Secure remote access technology

• US 20070033649A1
• Filed: 07/20/2005
• Published: 02/08/2007
• Est. Priority Date: 07/20/2005
• Status: Abandoned Application

• Current Assignee: Booleansoft
• Original Assignee: Booleansoft
• Inventors: Henriksen, Inge Eivind
• Application Number:
  US11/186,491
• Publication Number:
  US 20070033649A1
• Time in Patent Office: Days
• US Class Current: 726/20
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A computer program product, a software program product kit, and a data/telecommunications network where the software is installed, providing secure remote access. The installed software or computer program product incorporates a password generating module which generates a user associated password based on a first set of data related to a user, a second set of data related to a hardware token, a third set of data related to a password server, and a fourth set of data related to current time.

Claims

1. A computer software program product for generating a user access password in a data system or telecommunications network, said program product comprising:

a password generating module which generates a user associated password based on a first set of data related to a user;

a second set of data related to a hardware token;

a third set of data related to a password server; and

a fourth set of data related to current time.

2. The computer program product according to claim 1, wherein said first set of data related to said user comprises a personal code provided by said user.

3. The computer program product according to claim 2, wherein said personal code is a pin code.

4. The computer program product according to claim 1, wherein said first set of data related to said user comprises a token identification number related to a token associated with and provided by said user.

5. The computer program product according to claim 1, wherein said first set of data related to said user comprises a license identification number provided with software which is associated with or an integral part of a token delivered to said user.

6. The computer program product according to claim 1, further comprising a data encryption module adapted to use standardized data encryption techniques and mathematical algorithms to generate a password based on said first set of data related to said user.

7. The computer program product according to claim 1, wherein said password generating module is adapted to incorporate time information retrieved from a Daytime server in the calculation of a password.

8. A data storage medium having stored thereon a computer program product for generating a user access password in a data system or telecommunications network, said program product comprising:

a password generating module which generates a user associated password based on a first set of data related to a user;

a second set of data related to a hardware token;

a third set of data related to a password server; and

a fourth set of data related to current time.

9. The data storage medium according to claim 8, comprising a token identification number storage region from which a user may access a token identification number.

10. The data storage medium according to claim 8 designed in a form similar to a CD (Compact Disc) and insertable into a data storage medium receiving unit of a computer.

17. The data storage medium according to claim 10, wherein said data storage medium receiving unit of a computer is a CD (Compact Disc) station of a PC.

11. A data network with user access functionality, said network comprising:

a user terminal unit having an interface module for allowing input of information by a user into said network;

a computing module programmed to run a computer program for generating a user access password, said program comprising a password generating module which generates a user associated password based on a first set of data related to a user, a second set of data related to a hardware token, a third set of data related to a password server, and a fourth set of data related to current time,

wherein said computing module is adapted to generate a password for use by said user in accessing at least parts of said network.

12. The network according to claim 11, comprising a storage medium receiving station for receiving a data storage medium having stored thereon a computer program product for generating a user access password in a data system or telecommunications network, said program product comprising a password generating module which generates a user associated password based on a first set of data related to a user, a second set of data related to a hardware token, a third set of data related to a password server, and a fourth set of data related to current time and for entering said program product into a computing unit on said network.

18. The data network of claim 11, wherein said information by a user is a user related pin code.

19. The network according to claim 12, wherein said storage medium receiving station is a CD-ROM station of a PC.

13. A computer program product comprising code for generating a password for use by user in accessing an access-limited service in a data/telecommunications network, said program comprising:

an encryption module for generating an encrypted password;

a user interface module for providing the encryption module with a least two elements of information, the first of which is related to said user, the second of which is related to a hardware token;

a server information module for providing the encryption module with data related to said service to be accessed by said user; and

a time module for accessing an external Daytime server to retrieve Daytime data, in order to supply the encryption module with time data related to current time,

wherein the encryption module can generate a time dependent password for a user.

14. A password generating computer program product for generating a password to be presented for a user using a user terminal, said program comprising an encryption module adapted to encrypt a combination of a first data set related to said user, a second data set related to a hardware token made available to said user, a third set of data related to a password server, and a fourth set of data retrieved from a time server and indicating the current time, into a one-time password which can be used by said user to obtain access to a service made available in a data/telecommunications network, said network including said password server and said time server.

15. A software product kit of parts for installing and running a software/hardware based password service in a network offering any number of other network based services to one or more users presenting a valid password, said kit comprising:

a password server program product installable in said network, said server being adapted for creating and updating access passwords related to all of said one or more users; and

at least one user password generating program product installable in a user terminal for accepting input data from a user and generating and supplying a user with a valid password with which said user may access said data/telecommunications network,

wherein the password server program product and the user password generating program product are adapted to separately connect via said network to a Daytime server for retrieval of current Daytime data, and to use said current data as an input to a password generating algorithm.

16. A data/telecommunications network for providing a service to one or more authorized users comprising:

a service providing module designed to be made accessible to a set of authorized users by password input;

a data storage module having stored data related to each authorized user, said user data including passwords;

a password server with code for creating and updating said passwords in said data storage module; and

at least one user module with a user interface adapted for input and output of user data,

wherein said user module includes user password generating program code, said password server and said user password generating program code are adapted to establish a connection with and communicate with a Daytime server for retrieving current Daytime data, and said password server and said user password generating program code are adapted to use said Daytime data as input data, thereby providing time dependent passwords to a user, such that when said service receives said generated password as an input from a user, said service will provide said user with access to said service.