ISOLATED AUTHENTICATION DEVICE AND ASSOCIATED METHODS

• US 20060242423A1
• Filed: 05/08/2006
• Published: 10/26/2006
• Est. Priority Date: 04/22/2005
• Status: Abandoned Application

• Current Assignee: John Wesley Kussmaul
• Original Assignee: John Wesley Kussmaul
• Inventors: Kussmaul, John Wesley
• Application Number:
  US11/382,168
• Publication Number:
  US 20060242423A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 9/32 in combination with an identity check
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An isolated authentication device and related methods to provide a reliable means of authenticating the identity of its user to a network resource or server or other resource, and of authenticating the identity of a network resource or server or other resource to the device'"'"'s user. The isolated authentication device may be attached to or in communication with a host device, such as a mobile telephone, personal digital or data assistant, GPS multifunction device, portable music player, wristband watch, personal computer, or similar device. A constrained operating system provides limited functionality, including authentication, data transfer, and cryptographic functions. Encrypted image, fingerprint, password, and/or personal identification number data is stored in read-only or protected nonvolatile memory. Input may be provided by means of a numeric or alphanumeric keypad, and images and information may be displayed on a screen. The device may be used to digitally sign a document, or a key to a lock.

Claims

1. A method for using an authentication device, comprising the steps of:

receiving a document in electronic form;

creating a hash based on the document with a processor in the authentication device;

encrypting the hash with a private key in the authentication device; and

forwarding or send the document with the encrypted hash.

2. The method of claim 1, wherein the private key is paired with a public key.

3. The method of claim 2, wherein the private and public key pair is associated with a particular level of security.

4. The method of claim 1, wherein encryption of the hash requires additional authentication by the user.

5. The method of claim 4, wherein said additional authentication comprises the user entering a personal identification number or password on the authentication device.

6. The method of claim 4, wherein said additional authentication comprises fingerprint confirmation by means of a fingerprint reader in the authentication device.

7. The method of claim 4, wherein said additional authentication comprises the user entering a personal identification number or password on the authentication device, and fingerprint confirmation by means of a fingerprint reader in the authentication device.

8. A method of using an authentication device, comprising the steps of:

receiving a document in electronic form accompanied by an encrypted hash, said encrypted hash created by an authentication device based on the document and a private key;

decrypting the encrypted hash using the public key corresponding to the private key;

creating a confirmation hash based on the document using the same hash algorithm used by the authentication device; and

comparing the confirmation hash with the decrypted hash.

9. A method of using an authentication device, comprising the steps of:

receiving a signal from an authentication device by a lock to identify the authentication device;

verifying that the authentication device or its user is authorized to open the lock;

generating a random digital file and encrypting it using a public key associated with the authentication device;

sending the encrypted digital file to the authentication device for decryption using a private key paired with the public key;

receiving the decrypted digital file from the authentication device; and

unlocking the lock if the decrypted digital file from the authentication device matches the random digital file initially generated.

10. The method of claim 9, wherein the signal is a public key.

11. The method of claim 9, wherein the private and public key pair is associated with a particular level of security.