Security systems for protecting an asset

A security system for controlling the access of a user to an asset, comprising a password-protected access interface and asset access means, the access interface comprising means for receiving user credentials comprising a password, wherein the access interface accepts user credentials in which the password is one of a recognized primary password and one or more recognized secondary passwords, the asset access means being operably associated with the access interface such that when the accepted user credentials comprise the primary password, the asset access means provides access to the asset, and when the accepted user credentials comprise one of the one or more secondary passwords, the asset access means provides relatively limited or feigned access to the asset, and when the user credentials do not comprise one of the primary password and the one or more secondary passwords, the asset access means denies access to the asset, wherein the asset comprises a credit card account, for which an authorized account user is provided with at least one credit card comprising a printed verification code thereon, and wherein the access interface comprises a password input request comprising a request for a verification code, wherein the appropriate verification code required as a component of the primary password differs from the printed verification code, and wherein at least one of the one or more secondary passwords comprises a verification code that is identical to the printed verification code on the credit card.

A security system for controlling the access of a user to an asset, comprising a password-protected access interface and asset access means, the access interface comprising means for receiving user credentials comprising a password, wherein the access interface accepts user credentials in which the password is one of a recognized primary password and one or more recognized secondary passwords, the asset access means being operably associated with the access interface such that when the accepted user credentials comprise the primary password, the asset access means provides access to the asset, and when the accepted user credentials comprise one of the one or more secondary passwords, the asset access means provides relatively limited or feigned access to the asset, and when the user credentials do not comprise one of the primary password and the one or more secondary passwords, the asset access means denies access to the asset, further comprising a password synchronization system that generates one-time password components for comparison with a component of passwords entered into the access interface, and wherein the primary password is a multi-part password comprising the one-time password component and at least one other component, the one-time password component being different from but having a relationship to a one-time password root provided by a password synchronization device, the relationship being defined by an algorithm according to predetermined rules that modifies the one-time password root to yield the one-time password component, and wherein the access interface is adapted to recognize entry of a password comprising the one-time password root as a possible attempt at unauthorized access to the asset.

An administrative graphical user interface for administering an electronic security system that provides an asset access graphical user interface controlling access to a protected asset through the use of user credentials comprising a primary password, the administrative graphical user interface comprising:

• a) user authentication means for entry of administrator credentials, wherein entry of valid administrator credentials identifies an authorized administrator of the security system;
• b) a security rule editing function accessible after entry of valid user credentials by the user authentication means, wherein the security rule editing function provides a display of security rules governing the response of the security system to attempted user access via the asset access graphical user interface and provides means for customizing the security rules, wherein the security rules can be edited to define a response of the security system to an entry in the asset access graphical user interface of one or more of a covert password component required for acceptance of the primary password, the absence of a covert password component required for acceptance of the primary password, and user credentials comprising at least one predetermined secondary password other than the primary password, wherein the administrative graphical interface is provided by a first party and the electronic security system is provided by a second party, the first party and the second party each having an independent relationship with an external authorizing agency, and wherein the user credentials comprise a Limited Use Credential used in place of a sensitive information item that is normally shared by the second party with the authorizing agency, wherein the Limited Use Credential is agreed upon between the first party and the authorizing agency as an acceptable substitute in place of the sensitive information item if provided by the second party, but wherein the Limited Use Credential is not accepted as a valid substitute in place of the sensitive information item if provided by a third party outside the scope of the agreement between the first party and the authorizing agency.