Methods for authentication
AssigneeNewport Scientific Research LLC
InventorJeffrey L. Crandell
Life of this patent
Estimating the term…
Abstract
A method for managing access to application software contained on a computer system or network. The computer system utilizes an authentication component that is configured to receive a unique user account identifier and to generate an authentication passkey by using an identifying data element, typically called a “password”. The identifying data elements are collected from one or more input devices and used as an encryption key for the user account identifier. The generated authentication passkey is used in an authentication transaction associated with the application software instead of the identifying data element thereby reducing data security risks if the identifying data element alone were discovered due to other unknowns including the encryption elements.
Claims23
A method comprising the steps of:
- providing a user account identifier for a resource to an authentication component of a computer system;
- providing an identifying data element to the authentication component, the identifying data element being associated with the user account identifier;
- combining the user account identifier, identifying data element and a resource identifier into a single data element;
- generating a passkey by encrypting the single data element using the identifying data element as a key;
- storing the passkey at an application database;
- generating a subsequent passkey from the user account identifier and the identifying data element provided to the authorization component;
- and
- comparing the subsequent passkey to the stored passkey.
A method comprising the steps of:
- providing a resource identifier to an authentication component of a computer system;
- providing an identifying data element to the authentication component, the identifying data element being associated with the resource identifier;
- combining a user account identifier, the identifying data element and the resource identifier into a single data element;
- generating a passkey by encrypting the single data element using the identifying data element as a key to encryption;
- storing the passkey at an application database;
- generating a subsequent passkey from the resource identifier and the identifying data element provided to the authentication component;
- and
- comparing the subsequent passkey to the stored passkey.
A method comprising the steps of:
- providing a user account identifier for a resource to an authentication component of a computer system;
- providing an identifying data element to the authentication component, the identifying data element being associated with the user account identifier, wherein the identifying data element is stored in an account identifying record;
- combining the user account identifier, identifying data element and a resource identifier into a single data element;
- generating a passkey by encrypting the data element using the identifying data element as a key;
- determining if the account identifier record contains the account identifier;
- determining if the account identifier record contains a stored passkey associated with the account identifier;
- updating a resource record by storing the passkey associated with the account identifier in response to no passkey being associated with the account identifier;
- generating a subsequent passkey from the user account identifier and the identifying data element provided to the authorization component;
- comparing the subsequent passkey to the stored passkey;
- and
- granting access to the resource in response to the subsequent passkey matching the stored passkey.
A method comprising the steps of:
- providing a user account identifier for a resource to an authentication component of a computer system;
- providing an identifying data element to the authentication component, the identifying data element being associated with the user account identifier;
- creating a biometric template including data associated with the resource, the data including the identifying data element and the account identifier;
- combining the user account identifier, identifying data element and a resource identifier into a single data element;
- generating a passkey by encrypting the single data element using the identifying data element as a key;
- storing the passkey at an application database;
- generating a subsequent passkey from data stored in the biometric template;
- comparing the subsequent passkey to the stored passkey;
- and
- granting access to the resource in response to the subsequent passkey matching the stored passkey.
Dependencies are inferred from the claim text.