Secure object for convenient identification

• US 20070208950A1
• Filed: 02/20/2007
• Published: 09/06/2007
• Est. Priority Date: 03/03/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ong, Peng
• Granted Patent: US 7,581,099 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method and apparatus for automatic user authentication are described. The method includes receiving information at a device, the device including a credential container; storing the information at the credential container and performing cryptographic calculations on the received information and providing the encrypted information upon request.

Claims

1. A method comprising:

receiving a challenge phrase on a client computer;

inputting the challenge phrase into a security device;

receiving a response phrase from the security device; and

inputting the response phrase into the client computer.

2. The method of claim 1 wherein the security device is a hardware device including authentication information.

3. The method of claim 1 wherein the security device includes a display and a keyboard.

4. The method of claim 3 wherein the inputting the challenge phrase into the security device is performed by a user utilizing the keyboard.

5. The method of claim 3 wherein the receiving the response phrase from the security device comprises displaying the response phrase on the display.

6. The method of claim 1 wherein the challenge phrase is a request for authentication data.

7. The method of claim 1 wherein the response phrase includes authentication data.

8. A method comprising:

receiving data to be digitally signed into at hardware device;

digitally signing the data in the hardware device.

9. The method of claim 8 wherein the hardware device configured to be connected to a user computer.

10. The method of claim 8 further comprising a user entering the data utilizing the hardware device keyboard and display.

11. The method of claim 8 further comprising a user authorizing the digital signing by utilizing physical features of the hardware device.

12. The method of claim 11 wherein the physical features of the hardware device include an authorization button.

13. The method of claim 11 wherein the physical features of the hardware device include a display.

14. The method of claim 13 wherein the display displays contents to be digitally signed.

15. The method of claim 11 wherein the user authorizing the digital signing by pressing an authorization button.

16. An apparatus comprising:

a communication controller to receive information and to transmit encrypted information;

a processor to perform cryptographic calculations on received information;

a credential container to store the received information;

a keyboard to allow a user to control the device and a display to display user requested information,

wherein the apparatus configured to be connected to a client computer.

17. The apparatus of claim 16 wherein the apparatus is a hardware device.

18. The apparatus of claim 16 further comprising a smart card chip to perform the cryptographic calculations.

19. The apparatus of claim 16 wherein the credential container includes a trusted hosts list comprising hosts to which the apparatus configured to authenticate a user.

20. The apparatus of claim 16 wherein the credential container includes manufacturing data, wherein the manufacturing data is digitally signed and stored in a certificate.

21. The apparatus of claim 20 wherein the manufacturing data includes at least one piece of information from a plurality of information including a serial number of the apparatus, a color of the apparatus, a physical form of the apparatus, an identification of a manufacturer of the apparatus, a date of manufacturing of the apparatus.