System and method for authentication

• US 20050081064A1
• Filed: 10/04/2002
• Published: 04/14/2005
• Est. Priority Date: 07/31/2002
• Status: Active Grant

• Current Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Original Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Inventors: Tan, Henry, Poo, Teng Pin, Lim, Lay Chuan, Ooi, Chin Shyan
• Granted Patent: US 7,434,251 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An authentication system (10) to verify a password is provided. The authentication system includes a first storage unit (16) to store an authentication sequence (24) and a read-only memory unit (18) on which an authentication algorithm (26) is programmed. A microcontroller (20) is coupled to the first storage unit, the read-only memory unit and a web server. The microcontroller receives the password and executes the authentication algorithm to verify the password with the authentication sequence. A second storage unit (22) is coupled to the microcontroller to store data from the web server. Access to a second storage unit is permitted by the microcontroller only if the password has been verified.

Claims

1. An authentication system to verify a password, comprising:

a first storage unit to store an authentication sequence;

a read-only memory unit to store an authentication algorithm;

a microcontroller coupled to said first storage unit, said read-only memory unit, and a web server, wherein said microcontroller is to receive said password and execute said authentication algorithm and wherein said authentication algorithm is to verify said password with said authentication sequence; and

a second storage unit coupled to said microcontroller to store data from said web server and wherein access to said second storage unit is permitted by said microcontroller only if said password has been verified.

2. The authentication system as recited in claim 1, further comprising a host coupled between said authentication system and said web server, wherein said password is received by said microcontroller from said host.

3. The authentication system as recited in claim 2, wherein said read-only memory unit further comprises a shutdown algorithm to shut down said host and said authentication system after a number of incorrect passwords is received by said microcontroller.

4. The authentication system as recited in claim 2, wherein said password is received by said host from said web server.

5. The authentication system as recited in claim 2, wherein said authentication algorithm is hard coded on one of a group consisting of a firmware and a hardware in said microcontroller.

6. The authentication system as recited in claim 5, wherein said second storage unit is a removable storage device.

7. The authentication system as recited in claim 6, wherein said second storage unit uses flash memory.

8. The authentication system as recited in claim 2, wherein said microcontroller and said read-only memory unit are implemented on a single semiconductor chip.

9. The authentication system as recited in claim 8, wherein said first storage unit and said read-only memory unit are incorporated into said microcontroller.

10. The authentication system as recited in claim 1, further comprising an encoder coupled between said microcontroller and said second storage unit, wherein said encoder is to encrypt data that is to be written onto said second storage unit.

11. The authentication system as recited in claim 10, further comprising a decoder coupled between said microcontroller and said second storage unit, wherein said decoder is to decrypt data that is to be read from said second storage unit.

12. The authentication system as recited in claim 11, wherein data stored in said second storage unit is hash-coded.

13. The authentication system as recited in claim 12, wherein said authentication sequence is encrypted.

14. The authentication system as recited in claim 12, wherein said authentication sequence is hash-coded.

15. The authentication system as recited in claim 1, wherein said first storage unit is located within said read-only memory unit and wherein said authentication sequence is hard coded into said first storage unit.

16. The authentication system as recited in claim 15, wherein said second storage area further comprises a public storage area and a private storage area.

17. The authentication system as recited in claim 16, wherein said first storage unit is located within said private storage area of said second storage area.

18. A method for authenticating a password, comprising:

receiving said password;

receiving data from a web server, wherein said data is stored in a storage unit;

providing an authentication sequence;

executing an authentication algorithm to verify said password with said authentication sequence, wherein said authentication algorithm is stored on a read-only memory unit; and

permitting access to said data on said storage unit only if said password is verified.

19. The method for authenticating a password as recited in claim 18, wherein said password is received from said web server.

20. The method for authenticating a password as recited in claim 19, wherein said password is entered by a user.

21. The method for authenticating a password as recited in claim 18, wherein said data is encrypted.

22. The method for authenticating a password as recited in claim 21, further comprising decrypting said data.