Abstract

A method for permitting access to secured computer resources based upon a two-piece user verification process. In one embodiment of the invention, the user verification process is carried out during a secure power-up procedure. At some point during the secure power-up procedure, the computer user is required to provide an external token or smart card that is coupled to the computer through specialized hardware. The token or smart card is used to store an encryption algorithm furnished with an encryption key that is unique or of limited production. The computer user is then required to enter a plain text user password. Once entered, the user password is encrypted using the encryption algorithm contained in the external token to create a peripheral password. The peripheral password is compared to a value stored in either secure system memory or in memory contained within a secured resource itself. If the two values match, access to the secured resource is permitted. In an alternate embodiment of the invention, the two-piece authentication process is conducted during normal computer operation outside of the secure power-on sequence. In this embodiment of the invention, the user password is entered by means of a secure keyboard communications channel. In either embodiment, the two-piece nature of the authorization process requires the presence of both the user password and the external token in order to generate the peripheral password.

Other References

• Applied Cryptography, Second Edition, pp. 1-74, 1996
• Electronic Design, Products Newsletter, p. 167, Nov. 1996
• Dallas Semiconductor, 64Kbit Touch Memory, DS1996, 1995
• Dallas Semiconductor, Touch Memory Starter Kit, DS9092K, 1995
• Dallas Semiconductor, Touch COM Port Adapter, DS9097/DS9097E, 1995
• Dallas Semiconductor Touch Multikey, DS1991, 199