Mutual authentication between a hardware token and non-networked device
AssigneeMozarc Medical US LLC
InventorsArindam Ghosh Roy, Sharath T. Nagendra
Life of this patent
Estimating the term…
Abstract
Systems and methods for performing mutual authentication between a hardware access token and a reader device are provided. The systems and methods include reading a unique or pseudo-unique identifier of the hardware access token and computing a password for the hardware access token based on the unique or pseudo-unique identifier and a group secret of the reader device.
Claims20
A method for performing mutual authentication between an access token and at least one processor of at least one biomedical device, comprising:
- generating, by the at least one processor of the at least one biomedical device, a generated password from:
- a token identifier of the access token, and
- a first secret stored on the reader device;
- accessing, by the at least one processor, an onboard data structure of the access token, upon a first authentication, by the access token, of the generated password based at least in part on a predefined password stored on the access token, to obtain a second secret and role of a user of the access token, the role being associated with at least one access level;
- determining, by the at least one processor, generated authentication data based at least in part on a hash of the second secret;
- and
- causing the at least one biomedical device, by the at least one processor, in response to a second authentication, by the at least one processor of the access token, based at least in part on the generated authentication data matching predefined authentication data, to enable the user associated with the access token to control the at least one biomedical device in at least one access-controlled mode, the at least one access controlled mode comprising functionality associated with the at least one access level of the role of the user.
A biomedical device configured for performing mutual authentication with an access token, comprising:
- at least one processor in communication with at least one non-transitory computer-readable medium having instructions stored thereon, wherein the at least one processor, upon execution of the instructions, is configured to:
- generate a generated password from:
- a token identifier of the access token, and
- a first secret stored on the reader device;
- access an onboard data structure of the access token, upon a first authentication, by the access token, of the generated password based at least in part on a predefined password stored on the access token, to obtain a second secret and role of a user of the access token, the role being associated with at least one access level;
- determine generated authentication data based at least in part on a hash of the second secret;
- and
- cause the at least one biomedical device, in response to a second authentication, by the at least one processor of the access token, based at least in part on the generated authentication data matching predefined authentication data, to enable the user associated with the access token to control the at least one biomedical device in at least one access-controlled mode, the at least one access controlled mode comprising functionality associated with the at least one access level of the role of the user.
Dependencies are inferred from the claim text.