METHODS AND SYSTEMS FOR PHONE HOME TOKEN REGISTRATION

• US 20080059793A1
• Filed: 08/31/2006
• Published: 03/06/2008
• Est. Priority Date: 08/31/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Kwan, Nang Kon, Relyea, Robert, Lord, Robert B.
• Granted Patent: US 9,038,154 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

An embodiment relates generally to a method of binding a token to a user. The method includes receiving a token embedded with an address and inserting the token into a computer. The method also includes connecting to the address stored on the token and binding a user to the token based on information from the address.

Claims

1. A method of binding a token to a user, the method comprising:

receiving a token embedded with an address;

inserting the token into a computer;

connecting to the address stored on the token; and

binding a user to the token based on information from the address.

2. The method of claim 1, further comprising determining a state of initialization in response to the insertion of the token.

3. The method of claim 2, further comprising logging in the user in response to the state of initialization being initialized.

4. The method of claim 1, further comprising:

retrieving information from the address; and

displaying the information to obtain information from the user.

5. The method of claim 1, further comprising:

generating at least one key; and

retrieving at least one certificate, the at least one certificate secured by the at least one key.

6. The method of claim 5, further comprising embedding the at least one certificate on the token.

7. An apparatus comprising means to implement the method of claim 1.

8. A computer-readable medium comprising computer-executable instructions for performing the method of claim 1.

9. A system for enrolling a token, the system comprising:

a security client configured to process the token, the token embedded with an address for binding the token; and

a certificate server configured to interface with the security client, wherein the security client is configured to retrieve the address from the token in response to a determination of a state of initialization being unbound and display information from a site referenced by the address.

10. The system of claim 9, wherein the security client is configured to detect a presence of the token and determine the state of initialization in response to the detection of the token.

11. The system of claim 10, wherein the security client is configured to log-on a user of the token in response to the state of initialization being bound.

13. The system of claim 9, wherein the certificate server is configured to provide a secure site for the address.

14. The system of claim 9, wherein the security client is configured to form a secure channel to the site referenced by the address.

15. The system of claim 9, wherein the security client is configured to retrieve information from the address to render the retrieved information.

16. The system of claim 9, wherein the security client is configured to request key generation for the token.

17. The system of claim 16, wherein the security client is configured to request at least one certificate to be generated that is secured by the generated keys.

18. The system of claim 17, wherein the security client is configured to embed the at least one certificate in the token.

19. A method of enrolling tokens, the method comprising:

embedding a plurality of tokens with a configuration file;

distributing the plurality of tokens to a set of users;

detecting a presence of at least one token of the plurality of tokens; and

executing the instructions stored in the configuration file in response to the presence of the at least one token.

20. The method of claim 19, further comprising determining an enrollment status for at the at least one token.

21. The method of claim 20, further comprising logging-on the at least one token in response to the enrollment state being enrolled.

22. The method of claim 20, wherein the instructions are computer readable instructions that direct a security client to one of an enrollment universal resource locator;

retrieve a name of a card issue, a location of servers, and configuration information.