# US 2014/0096223 A1 · Automated security token administrative services

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0096223 A1
- Document ID: US20140096223A1
- Status: Published application
- Kind: A1
- Application number: 13/858,464
- Filed: 2013-04-08
- Published: 2014-04-03
- Earliest claimed: 2002-11-27
- Assignees: Activldentity, Inc.
- Inventors: Jamie Angus BAND
- Web page: https://patentgrep.com/patent/US20140096223A1

## CPC

- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- G06F 21/31: User authentication
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/33: using certificates
- G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards
- G06F 21/445: {by mutual authentication, e.g. between devices or programs}
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 21/604: {Tools and structures for managing or administering access control systems}
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G06Q 20/355: {Personalisation of cards for use}
- G06Q 20/367: {involving electronic purses or money safes}
- G06Q 20/3672: {initialising or reloading thereof}
- G06Q 20/3674: {involving authentication}
- G06Q 20/3676: {Balancing accounts}
- G06Q 20/3678: {e-cash details, e.g. blinded, divisible or detecting double spending}
- G06Q 20/4097: {using mutual authentication between devices and transaction partners}
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/102: {Entity profiles}
- G06F 2221/2101: Auditing as a secondary aspect
- G06F 2221/2103: Challenge-response
- G06F 2221/2119: Authenticating web pages, e.g. with suspicious links
- G06F 2221/2153: Using hardware token as a secondary aspect
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

This invention provides a system, method and computer program product to allow a user to access administrative security features associated with the use of a security token. The administrative security features provide the user the ability to unlock a locked security token, diagnose a security token, activate and deactivate a security token, request a replacement security token or temporary password or report the loss of a security token. The invention comprises a client application which integrates into the standard user login dialog associated with an operating system. A portion of the user dialog is linked to a remote server to access the administrative services.

## Claims

### Claim 1

A local client in processing communications with an authenticating computer system, the local client comprising:
one or more functionally connected user input devices;
a user interface that handles input and output with the user;
software that generates and sends an administrative access request to the authenticating computer system to perform at least one administrative security function, wherein the administrative access request includes said at least one credential; and
software that mediates the at least one administrative security function between the authenticating computer system, the client and the user, wherein the authenticating computer system responds to the administrative access request for performing the at least one administrative security function, wherein the at least one administrative security function authenticates the user to the authenticating computer system using the at least one credential, without requiring the user to log on to an operating environment associated with the local client.

### Claim at position 2

-4. (canceled)

### Claim 5

A local client in processing communications with a server, comprising:
one or more functionally connected user input devices;
a user interface that handles input and output with the user;
software that generates and sends an administrative access request to a server to perform at least one administrative security function, wherein the administrative access request includes at least one credential;
software that mediates at least one administrative security function between the server, the client and a security token, wherein the server responds to the administrative access request for performing the at least one administrative security function, wherein the at least one administrative security function includes authenticating the user to the server using at least one credential without requiring the user to log on to an operating environment associated with the local client.

### Claim 6 (depends on 6)

The local client, according to claim 6 wherein the server and the local client mutually authenticate to each other.

### Claim 7 (depends on 6)

The local client, according to claim 6 wherein the server is authenticated to the local client using a public key infrastructure methodology.

### Claim 8 (depends on 6)

The local client, according to claim 6 wherein the security token is unlocked.

### Claim 9 (depends on 6)

The local client, according to claim 6 wherein diagnostics are performed on the security token.

### Claim 10 (depends on 6)

The local client, according to claim 6 wherein the security token is reactivated and deactivated.

### Claim 11 (depends on 6)

The local client, according to claim 6 wherein a replacement security token is requested.

### Claim 12 (depends on 6)

The local client, according to claim 6 wherein a temporary password is enabled.

### Claim 13 (depends on 6)

The local client, according to claim 6 wherein the user is automatically allowed access to the system resources and services.

### Claim 14 (depends on 6)

The local client, according to claim 6 wherein the user reports that the security token has been lost, damaged or stolen.

### Claim 15 (depends on 6)

The local client, according to claim 6 wherein the processing communications includes a secure communications protocol.

### Claim 16 (depends on 15)

The local client, according to claim 15 wherein the secure communications protocol includes SSL, SSH, TLS, WAP or IPSEC.

### Claim 17 (depends on 7)

The local client, according to claim 7 wherein the public key infrastructure methodology includes challenge/response authentication or digital certificate exchange.

### Claim 18 (depends on 6)

The local client, according to claim 6 wherein the at least one credential includes at least one of: a passphrase, password, PIN, biometric scan, question and answer session.

### Claim at position 17

-24. (canceled)