Portable electronic authenticator cryptographic module

• US 20030131114A1
• Filed: 10/15/2002
• Published: 07/10/2003
• Est. Priority Date: 10/12/2001
• Status: Abandoned Application

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Wack, C. Jay, Scheidt, Edward M., Tsang, Wai Lin
• Application Number:
  US10/271,341
• Publication Number:
  US 20030131114A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A module includes a processor, a memory, a communication interface to provide a communication channel between the module and a computer, and a bus that communicatively connects the processor, memory, and communication interface. The memory can include an internal routine that sends a data instance to the computer via the communication channel. The data instance can be used for user authentication and/or user authorization. The data instance can be generated, or referenced from the memory, by the module. The communication channel can be hard-wired or wireless.

Claims

1. A module, comprising:

at least one processor;

at least one memory;

a wireless communication interface adapted to provide a communication channel between said module and a computer, and to operate at a frequency of about 60 GHz; and

at least one bus communicatively connecting said processor, said at least one memory, and said wireless communication interface;

wherein said at least one memory includes at least one internal routine adapted to send a data instance to the computer via the communication channel, and the data instance includes at least one of user authentication data and user authorization data.

2. The module of claim 1, wherein the data instance is one of a cryptographic key, a key component, a seed value, an encrypted value, a decrypted value, a cryptographic function parameter, a password, a user identifier, a serial number, and a user credential.

3. The module of claim 1, wherein the at least one internal routine is further adapted to generate the data instance.

4. The module of claim 1, wherein the at least one memory further includes the data instance, and the at least one internal routine is further adapted to reference the data instance from the at least one memory.

5. A module, comprising:

at least one processor;

at least one memory;

a wireless communication interface adapted to provide a communication channel between said module and a computer, and to operate at a frequency of about 60 GHz; and

at least one bus communicatively connecting said processor, said at least one memory, and said wireless communication interface;

wherein said at least one memory includes at least one cryptographic routine adapted to generate a first data instance and to send the first data instance to the computer via said wireless communication interface.

6. The module of claim 5, wherein the first data instance is one of a cryptographic key, a key component, a seed value, an encrypted value, a decrypted value, a cryptographic function parameter, a password, a user identifier, a serial number, and a user credential.

7. The module of claim 5, wherein the at least one cryptographic routine is further adapted to receive a second data instance from the computer via the wireless communication channel, and to generate the first data instance based at least in part on the second data instance.

8. The module of claim 5, wherein the at least one cryptographic routine includes a cryptographic key component combiner.

9. In a system comprising a computer having a first wireless communication interface, and a module having a second wireless communication interface, a method, comprising:

establishing, between the first and second wireless communication interfaces, a communication channel that operates at a frequency of about 60 GHz; and

sending, by the module, a first data instance to the computer via the communication channel;

wherein the first data instance includes at least one of user authentication data and user authorization data.

10. The method of claim 9, wherein the first data instance includes at least one of a cryptographic key, a key component, a seed value, an encrypted value, a decrypted value, a cryptographic function parameter, a password, a user identifier, a serial number, and a user credential.

11. The method of claim 9, further comprising

receiving, by the module, a second data instance from the computer via the communication channel;

and

generating, by the module, the first data instance based at least in part on the second data instance.

12. The method of claim 9, further comprising referencing, by the module, the first data instance from at least one memory.

13. A system, comprising:

a module having a first wireless communication interface;

a computer having a second wireless communication interface; and

a first communication channel, between the first and second wireless communication interfaces, that operates at a frequency of about 60 GHz;

wherein said module is adapted to send a data instance to said computer over said first communication channel, and the data instance includes at least one of user authentication data and user authorization data.

14. The system of claim 13, further comprising:

a server communicatively connected to the computer via a second communication channel;

wherein said server is adapted to provide the user with access to a resource if the user is authenticated based at least in part on the data instance.