System and method for using internet based caller ID for controlling access to an object stored in a computer

• US 20020116616A1
• Filed: 04/12/2002
• Published: 08/22/2002
• Est. Priority Date: 01/19/1999
• Status: Active Grant

• Current Assignee: Albert Teng, James Mi, Vishesh Parikh
• Original Assignee: Albert Teng, James Mi, Vishesh Parikh
• Inventors: Teng, Albert, Parikh, Vishesh, Mi, James
• Granted Patent: US 6,523,067 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for controlling access to an object. The system stores an object and a processor identifier. The system includes a verification agent that can access information embedded in a processor and then calculate from that embedded information a value that may be compared with the stored processor identifier. A comparison agent is used to compare that value with the processor identifier to determine whether the processor corresponds to the processor identifier. If the value that the verification agent returns matches the processor identifier, then the computer grants the user access to the object.

Claims

1. A system for controlling access to an object comprising:

an accessible object;

a processor identifier associated with the object;

a verification agent for accessing information embedded in a processor and calculating from that embedded information a value that may be compared with the processor identifier; and

a comparison agent for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

2. The system of claim 1 further comprising a server that includes:

a session identifier generator for generating a session identifier;

a plurality of verification agents, each including a different secret key and a calculator for calculating a return value that is a function of the embedded information, the secret key and a session identifier;

a selection agent for selecting a verification agent; and

a transmitter for transmitting a selected verification agent from the server to a client computer that contains the processor.

3. The system of claim 2 wherein the server is a web server that stores the object in a web site, and the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.

4. The system of claim 3 wherein the calculator is a hash engine for calculating a return value comprising a hash value calculated from the combination of the embedded information, the server identifier, a secret key and a session identifier.

5. The system of claim 4 wherein the comparison agent compares the return value to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

6. The system of claim 5 wherein the web server further includes a timer for disconnecting the web server from a client computer when the verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

7. The system of claim 2 wherein the server includes a processor number generator for generating a processor number from the return value, the secret key and the session identifier.

41. The system of claim 6 wherein the same verification agent is used to access information embedded in a processor until the timer disconnects the web server from the client computer.

8. A machine readable storage medium having stored therein programming instructions which, when executed by a central processing unit, permit access to information embedded in a processor and subsequently calculate from that embedded information a value that may be compared with a processor identifier stored in a server.

9. The machine readable storage medium of claim 8 wherein the programming instructions include instructions for:

selecting a verification agent from a plurality of verification agents; and

transmitting a selected verification agent from the server to a client computer.

10. The machine readable storage medium of claim 9 wherein each verification agent includes programming instructions for calculating a hash value.

11. The machine readable storage medium of claim 10 wherein the programming instructions further include instructions for comparing a hash value calculated from the combination of the embedded information, a server identifier, a secret key, and a session identifier, to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

12. The machine readable storage medium of claim 11 wherein the programming instructions further include instructions for disconnecting a server from a client computer when the verification agent does not return to the server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

14. The system of claim 13 wherein:

the means for storing the object is a web server that stores the object on a web site; and

the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.

15. The system of claim 14 wherein the web server includes:

means for generating a session identifier;

a plurality of verification agents, each containing a different secret key and means for calculating a hash value from the combination of the embedded information, the server identifier, the secret key and a session identifier;

means for selecting a verification agent; and

means for transmitting a selected verification agent from the web server to a client computer.

16. The system of claim 15 wherein the web server further includes means for disconnecting the web server from the client computer when the selected verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, a secret key and a session identifier.

18. The method of claim 17 wherein:

the computer is a web server that stores the object on a web site; and

the processor identifier is stored in the web server and comprises a hash value calculated from the combination of a processor number and a server identifier.

19. The method of claim 18 further including the steps of:

generating a session identifier; and

calculating a hash value from the combination of the embedded information, the server identifier, a secret key and a session identifier.

13. A system for controlling access to an object comprising:

means for storing the object;

means for storing a processor identifier;

means for accessing information embedded in a processor;

means for calculating from that embedded information a value that may be compared with the processor identifier; and

means for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

17. A method for controlling access to an object comprising the steps of:

storing the object in a computer;

storing a processor identifier in the computer;

accessing information embedded in a processor;

calculating from that embedded information a value that may be compared with the processor identifier; and

comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

20. A method for enabling a platform to access via the Internet an object stored on a web server comprising:

storing a platform identifier on the web server;

receiving a request from a platform for access to the object;

initiating a dynamic call-back process for dynamically accessing a hardware based platform identifier associated with the platform;

comparing the platform identifier associated with the platform to the platform identifier stored on the web server; and

granting access to the object if the platform identifier associated with the platform matches the platform identifier stored on the web server.

21. A method for connecting a platform to a conference, comprising:

receiving a request to access a conference from a platform having a platform identifier;

checking the platform identifier against a set of platform identifiers that are authorized to participate in the conference; and

allowing the platform to join the conference if its platform identifier matches one included in the set of platform identifiers.

22. The method of claim 21 wherein the platform identifier is a processor number.

23. The method of claim 21 wherein the platform identifier is a hash of a value comprising a processor number.

25. The method of claim 24 wherein the platform identifier is a processor number.

26. The method of claim 24 wherein the platform identifier is a hash of a value comprising a processor number.

27. The method of claim 24 further comprising the step of preventing access to the web site if the platform identifier matches a list of those to be denied access to the web site.

28. The method of claim 24 wherein the set of platform identifiers that are authorized to access the web site are restricted to those platform identifiers that correspond to platforms authorized to modify the web site'"'"'s content.

30. The method of claim 29 wherein the platform identifier is a processor number.

31. The method of claim 29 wherein the platform identifier is a hash of a value comprising a processor number.

24. A method for restricting access to a web site, comprising:

receiving a request to access the web site from a platform having a platform identifier;

checking the platform identifier against a set of platform identifiers that are authorized to access the web site; and

allowing the platform to access the web site if its platform identifier matches one included in the set of platform identifiers.

29. A method for permitting access to a web site, comprising:

receiving a request to access the web site from a user having a user identification and a password, and using a platform having a hardware based platform identifier;

checking the user'"'"'s identification and password for authorization to access the web site;

checking the platform identifier; and

allowing the user to access the web site.

32. A method for tracking a platform'"'"'s web surfing activity, comprising:

recording a platform'"'"'s hardware based platform identifier when the platform accesses a web site.

33. A method of claim 32 wherein the platform identifier is a processor number.

34. The method of claim 32 wherein the platform identifier is a hash of a value comprising a processor number.

35. The method of claim 32 wherein the web site is a commercial web site.

36. The method of claim 32 wherein the web site is an on-line voting web site.

37. The method of claim 32 wherein the web site is a web site for an on-line survey.

39. A method of claim 38 wherein the platform identifier is a processor number.

40. The method of claim 38 wherein the platform identifier is a hash of a value comprising a processor number.

38. A method for permitting access to a server through a virtual private network, comprising:

receiving a request to access the server from a remote user having a certificate for verifying the user'"'"'s identity and public key, and using a platform having a hardware based platform identifier;

decrypting the certificate using a certificate authority'"'"'s public key;

checking the platform identifier; and

allowing the user to access the server.