US 2009/0158038 A1 · UNIVERSAL AUTHENTICATION METHOD

Abstract

The present invention is directed to a universal authentication method that is more secure than conventional methods found on most electronic systems. The universal authentication method does not send passwords over hard wires or wireless systems. Consequently, it is difficult for would be password thief to intersect password data. It can also provide a further layer of security by providing rotating passwords. The universal authentication method also provides security against a “middle man” type scam. Scammers will e-mail an unsuspecting internet user about problems with his bank account, for example, and request the user to rectify the problems providing a link to follow. The link takes the user to a websites that looks exactly like the banks website. When the user enters his username and password to this bogus website, the information is passed on to the real bank website allowing the scammer access to the user's bank account. The universal authentication method provides web site authentication security by using the website name as an identifier and adding the IP address of the website as part of the encryption key. And, because users do not need to remember or generate passwords, the encryption key can be totally random in size and nature.

Claims14

Dependent claims

a method for one way authentication using a challenge and response system where a first apparatus (requester) initiates a request for authentication to a second apparatus (authenticator), the method comprising the steps of:

a. the authenticator passing its unique identifier and a randomly generated character string to the requester;
b. the requester uses the identifier to retrieve an encryption key for the authenticator and encrypts the passed in randomly generated character string;
c. the encrypted character string and the requester's unique identifier is passed back to the authenticator;
d. the authenticator retrieves the encryption key that corresponds to the received identifier and decrypts the encrypted character string;
e. if the decrypted character string matches the random character string sent in the initial request, the requester is authenticated

2 more elements

Dependencies are inferred from the claim text.

Universal authentication method

Life of this patent

Universal authentication method

Life of this patent

Abstract

Claims14