Access control system and method for a networked computer system

• US 20030188012A1
• Filed: 03/29/2002
• Published: 10/02/2003
• Est. Priority Date: 03/29/2002
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Ford, Daniel E.
• Granted Patent: US 7,243,368 B2
• Time in Patent Office: Days
• US Class Current: 709/238
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

An access control system for use with a networked computer system [10] comprises a host [14] of the networked computer system, and a bit stream whereby information is transferred from a source of said bit stream to said host [14], said bit stream bearing a routing label identifying an origin of said bit stream in the computer network. The system further comprises a word integrated with said bit stream, said word including a routing label identifying an origin of said word in the computer network, and an access control module in communication with said host, said access control module operable to make an identification, wherein the identification includes comparing the origin of said bit stream to the origin of said word.

Claims

1. An access control system for use with a networked computer system, the system comprising:

a host of the networked computer system;

a bit stream whereby information is transferred from a source of said bit stream to said host, said bit stream bearing a routing label identifying an origin of said bit stream in the computer network;

a word integrated with said bit stream, said word including a routing label identifying an origin of said word in the computer network; and

an access control module in communication with said host, said access control module operable to make an identification, wherein the identification includes comparing the origin of said bit stream to the origin of said word.

2. The system of claim 1, wherein the source is granted access to said server system only if the origin of said bit stream is identical to the origin of said word.

3. The system of claim 2, wherein the word further includes a password for accessing said host.

4. The system of claim 3, wherein the identification further includes comparing the password to a plurality of passwords in memory accessible to said host.

5. The system of claim 4, wherein the source is granted access to said server system only if the password is identical to at least one valid password.

6. The system of claim 1, wherein the word is encrypted.

7. The system of claim 1, wherein the routing labels are further defined as internet protocol addresses.

8. An access control method for use with a server system over a computer network, the method comprising:

receiving a bit stream from a source of the bit stream, the bit stream bearing a routing label identifying an origin of the bit stream in the computer network, wherein a word is integrated with said bit stream, the word including a routing label identifying an origin of said word in the computer network; and

comparing the origin of the bit stream to the origin of the word.

9. The method of claim 8, wherein the word is encrypted, the method further comprising decrypting the word upon receipt of the bit stream.

10. The method of claim 8, the method further comprising granting the source access to the server system only if the origin of the bit stream is identical to the origin of the word.

11. The method of claim 8, wherein the word further includes a password for accessing said server system, the method further comprising comparing the password to a plurality of valid passwords in memory accessible to the server system.

12. The method of claim 11, the method further comprising granting the source access to the server system only if the password is identical to at least one valid password.

13. The method of claim 8, the method further comprising:

generating the bit stream at a client location, wherein the routing label of the word identifies the client location, and

transmitting the bit stream from the client to a host of the server system.

14. The method of claim 8, the method further comprising concatenating the routing label with a password for accessing the server system at the client location, thereby forming a word.

15. The method of claim 8, the method further comprising encrypting the word at the client location.

16. The method of claim 8, wherein the routing labels are further defined to be internet protocol addresses.

17. A propagating wave for use with an access control system of a server system over a computer network, the wave comprising:

a routing label operable to identify an origin of client transmission in the computer network; and

a word generated by a client of the server system, the word including the routing label.

18. The wave of claim 17, the word further including a password for accessing the server system.

19. The wave of claim 17, wherein the word is encrypted.

20. The propagating wave of claim 17, wherein the routing label is further defined to be an internet protocol address of the client.