Method and apparatus for authenticating users on a network using a smart card

A method for authenticating a user over a network, with the network having a client computer and a server computer, and the client computer having a smart card reader for receiving a smart card, comprising the steps of:

• sending smart card interface program from the server to the client;
• receiving a request to store user data on the smart card;
• prompting a user for a key to access the smart card;
• initializing the smart card;
• formatting instructions to the smart card;
• accessing the smart card using said key;
• prompting the user for said user data;
• storing the user data to a file;
• and
• verifying the stored user data for the user.

An apparatus authenticating a user over a network, with the network having a client computer and a server computer, and the client computer having a smart card reader for receiving a smart card, comprising:

• means for receiving a request from the client to access restricted information stored by the server;
• means for sending a computer program from the server to the client;
• means for receiving an access code from the user to access the smart card;
• means for accessing user information stored on the smart card utilizing said program and said access code;
• means for comparing said user information with authentication information available to the server;
• and
• means for granting the client access to said restricted information if said user information matches said authentication information.

An apparatus for authenticating a user over a network, with the network having a client computer and a server computer, and the client computer having a smart card reader for receiving a smart card, comprising:

• means for sending a smart card interface program from the server to the client;
• means for receiving a request to store user data on the smart card;
• means for prompting a user for a key to access the smart card;
• means for initializing the smart card;
• means for formatting instructions to the smart card;
• means for accessing the smart card using said key;
• means for prompting the user for said user data;
• and
• means for storing the user data to a file.

A computer for authenticating a user over a network, comprising:

• a memory containing:
• a smart card interface program received from a server computer over the network having functions for accessing a smart card over the network to authenticate a user;
• a client computer program for invoking one of the functions of the server computer program;
• and
• a processor for running said smart card interface program and said client computer program.

A computer readable medium having stored thereon instructions which, when executed by a processor, cause the processor to perform steps for authenticating a user over a network using a smart card, said steps comprising:

• receiving a request from a client computer to access restricted information stored by a server computer;
• sending a smart card interface program from said server to said client;
• receiving an access code from the user to access the smart card;
• accessing user information stored on the smart card utilizing said program and said access code;
• comparing said user information with authentication information available to said server;
• and
• granting said client access to said restricted information if said user information matches said authentication information.

An apparatus authenticating a user over a network, comprising:

• a smart card having authentication information stored therein;
• a smart card reader coupled to said smart card;
• a client computer coupled to said smart card reader;
• a server computer in communication with said client computer over the network, said server computer controlling access to restricted information;
• means for reading authentication information from said smart card, and writing authentication information to said smart card, by said server;
• and
• means for authenticating the user by said server using authentication information stored on said smart card, and if authenticated, permitting access to said restricted information.