729798A 1998-03-09 1998-03-09
US09/037,297 1998-03-09

Publications (1)

Publication Number Publication Date
WO1999046691A1 true WO1999046691A1 (fr) 1999-09-16

Family

ID=21893580

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US1998/010355 WO1999046691A1 (fr) 1998-03-09 1998-05-22 Systemes de securite des communications sur internet, intranet et d'autres reseaux utilisant des cles d'entree et de sortie

Country Status (3)

Country Link
JP (1) JP2002507025A (fr)
AU (1) AU7797198A (fr)
WO (1) WO1999046691A1 (fr)

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6349289B1 (en) * 1998-01-16 2002-02-19 Ameritech Corporation Method and system for tracking computer system usage through a remote access security device
WO2002042889A1 (fr) * 2000-11-24 2002-05-30 Nokia Corporation Securite accrue de transactions
JP2004507978A (ja) * 2000-09-01 2004-03-11 トップ　レイヤー　ネットワークス，インク． ネットワークノードに対するサービス拒絶アタックに対抗するシステム及び方法
WO2004088917A1 (fr) * 2003-04-01 2004-10-14 Entropic Technologies Pty Ltd Systeme de securisation des communications
US6850916B1 (en) * 1998-04-27 2005-02-01 Esignx Corporation Portable electronic charge and authorization devices and methods therefor
US6957198B2 (en) 2000-12-07 2005-10-18 International Business Machines Corporation Use of persona object in electronic transactions
EP1808977A1 (fr) * 2000-03-29 2007-07-18 Vadium Technology Inc. Cryptage de masque jetable avec un identifiant clé et un décalage depuis le point de départ
US7278023B1 (en) 2000-06-09 2007-10-02 Northrop Grumman Corporation System and method for distributed network acess and control enabling high availability, security and survivability
JP2010136421A (ja) * 2000-05-23 2010-06-17 Invicta Networks Inc 通信保護システムおよび方法
US11558372B2 (en) 2015-04-15 2023-01-17 Citrix Systems, Inc. Authentication of a client device based on entropy from a server or other device
GB2622432A (en) * 2022-09-16 2024-03-20 Hewlett Packard Development Co Values exclusions

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4550526B2 (ja) * 2004-08-27 2010-09-22 レノボ シンガポール プライヴェート リミテッド 情報処理システム、情報処理装置、登録サーバ、制御プログラム、及び制御方法
KR101718948B1 (ko) * 2015-10-02 2017-03-23 황순영 일회용 난수를 이용하여 인증하는 통합 인증 시스템

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5272754A (en) * 1991-03-28 1993-12-21 Secure Computing Corporation Secure computer interface
US5282247A (en) * 1992-11-12 1994-01-25 Maxtor Corporation Apparatus and method for providing data security in a computer system having removable memory
US5677953A (en) * 1993-09-14 1997-10-14 Spyrus, Inc. System and method for access control for portable data storage media

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5272754A (en) * 1991-03-28 1993-12-21 Secure Computing Corporation Secure computer interface
US5282247A (en) * 1992-11-12 1994-01-25 Maxtor Corporation Apparatus and method for providing data security in a computer system having removable memory
US5677953A (en) * 1993-09-14 1997-10-14 Spyrus, Inc. System and method for access control for portable data storage media

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7020628B2 (en) 1998-01-16 2006-03-28 Sbc Properties, L.P. Method and system for tracking computer system usage through a remote access security device
US6349289B1 (en) * 1998-01-16 2002-02-19 Ameritech Corporation Method and system for tracking computer system usage through a remote access security device
US7181421B2 (en) 1998-01-16 2007-02-20 Sbc Properties, L.P. Method and system for tracking computer system usage through a remote access security device
US6850916B1 (en) * 1998-04-27 2005-02-01 Esignx Corporation Portable electronic charge and authorization devices and methods therefor
EP1808977A1 (fr) * 2000-03-29 2007-07-18 Vadium Technology Inc. Cryptage de masque jetable avec un identifiant clé et un décalage depuis le point de départ
JP2010136421A (ja) * 2000-05-23 2010-06-17 Invicta Networks Inc 通信保護システムおよび方法
US7278023B1 (en) 2000-06-09 2007-10-02 Northrop Grumman Corporation System and method for distributed network acess and control enabling high availability, security and survivability
JP2004507978A (ja) * 2000-09-01 2004-03-11 トップ　レイヤー　ネットワークス，インク． ネットワークノードに対するサービス拒絶アタックに対抗するシステム及び方法
WO2002042889A1 (fr) * 2000-11-24 2002-05-30 Nokia Corporation Securite accrue de transactions
US6957198B2 (en) 2000-12-07 2005-10-18 International Business Machines Corporation Use of persona object in electronic transactions
WO2004088917A1 (fr) * 2003-04-01 2004-10-14 Entropic Technologies Pty Ltd Systeme de securisation des communications
US7581246B2 (en) 2003-04-01 2009-08-25 Entropic Technologies Pty Ltd. System for secure communication
US11558372B2 (en) 2015-04-15 2023-01-17 Citrix Systems, Inc. Authentication of a client device based on entropy from a server or other device
GB2622432A (en) * 2022-09-16 2024-03-20 Hewlett Packard Development Co Values exclusions

Also Published As

Publication number Publication date
JP2002507025A (ja) 2002-03-05
AU7797198A (en) 1999-09-27

Similar Documents

Publication Publication Date Title
US5771291A (en) User identification and authentication system using ultra long identification keys and ultra large databases of identification keys for secure remote terminal access to a host computer
US6073237A (en) Tamper resistant method and apparatus
US5349643A (en) System and method for secure initial program load for diskless workstations
US7254706B2 (en) System and method for downloading of files to a secure terminal
CA1238427A (fr) Methode de protection par codes cryptographiques
JP4463979B2 (ja) 暗号方式でカムフラージュされた暗号方式キーをストアし証明し使用する装置および方法
JP4091744B2 (ja) コンピュータ装置およびその動作方法
US5694471A (en) Counterfeit-proof identification card
US6246771B1 (en) Session key recovery system and method
CN100401271C (zh) 用于控制网络上的数据存取的方法和装置
CA2256881C (fr) Systeme automatique de communications publiques securitaires
US7177835B1 (en) Method and device for generating a single-use financial account number
US5548721A (en) Method of conducting secure operations on an uncontrolled network
US8251286B2 (en) System and method for conducting secure PIN debit transactions
US9356781B2 (en) Methods and apparatus for authenticating data as originating from a storage and processing device and for securing software and data stored on the storage and processing device
US20050044377A1 (en) Method of authenticating user access to network stations
US20060218097A1 (en) Method and device for generating a single-use financial account number
US20060075259A1 (en) Method and system to generate a session key for a trusted channel within a computer system
US20160321656A1 (en) Method and system for protecting information against unauthorized use (variants)
WO1996007256A1 (fr) Systeme de certification
US20010054147A1 (en) Electronic identifier
EP1604257B1 (fr) Procede et systeme d'identification d'une personne autorisee au moyen de mots de passe a usage unique non previsibles
WO1999046691A1 (fr) Systemes de securite des communications sur internet, intranet et d'autres reseaux utilisant des cles d'entree et de sortie
JPH07123086A (ja) Ｉｃカードを利用した著作物通信管理システム
WO2001084768A1 (fr) Procede d'authentification d'un utilisateur

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AL AM AT AU AZ BB BG BR BY CA CH CN CZ DE DK EE ES FI GB GE HU IL IS JP KE KG KP KR KZ LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK TJ TM TR TT UA UG UZ VN

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW SD SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
NENP Non-entry into the national phase

Ref country code: KR

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

NENP Non-entry into the national phase

Ref country code: CA

122 Ep: pct application non-entry in european phase