Method for authenticating the user of a data station connected to a computer system

Patent 5323146 Issued on June 21, 1994. Estimated Expiration Date:

September 22, 2012. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.

Abstract Claims Description Full Text

Patent References

Cryptographic apparatus and method
Patent #: 4200770
Issued on: 04/29/1980
Inventor: Hellman , et al.

Exponentiation cryptographic apparatus and method
Patent #: 4424414
Issued on: 01/03/1984
Inventor: Hellman , et al.

Method for certifying the origin of at least one item of information stored in the memory of a first electronic device and transmitted to a second electronic device, and system for carrying out the method
Patent #: 4549075
Issued on: 10/22/1985
Inventor: Saada , et al.

Method and apparatus for protecting stored and transmitted data from compromise or interception
Patent #: 4596898
Issued on: 06/24/1986
Inventor: Pemmaraju

On-line and off-line transaction security system using a code generated from a transaction parameter and a random number
Patent #: 4630201
Issued on: 12/16/1986
Inventor: White

Electronic funds transfer system with means for verifying a personal identification number without pre-established secret keys
Patent #: 4797920
Issued on: 01/10/1989
Inventor: Stein

Method and system for personal identification using proofs of legitimacy
Patent #: 4995081
Issued on: 02/19/1991
Inventor: Leighton, et al.

Databaseless security system
Patent #: 5120939
Issued on: 06/09/1992
Inventor: Claus, et al.

Method for generating random number for the encoded transmission of data
Patent #: 5148007
Issued on: 09/15/1992
Inventor: Kruse

Method for testing a terminal communicating with chip cards Patent #: 5208447
Issued on: 05/04/1993
Inventor: Kruse

Inventor

Glaschick, Rainer

Assignee

Siemens Nixdorf Informationssysteme AG

Application

No. 773602 filed on 09/22/1992

Examiners

Primary: Chan, Eddie P.

Attorney, Agent or Firm

McCormick, Paulding & Huber

International Classes

G06F 012/14
G06F 007/58
H04K 001/02

Foreign Application Priority Data

1990-03-20 DE

Abstract

In a process for authenticating a user using a data station (16) in relation to a computer system (14) connected to the data station (16), a first value z is determined in the computer system (14) from an identification word (u) stored for the user in the computer system and a random number r generated in the computer system, and a second value y is determined in the computer system (14) from the password a given by the user and the random number r. The password a is encoded before being sent to the computer system (14) and coded there by a one-way function (30). As a result of these measures, the password a does not appear in the clear text at any point in the data transmission.

Other References

Diffie, W., & Hellmann, M. E., New Directions in Cryptography, IEEE Transactions on Information Theory, vol. IT-22, No. 6, Nov. 1976 pp., 135-145
Mark, T.; Lomas, A.; & Gong L., Reducing Risks from Poorly Chosen Keys, ACM SIGOPS Review, Dec. 89, vol. 23, pp. 14 to 1