Single sign-on system, method, and access device

A computerized access device for securely sending a multi-character password to an authentication device, said access device comprising:

• means for receiving a User ID and an associated password from a user;
• means for sending from the access device to the authentication device, only the User ID;
• means for receiving from the authentication device, an index value associated with the User ID;
• a database for storing a plurality of password modification time intervals;
• means for extracting from the database, at least one password modification time interval stored at a database location corresponding to the index value;
• means for modifying the password received from the user by dividing the password into a plurality of password segments and placing each segment in a different one of a plurality of data packets;
• and
• means for transmitting the modified password from the access device to the authentication device, wherein each of the plurality of data packets is individually transmitted separated in time from a previous packet by one of the plurality of time intervals.

A computer-implemented method enabling a user to securely access a plurality of password-protected servers with a single entry of the user's User ID and associated password, said method comprising the steps of:

• receiving in an access device, the User ID and the associated password from the user;
• sending only the User ID from the access device to each of the password-protected servers;
• receiving from each of the password-protected servers, a response containing information regarding modifications to be made to the password, wherein the information received from each of the password-protected servers includes information for determining a plurality of time intervals which are different for each server;
• creating a plurality of modified passwords based at least in part on the information received from each of the password-protected servers, wherein each modified password corresponds to one of the password-protected servers, wherein each modified password is divided into a plurality of password segments and each segment is placed in a different one of a plurality of data packets;
• and
• transmitting each of the plurality of modified passwords from the access device to the corresponding password-protected server, wherein the transmitting step includes, for each modified password, individually transmitting each of the plurality of data packets to the corresponding password-protected server, wherein each data packet is separated in time from a previous packet by one of the plurality of time intervals.

A computerized access device for enabling a user to securely access a plurality of password-protected servers with a single entry of the user's User ID and associated password, said access device comprising:

• means for receiving the User ID and the associated password from the user;
• means for sending only the User ID from the access device to each of the password-protected servers;
• means for receiving from each of the password-protected servers, a response containing information regarding modifications to be made to the password, wherein the information received from each of the password-protected servers includes information for determining a plurality of time intervals which are different for each server;
• means for creating a plurality of modified passwords based at least in part on the information received from each of the password-protected servers, wherein each modified password corresponds to one of the password-protected servers, wherein each modified password is divided into a plurality of password segments and each segment is placed in a different one of a plurality of data packets;
• and
• means for transmitting each of the plurality of modified passwords from the access device to the corresponding password-protected server, wherein for each modified password, each of the plurality of data packets is individually transmitted to the corresponding password-protected server, wherein each data packet is separated in time from a previous packet by one of the plurality of time intervals.

A system for enabling a user to securely access a plurality of password-protected servers with a single entry of the user's User ID and associated password, said system comprising:

• an access device comprising:
• means for receiving the User ID and the associated password from the user;
• means for sending only the User ID from the access device to each of the password-protected servers;
• means for receiving from each of the password-protected servers, a response containing information regarding modifications to be made to the password, wherein the information received from each of the password-protected servers includes information for determining a plurality of time intervals which are different for each server;
• means for creating a plurality of modified passwords based at least in part on the information received from each of the password-protected servers, wherein each modified password corresponds to one of the password-protected servers, wherein each modified password is divided into a plurality of password segments and each segment is placed in a different one of a plurality of data packets;
• and
• means for transmitting each of the plurality of modified passwords from the access device to the corresponding password-protected server, wherein for each modified password, each of the plurality of data packets is individually transmitted to the corresponding password-protected server, wherein each data packet is separated in time from a previous packet by one of the plurality of time intervals;
• and
• a plurality of server applications associated with the plurality of password-protected servers, wherein each given server application comprises:
• means for recognizing the User ID and determining the information regarding modifications to be made to the password, wherein the information is unique to each server application and each User ID;
• means for sending the information to the access device;
• and
• means for authenticating a modified password received from the access device, wherein the password is modified with the information sent to the access device by the given server application, wherein the password is positively authenticated only if the received password segments match stored password segments for the User ID, and the time intervals between the data packets match time intervals corresponding to the information sent to the access device.

A computer program loaded on a non-transitory internal memory of an access device, wherein the program includes a plurality of code portions which, when run on a processor of the access device, cause the access device to securely access a plurality of password-protected servers with a single entry of a user's User ID and associated password by performing the following steps:

• receiving in the access device, the User ID and the associated password from the user;
• sending only the User ID from the access device to each of the password-protected servers;
• receiving from each of the password-protected servers, a response containing information regarding modifications to be made to the password, wherein the information includes an index value pointing to a particular memory location in a database in the access device, said database storing a plurality of password modifications;
• creating a plurality of modified passwords based at least in part on the information received from each of the password-protected servers, wherein each modified password corresponds to one of the password-protected servers, wherein the creating step includes, for each modified password:
• utilizing the index value to retrieve at least one password modification from the database, wherein the at least one password modification includes a plurality of time intervals;
• and
• modifying the password with the at least one password modification retrieved from the database, wherein the modifying step includes dividing the password into a plurality of password segments and placing each segment in a different one of a plurality of data packets;
• and
• transmitting each of the plurality of modified passwords from the access device to the corresponding password-protected server, wherein the transmitting step includes individually transmitting each of the plurality of data packets separated in time from a previous packet by one of the plurality of time intervals.