Password protocol for data communication system
AssigneeCerticom Corp.
InventorsDaniel R. L. Brown, Marinus Struik
Life of this patent
Estimating the term…
Abstract
A password protocol uses a multiple word password and provides prompts to a user allowing the user to select the next word in the password from a set of words. The selection of a word causes a client to perform a cryptographic operation and generate a new selection of words. After the password is completely entered, a key is generated from the words selected.
Claims20
A method to control access to a data communication system with a password, said password having a plurality of components, said method comprising:
- providing a first plurality of possible choices to a user using an output device, said first plurality of possible choices for selection by said user of a first component of said password;
- receiving a first selection from said first plurality of choices using an input device, said first selection indicative of said first component of said password;
- performing a cryptographic operation upon said first selection to generate a first output using a cryptographic engine;
- utilizing said first output to provide a second plurality of choices to said user using the cryptographic engine, said second plurality of possible choices for selection by said user of a second component of said password;
- receiving a second selection from said second plurality of choices using the input device, said second selection indicative of said second component of said password;
- and
- computing a user key from said first and second selections using the cryptographic engine.
A system for controlling access to a data communication system with a password, said password having a plurality of components, said system comprising:
- a client device configured to receive input and provide output to a user and capable of communicating with at least one other entity in said data communication system, said client device comprising a cryptographic engine being configured for:
- providing a first plurality of possible choices to said user, said first plurality of possible choices for selection by said user of a first component of said password;
- receiving a first selection from said first plurality of choices, said first selection indicative of said first component of said password;
- performing a cryptographic operation upon said first selection to generate a first output;
- utilizing said first output to provide a second plurality of choices to said user, said second plurality of possible choices for selection by said user of a second component of said password;
- receiving a second selection from said second plurality of choices, said second selection indicative of said second component of said password;
- and
- computing a user key from said first and second selections.
Dependencies are inferred from the claim text.