SYSTEM AND METHOD FOR IMPROVING RESTRICTIVENESS ON ACCESSING SOFTWARE APPLICATIONS

• US 20070180234A1
• Filed: 01/29/2007
• Published: 08/02/2007
• Est. Priority Date: 01/31/2006
• Status: Active Grant

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Cidway Technologies, Ltd.
• Inventors: Labaton, Isaac J
• Granted Patent: US 8,225,391 B2
• Time in Patent Office: Days
• US Class Current: 713/159
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for improving the restrictiveness on accessing software applications on mobile devices, such as cell phones, are disclosed. In accordance with an exemplary embodiment, a computer-implemented system and method for improving the restrictiveness on accessing software applications comprises using a device having a memory, wherein the software application is stored in the memory and requesting, from the user, an original PIN, wherein the original PIN is not stored in the memory and any information about the original PIN is not stored in the memory. The invention further comprises using the original PIN as a seed number to create a true encryption key, using the true encryption key to encrypt an application secret data into a ciphertext and storing, in the memory, the ciphertext. The invention further comprises requesting a PIN from an accessing person that is accessing the targeted software application, wherein the requested PIN is not validated by the software application, using the requested PIN, without any validation, as the seed number to create an encryption key, and using the encryption key to decrypt the ciphertext.

Claims

1. A method for improving restrictiveness on using a software application, wherein the software application is configured to generate a dynamic identification code and wherein access to the software application is restricted by requesting a personal identification number (PIN) from a user, comprising:

using a device having a memory, wherein the software application is stored in the memory;

requesting, from the user, to enter an original PIN, wherein the original PIN is not stored in the memory and any information about the original PIN is not stored in the memory;

using the original PIN as a seed number to create a true encryption key;

using the true encryption key to encrypt an application secret data into a ciphertext;

storing, in the memory, the ciphertext; and

wherein;

any time the software application is accessed by any person, requesting a PIN from the accessing person, wherein the requested PIN is not validated by the software application;

using the requested PIN, without any validation, as the seed number to create an encryption key; and

using the encryption key to decrypt the ciphertext.

2. The method of claim 1, wherein the PIN comprises a password.

3. The method of claim 1, wherein the PIN comprises a combination of a password and a number.

4. The method of claim 1, wherein the device comprises a cellular phone.

5. The method of claim 4, wherein the device memory comprises an external appliance.

6. The method of claim 4, wherein the external appliance comprises a subscriber identity module (SIM).

7. The method of claim 4, wherein the external appliance comprises an universal serial bus (USB) connected device memory.

8. The method of claim 4, wherein the external appliance comprises a wireless memory device.