US 6,480,958 B1Granted

Single-use passwords for smart paper interfaces

AssigneeXerox Corporation

InventorSteven J. Harrington

Life of this patent

Estimating the term…

Loading patent…

Abstract

A security control system for remote computers includes a first local input/output device for entering a user name and regular password. A password generator (10) returns a single-use password which is an encrypted combination of the user name, a representation of the regular password, and date and time information. A second local input device is used for entering the single-use password. A remote computer (50) receives the single-use password. The remote computer (50) has a cache (76) of previously received single-use passwords. The remote computer (50) compares the single-use password to the cache (76) of previously received single-use passwords. If there is a match further access is denied. Also included is a decryption key (78) which is used to regenerate the user name, the representation of the regular password, and the date and time information. If the date and time is older than a predetermined date and time threshold further access is denied. The remote computer (50) also compares the user name and the representation of the regular password to a stored list (86). If there is no match further access is again denied.

Claims33

Dependent claims

A security control system for remote computers comprising:

a first local input/output device for entering a user name and regular password;
a password generator accessed by the first local input/output device such that the password generator, in response to the user name and regular password, returns to the first input/output device a single-use password which is an encrypted combination of the user name, a representation of the regular password, and date and time information corresponding to the date and time the user name and regular password were entered;
a second local input device for entering the single-use password;
and,
a remote computer which receives the single-use password, the remote computer having;
a cache of previously received single-use passwords, wherein the remote computer compares the single-use password to the cache of previously received single-use passwords such that if there is a match further access to the remote computer is denied;
a decryption key, wherein the remote computer uses the decryption key to generate the user name, the representation of the regular password, and the date and time information from the single-use password;
a predetermined date and time threshold, wherein the remote computer compares the date and time generated by the decryption key to the predetermined date and time threshold such that if the date and time generated by the decryption key is older further access to the remote computer is denied;
and,
a list of representations of regular passwords with corresponding user names, wherein the remote computer compares the user name and the representation of the regular password generated by the decryption key to the list such that if there is no match further access to the remote computer is denied.

7 more elements

Dependencies are inferred from the claim text.