Method for authenticating the identity of a user of an information system

Patent 4218738 Issued on August 19, 1980. Estimated Expiration Date:

May 5, 1998. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.

Abstract Claims Description Full Text

Patent References

3594727

3624357

3764742

3798359

3798605

Block cipher system for data security
Patent #: 3958081
Issued on: 05/18/1976
Inventor: Ehrsam , et al.

Product block cipher system for data security Patent #: 3962539
Issued on: 06/08/1976
Inventor: Ehrsam , et al.

Inventors

Application

No. 05/903286 filed on 05/05/1978

US Classes:

705/72, Verifying PIN340/5.26, Code rotating or scrambling340/5.54, Password340/5.6, Coded record input (e.g., IC card or key)340/5.85, Password380/277, KEY MANAGEMENT380/45, Multiple key level705/71, Including key management713/185Using record or token

Examiners

Primary: Boudreau, Leo H.

Attorney, Agent or Firm

Lester; Edwin

International Classes

G06F 21/00 (20060101)
G07F 7/10 (20060101)

Abstract

Secure hardware is provided for cryptographically generating a verification pattern which is a function of a potential computer user's identity number, the potential computer user's separately entered password, and a stored test pattern. The test pattern for each authorized computer user is generated at a time when the physical security of the central computer and its data can be assured, such as in a physically guarded environment with no teleprocessing facilities operating. Secure hardware for generating verification patterns during authentication processing and for generating test patterns during the secure run is disclosed which uses a variation of the host computer master key to reduce risk of compromise of total system security. The use of a variant of the host master key prevents system programmers and/or computer operators from compromising the integrity of the authentication data base by, for example, interchanging entries and/or inserting new entries.

Other References

Feistel, "Cryptography and Computer Privacy," Scientific American, vol. 228, No. 5, May 1973, pp. 15-23
Feistel et al., "Some Cryptographic Tech. for Machine to Machine Data Comm.," Proc. of IEEE, vol. 63, No. 11, Nov. 1975, pp. 1545-1554
Diffie et al., "New Directions in Cryptography," IEEE Trans. on Information Theory, Nov. 1976, pp. 644-654