System and method for controlling the right to use an item

• US 20040103290A1
• Filed: 11/22/2002
• Published: 05/27/2004
• Est. Priority Date: 11/22/2002
• Status: Abandoned Application

• Current Assignee: BBN Technologies (Rtx Corporation)
• Original Assignee: BBN Technologies (Rtx Corporation)
• Inventors: Mankins, David P.
• Application Number:
  US10/302,218
• Publication Number:
  US 20040103290A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

Systems and methods are provided for controlling the right to use an item. A user seeking the use of the item may communicate to a server a code identifying a security object and any other information requested by the server. The server may use the code to retrieve a key associated with the security object. The server may execute a cryptographic algorithm on at least the key and a time-dependent input to generate a one-time password, which the server may report to the user. The one-time password may be used to successfully gain access to the security object item only once within a predetermined period of time. The security object, which is disconnected from the server, may receive from the user the one-time password and execute a cryptographic algorithm on a locally-retrieved key and a time-dependent input to generate another one-time password. If the one-time passwords match, the user may be granted access to the item.

Claims

1. A system for controlling a right to use an item, said system comprising:

a server operating on a plurality of inputs to generate a result; and

a security object disconnected from the server and configured to receive the result and determine whether to grant the right to use the item based on the result.

2. The system of claim 1, wherein the server executes a cryptographic algorithm to generate the result.

3. The system of claim 1, wherein the plurality of inputs include a key and a time-dependent input.

4. The system of claim 1, wherein the result includes a one-time password.

5. The system of claim 1, further including a database having a key and a code used to identify the security object.

6. The system of claim 1, further including a communication network connected to the server.

7. The system of claim 6, further including a communication device connected through the communication network to the server.

8. The system of claim 1, wherein the security object includes one of a vending machine, a parking meter, and a locked access.

9. A system for controlling a right to use an item, said system comprising:

a server operating on a plurality of inputs to generate a result for use by a security object that is disconnected from the server, wherein the security object is configured to receive the result and determine whether to grant the right to use the item based on the result; and

a database including at least one of the plurality of inputs.

10. The system of claim 9, wherein the server executes a cryptographic algorithm to generate the result.

11. The system of claim 9, wherein the plurality of inputs include a key and a time-dependent input.

12. The system of claim 9, wherein the result includes a one-time password.

13. The system of claim 11, wherein the key includes the at least one of the plurality of inputs.

14. The system of claim 9, wherein the database includes a code used to identify the security object.

15. The system of claim 9, further including a communication network connected to the server.

16. The system of claim 15, further including a communication device connected through the communication network to the server.

17. The system of claim 9, wherein the security object includes one of a vending machine, a parking meter, and a locked access.

18. A security object, disconnected from a server, for controlling a right to use an item, said security object comprising:

a user interface configured to receive a first result generated by the server; and

a use control device operating on a plurality of inputs to generate a second result and comparing the first and second results to determine whether to grant the right to use the item.

19. The security object of claim 18, wherein the use control device executes a first cryptographic algorithm to generate the second result.

20. The security object of claim 18, wherein the plurality of inputs includes a key and a time-dependent input.

21. The security object of claim 18, wherein the first and second results each includes a one-time password.

22. The security object of claim 19, wherein the first cryptographic algorithm is identical to a second cryptographic algorithm executed by the server to generate the first result, and wherein the first cryptographic algorithm operates on a same number and type of inputs to generate the second result as the second cryptographic algorithm.

23. The security object of claim 18, wherein the security object may be identified with a code.

24. The security object of claim 18, wherein the security object includes one of a vending machine, a parking meter, and a locked access.

25. A method for controlling a right to use an item, comprising:

a server accessing a code used to identify a security object that controls the right to use the item and that is disconnected from the server; and

the server generating a result based on the code such that the right to use the item is determined by the security object based on the result.

26. The method of claim 25, further comprising receiving the code from a communication device connected to the server through a communication network.

27. The method of claim 25, further comprising retrieving a key related to the code.

28. The method of claim 27, wherein generating the result further includes executing a cryptographic algorithm that operates on a plurality of inputs that include the key and a time-dependent input.

29. The method of claim 26, further comprising transmitting the result through the communication network to the communication device.

30. The method of claim 25, wherein the result includes a one-time password.

31. The method of claim 25, wherein the security object includes one of a vending machine, a parking meter, and a locked access.

32. A method for controlling a right to use an item, comprising:

providing a code used to identify a security object that controls the right to use the item; and

receiving a first result based on the code and generated by a server that is disconnected from the security object.

33. The method of claim 32, further comprising retrieving a key related to the security object.

34. The method of claim 33, further comprising executing a cryptographic algorithm that operates on a plurality of inputs including the key and a time-dependent input to generate a second result.

35. The method of claim 34, further comprising granting the right to use the item if the first and second results match each other.

36. The method of claim 34, wherein the first and second results each includes a one-time password.

37. The method of claim 32, wherein the security object includes one of a vending machine, a parking meter, and a locked access.