Two-factor computer password client device, system, and method

A system for protecting a network against unauthorized access while enabling an authorized accessing computer to access the network, said system comprising:

• a client device that connects to the authorized accessing computer, said client device constructing a two-factor password utilized by an authentication server to authenticate the accessing computer, said client device comprising:
• an input/output (I/O) port for interfacing the client device with the accessing computer, said I/O port receiving a user identification (user ID) from the accessing computer, and sending the two-factor password to the accessing computer;
• a database for storing a second factor;
• and
• a client application connected to the I/O port and the database, said client application being adapted to:
• retrieve the second factor from the database;
• combine the user ID and the retrieved second factor to form the two-factor password;
• and
• send the two-factor password to the I/O port for sending to the accessing computer;
• and
• an authentication server connected to the network for receiving the two-factor password and authenticating the accessing computer, said authentication server comprising:
• means for receiving the two-factor password sent from the accessing computer;
• means for determining whether the received user ID matches a stored user ID associated with the accessing computer;
• means for determining whether the received second factor matches a stored second factor associated with the accessing computer;
• and
• means for positively authenticating the accessing computer only if the received user ID matches the stored user ID, and the received second factor matches the stored second factor;
• wherein the user ID includes a plurality of predefined characters, and the second factor includes a plurality of predefined time intervals, and the client application is adapted to form the two-factor password by instructing the accessing computer to individually transmit each of the plurality of predefined characters to the server, wherein each character is separated from a previous character by a time interval drawn from the plurality of predefined time intervals.

A method of protecting a network against unauthorized access while enabling an authorized accessing computer to access the network, said method comprising:

• receiving from a user, a user identification (user ID);
• automatically constructing by the accessing computer, without further input from the user, a two-factor password comprising the user ID and a second factor added by the accessing computer, said two-factor password being utilized by an authentication server to authenticate the accessing computer;
• sending the two-factor password to the authentication server;
• verifying by the authentication server that the two-factor password received from the accessing computer matches a stored two-factor password associated with the accessing computer;
• and
• granting the accessing computer access to the network only if the two-factor password received from the accessing computer matches the stored two-factor password associated with the accessing computer;
• wherein the user ID includes a plurality of predefined characters, and the second factor includes a plurality of predefined time intervals, and the step of automatically constructing the two-factor password includes individually transmitting each of the plurality of predefined characters to the authentication server, wherein each character is separated from a previous character by a time interval drawn from the plurality of predefined time intervals.