System and method for utilizing information in publicly broadcast signals for shared secret purposes

• US 20050033995A1
• Filed: 08/06/2004
• Published: 02/10/2005
• Est. Priority Date: 08/08/2003
• Status: Abandoned Application

• Current Assignee: Authenex Incorporated
• Original Assignee: Authenex Incorporated
• Inventors: Hon, Henry, Lin, Paul
• Application Number:
  US10/913,828
• Publication Number:
  US 20050033995A1
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A system and method for utilizing information in publicly broadcast signals is provided. Information in publicly broadcast signals is utilized as a synchronization source for shared secret purposes, such as challenge and response. Such information may relate to time. Suitable publicly broadcast information may include GPS and atomic clock information. The system includes a token and a server that are capable of generating responses based on broadcast information and other information. The token and server must be able to receive publicly broadcast information via known methods. Both the token and server receive information from a designated source of publicly broadcast signals. The information received by the token is identical to the information received by the server and can be used as a challenge. The token generates a response to the challenge. The token'"'"'s response is provided to the server. The server can verify that the response to the challenge received from the token is in fact generated by that unique token. If the response to the challenge is verified by the authentication server, the token is identified and authenticated.

Claims

1. A system for utilizing information in publicly broadcast information as a synchronization source for shared secret purposes comprising:

a token device capable of receiving publicly broadcast information, the token device generating responses based on the publicly broadcast information; and

a server capable of receiving publicly broadcast information and receiving responses from the token device, the server generating challenges based on the publicly broadcast information and verifying the responses from the token to authenticate the token.

2. The system of claim 1 wherein the token device and server receive publicly broadcast information from a designated source.

3. The system of claim 2 wherein the designated source of publicly broadcast information is selected from the group consisting of radio clock information, global positioning system information, atomic clock information, Greenwich Mean Time information, and Loran information.

4. The system of claim 1 further comprising:

the token device provided with identifying information that indicates that particular token device and the identifying information contained in responses generated by the token.

5. The system of claim 4 further comprising:

the server generating challenges upon receiving responses from the token device, the server verifying the responses from the token device to authenticate the token and to determine a particular token device that generated the responses.

6. The system of claim 1 wherein the token device is a stand-alone device.

7. The system of claim 1 wherein the token device is made integral with a host device.

8. The system of claim 7 wherein the host device is selected from the group consisting of a cellular phone and a Personal Digital Assistant.

9. A method for utilizing publicly broadcast information as a synchronization source for shared secret purposes comprising:

publicly broadcasting information;

providing a token device capable of receiving publicly broadcast information and capable of generating responses based on the publicly broadcast information;

generating responses based on the publicly broadcast information;

providing a server capable of receiving publicly broadcast information and capable of generating challenges based on the publicly broadcast information;

transmitting responses to the server;

generating challenges based on the publicly broadcast information;

comparing responses to challenges for verifying the responses to authenticate the token device.

10. The method of claim 9 wherein the publicly broadcast information is broadcast from a designated source.

11. The method of claim 10 wherein the designated source of publicly broadcast information is selected from the group consisting of radio clock information, global positioning system information, atomic clock information, Greenwich Mean Time information, and Loran information.

12. The method of claim 9 wherein the token device provided is with identifying information that indicates that particular token device and the identifying information is contained in responses generated by the token.

13. The method of claim 12 wherein the server generating challenges upon receiving responses from the token device, the server verifying the responses from the token device to authenticate the token and to determine a particular token device that generated the responses.

14. The method of claim 9 wherein the token device is a stand-alone device.

15. The method of claim 9 wherein the token device is made integral with a host device.