Flexible method of user authentication

• US 20060288229A1
• Filed: 08/23/2006
• Published: 12/21/2006
• Est. Priority Date: 07/25/2000
• Status: Active Grant

• Current Assignee: Activcard Ireland, Limited
• Original Assignee: Activcard Ireland, Limited
• Inventors: Hillhouse, Robert D., Hamid, Laurence
• Granted Patent: US 8,296,570 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A method of authorising a user in communication with a workstation is disclosed. According to the method, a system automatically determines a plurality of available user information entry devices in communication with the workstation. The system then determines predetermined user authorisation methods each requiring data only from available user information entry devices. The user then selects one of the determined authorisation methods for use in user authorisation. Optionally, each authorisation method is associated with a security level relating to user access to resources. Once the authorisation method is selected, the user provides user authorisation information in accordance with a determined user authorisation method and registration proceeds.

Claims

1-29. -29. (canceled)

30. A method of authorizing a user to selectively access stored files, the method comprising:

authorizing a user to access a system having files stored thereon;

upon authorization of the user, retrieving a plurality of password identifiers, each password identifier associated with a password, and each password providing access to a file;

receiving an indication of a selected password identifier; and

providing the password associated with the selected password identifier to an application to access the file.

31. The method claim 30, further comprising:

storing the plurality of passwords in a secure storage location.

32. The method of claim 31, further comprising:

retrieving the password associated with the selected password identifier from the secure storage location.

33. The method of claim 31, wherein the secure storage location comprises a key database on one of (i) a key escrow server, and (ii) a smart card.

34. The method of claim 30, wherein the user is unaware of the password.

35. The method of claim 30, wherein the password is designated by the user.

36. The method of claim 30, further comprising:

providing the user with access to the file.

37. The method of claim 30, wherein the user selects a password identifier for a file.

38. The method of claim 30, wherein respective passwords provide user access to respective sets of files in the system.

39. The method of claim 30, wherein respective passwords provide access to respective security levels within the system.

40. The method of claim 30, wherein authorizing a user comprises:

determining at least an available user information entry device in communication with the system;

providing user authorization information in accordance with a user authorization method, the user authorization method requiring data only from available user information entry devices from a plurality of user authorization methods;

selecting stored data corresponding to a level of authorization; and

registering the user authorization information provided against the selected stored data to perform at least one of identifying and authorizing the user at the authorization level.

41. A method of updating a password associated with a plurality of files, the method comprising:

receiving a request to change the password;

determining the plurality of files associated with the password;

receiving an indication of a new password; and

securing each of the plurality of files with the new password.

42. The method of claim 41, further comprising:

storing the new password in a key database.

43. The method of claim 41, wherein receiving a request to change the password comprises receiving an automatic password change request at a predetermined time interval.

44. The method of claim 43, wherein the new password is automatically generated.

45. The method of claim 41, wherein receiving a request to change the password comprises receiving a password change request from the user.

46. The method of claim 45, further comprising:

authorizing the user requesting the password change.

47. The method of claim 46, wherein authorizing the user requesting the password change comprises:

prompting the user for identification information; and

comparing the identification information against previously stored information.

48. The method of claim 41, further comprising:

archiving the password upon receiving indication of the new password.

49. The method of claim 41, further comprising:

destroying the password upon receiving indication of the new password.

50. The method of claim 41, further comprising:

identifying a security breach;

wherein receiving a request to change a password comprises receiving an automatic password change request upon identification of the security breach.

51. The method of claim 41, wherein receiving an indication of a new password comprises receiving the new password from an authorized user.