Back to results
US 7,072,869 B2Granted
Integrated circuit card with situation dependent identity authentication
AssigneeMicrosoft Corporation
InventorScott B. Guthery
Life of this patent
Estimating the term…
Abstract
This invention concerns an integrated circuit (IC) device, such as smart cards, electronic wallets, PC cards, and the like, and various methods for authenticating identities and authorizing transactions based on the authenticated identities in a situation-dependent manner.
Claims12
An integrated circuit (IC) device comprising:
- storage means;
- processor means coupled to access the storage means;
- cryptographic program means on the storage means for performing cryptographic functions;
- an authentication vector stored in the storage means to track identities that axe authenticated;
- a plurality of masks stored in the storage means and combinable with the authentication vector to change the identities that are authenticated, each mask being configured to either extend or restrict the identities that are authenticated by the authentication vector;
- an authorization table stored in the storage means that defines authorization for a particular transaction as an evaluatable expression of authenticatable identities;
- and
- wherein the processor means is configured to combine the mask with the authentication vector to provide an effective authentication vector and to use the effective authentication vector to evaluate the evaluatable expression of authenticatable identities for a particular transaction.
5 more elements
An integrated circuit (IC) device comprising:
- storage means;
- processor means coupled to access the storage means;
- cryptographic program means on the storage means for performing cryptographic functions;
- an authentication vector stored in the storage means to track identities that are authenticated;
- a plurality of masks stored in the storage means and combinable with the authentication vector to change the identities that are authenticated, each mask being configured to either extend or restrict the identities that are authenticated by the authentication vector;
- a plurality of files in the storage means, individual files having at least one mask associated therewith;
- an authorization table stored in the storage means that defines authorization for a particular transaction as a Boolean expression of authenticatable identities;
- and
- wherein the processor means is configured to combine the mask with the authentication vector to provide an effective authentication, vector, and to use the effective authentication vector to evaluate the Boolean expression for a particular transaction.
6 more elements
A system comprising:
- data storage means;
- an authentication vector on the data storage means to track identities that are authenticated;
- a mask on the data storage means to change identities that are authenticated;
- code means for combining the mask with the authentication vector to change the identities that are tracked by the authentication vector;
- and
- an authorization table that defines authorization for a particular transaction as a Boolean expression of authenticatable identities, and wherein the code means evaluates Boolean expressions after combining the mask with the authentication vector.
3 more elements
Dependencies are inferred from the claim text.