Authentication system and method for providing access for a subsystem to a password-protected main system

• US 20050228721A1
• Filed: 03/30/2005
• Published: 10/13/2005
• Est. Priority Date: 03/31/2004
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Hofmann, Ralf
• Application Number:
  US11/093,280
• Publication Number:
  US 20050228721A1
• Time in Patent Office: Days
• US Class Current: 705/18
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

An authentication system is proposed, for providing access for at least one subsystem to at least one password-protected main system. The authentication system includes a memory device for storing at least one reference key for the at least one subsystem and at least one reversibly coded password for the main system. It further includes a reception device for receiving a prescribed key stored in the subsystem. In addition, a comparison device is included for comparing the received key with the at least one reference key stored in the memory device. Further, a decoding device is used for reading and decoding the at least one reversibly coded password for the at least one main system which is stored in the memory device, if the requested key matches the reference key. Finally, an output device is included for outputting the decoded password to the main system in order to provide access for the subsystem. In addition, a method is proposed for providing access for at least one subsystem to at least one password-protected main system using an authentication system.

Claims

1. A method for providing access for at least one subsystem to at least one password-protected main system using an authentication system, the method comprising:

receiving, by the authentication system, a prescribed key stored in the subsystem;

comparing the received key with a reference key stored in the authentication system;

reading a reversibly coded password for the main system, stored in the authentication system, and decoding the password if the received key matches the reference key; and

outputting the password to the main system, upon being decoded, to provide access for the subsystem.

2. The method as claimed in claim 1, wherein the step of receiving is preceded by the following steps:

recording, by the authentication system, a request by the subsystem to access the main system; and

requesting, by the authentication system, a prescribed key stored in the subsystem.

3. The method as claimed in claim 1, wherein the method also includes the following steps if a plurality of passwords are stored in the authentication system:

identifying the last reversibly coded password stored; and

using the identified password to provide access for the subsystem.

4. The method as claimed in claim 1, further comprising:

irreversibly encrypting, by the main system, the uncoded password received from the authentication system;

comparing the irreversibly encrypted password with an irreversibly encrypted reference password stored in the main system; and

enabling access, via the main system, upon the irreversibly encrypted password matching the irreversibly encrypted reference password.

5. The method as claimed in claim 1, wherein the following steps are provided for the automatic detection of passwords for the main system by the authentication system:

requesting a user password by the authentication system;

reversibly coding the password by the authentication system; and

storing the reversibly coded password by the authentication system.

6. The method as claimed in claim 5, further comprising:

forwarding the uncoded password to the main system by the authentication system, in order to provide access for the user.

16. A computer program product which is suitable for performing a method as claimed in claim 1, when it is loaded on a computer.

17. The method as claimed in claim 2, wherein the method also includes the following steps if a plurality of passwords are stored in the authentication system:

identifying the last reversibly coded password stored; and

using the identified password to provide access for the subsystem.

18. The method as claimed in claim 2, further comprising:

irreversibly encrypting, by the main system, the uncoded password received from the authentication system;

comparing the irreversibly encrypted password with an irreversibly encrypted reference password stored in the main system; and

enabling access, via the main system, upon the irreversibly encrypted password matching the irreversibly encrypted reference password.

19. The method as claimed in claim 3, further comprising:

irreversibly encrypting, by the main system, the uncoded password received from the authentication system;

comparing the irreversibly encrypted password with an irreversibly encrypted reference password stored in the main system; and

enabling access, via the main system, upon the irreversibly encrypted password matching the irreversibly encrypted reference password.

20. The method as claimed in claim 17, further comprising:

irreversibly encrypting, by the main system, the uncoded password received from the authentication system;

comparing the irreversibly encrypted password with an irreversibly encrypted reference password stored in the main system; and

enabling access, via the main system, upon the irreversibly encrypted password matching the irreversibly encrypted reference password.

22. A computer program, adapted to, when executed on a computer, cause the computer to carry out the method as claimed in claim 1.

23. A computer program product, including the computer program of claim 22.

7. An authentication system for providing access for at least one subsystem to at least one password- protected main system, the authentication system comprising:

a memory device, adapted to store at least one reference key for the at least one subsystem and at least one reversibly coded password for the main system;

a reception device, adapted to receive a prescribed key stored in the subsystem;

a comparison device, adapted to compare the received key with the at least one reference key stored in the memory device;

a decoding device, adapted to read and decode the at least one reversibly coded password, for the at least one main system which is stored in the memory device, if the received key matches the reference key; and

an output device, adapted to output the password to the main system upon being decoded, in order to provide access for the subsystem.

8. The authentication system as claimed in claim 7, wherein the reception device is also set to record a request by the subsystem for access to the main system and to request a prescribed key stored in the subsystem.

9. The authentication system as claimed in claim 7, wherein the decoding device is also set to identify the last reversibly coded password for the main system which is stored in the memory device, and to use this password to provide access for the subsystem.

10. The authentication system as claimed in claim 7, wherein the main system is set

to encrypt the uncoded password received from the authentication system irreversibly,

to compare the irreversibly encrypted password with an irreversibly encrypted reference password stored in the main system, and

to enable access to the main system if the irreversibly encrypted password matches the irreversibly encrypted reference password.

11. The authentication system as claimed in claim 7 wherein the authentication system comprises, for the purpose of automatically detecting passwords for the main system:

an input device for requesting a user password; and

a coding device for reversibly coding the requested password and storing the reversibly coded password in the memory device.

12. The authentication system as claimed in claim 11, wherein the input device is also set up to forward the uncoded password to the main system in order to provide access for the user.

13. The authentication system as claimed in claim 7, wherein the authentication system is integrated in a medical appliance.

14. The authentication system as claimed in claim 13, wherein the at least one subsystem is an emergency circuit in the medical appliance which allows the medical appliance to operate by accessing the main system without password input.

15. The authentication system as claimed in claim 7, wherein the authentication system and the main system are implemented in the form of different computer programs.

21. The authentication system as claimed in claim 8, wherein the decoding device is also set to identify the last reversibly coded password for the main system which is stored in the memory device, and to use this password to provide access for the subsystem.

24. An authentication system for providing access for at least one subsystem to at least one password- protected main system, the authentication system comprising:

means for storing at least one reference key for the at least one subsystem and at least one reversibly coded password for the main system;

means for receiving a prescribed key stored in the subsystem;

means for comparing the received key with the at least one reference key stored in the memory device;

means for reading and decoding the at least one reversibly coded password, for the at least one main system which is stored, if the received key matches the reference key; and

means for outputting the password to the main system upon being decoded, in order to provide access for the subsystem.

25. An authentication system for providing access for at least one subsystem to at least one password- protected main system, the authentication system comprising:

means for receiving a prescribed key stored in the subsystem;

means for comparing the received key with a reference key stored in the authentication system;

means for reading a reversibly coded password for the main system, stored in the authentication system, and for decoding the password if the received key matches the reference key; and

means for outputting the password to the main system, upon being decoded, to provide access for the subsystem.