Method and apparatus for the secure identification of the owner of a portable device

• US 20080077799A1
• Filed: 11/30/2007
• Published: 03/27/2008
• Est. Priority Date: 02/25/1999
• Status: Active Grant

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Bouyant Holdings Limited
• Inventors: Labaton, Isaac
• Granted Patent: US 8,645,708 B2
• Time in Patent Office: Days
• US Class Current: 713/184
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

An authentication system is provided that includes a portable device and a decryption node. An individual uses the portable device, such as a portable device like a cell phone to compute a challenge and a response. The challenge and response is sent to a decryption node. In response, the decryption node computes a presumed response and compares the presumed response to the response of the portable device, in order to authenticate the individual associated with the portable device.

Claims

1. An authentication system for authenticating an individual comprising:

a portable device, wherein the portable device includes;

a first clock means for generating a first time-dependent dynamic variable;

a storage means for storing a predetermined static variable;

a first means for utilizing the first time-dependent dynamic variable and the predetermined static variable, wherein the first means is configured to calculate a challenge and a response in accordance with a first and second pre-determined algorithm, wherein the first pre-determined algorithm is used to compute the challenge and the second pre-determined algorithm is used to compute the response; and

a display for providing a visual display of the challenge and the response, wherein the challenge and the response are calculated at a selected time interval.

2. The authentication system of claim 1, wherein the display is configured to present the challenge in a scrambled format or concatenated with the response.

3. The authentication system of claim 1, wherein the authentication system includes a decryption node, wherein the decryption node includes:

a second clock means for generating a second time dependent dynamic variable;

wherein the decryption node is configured to perform the following steps;

receiving an identification of the portable device or an identification of an operator of the portable device;

receiving the challenge and the response displayed by the portable device during the selected time interval;

storing the predetermined static variable of the portable device;

retrieving the predetermined static variable using the received identification;

storing a last event first dynamic variable of the portable device;

retrieving the last event first dynamic variable corresponding to the portable device;

storing a last event receiver time of the portable device;

retrieving the last event receiver time corresponding to the portable device;

utilizing the second time dependent dynamic variable, the predetermined static variable, the last event first dynamic variable, the last event receiver time, and the challenge to calculate at the selected time interval an approximate value of the first time dependent dynamic variable and a presumed response in accordance with a third predetermined algorithm;

comparing the presumed response with the response;

storing the last event receiver time; and

storing the last event first dynamic variable.

4. The authentication system of claim 3, wherein the display is configured to present the challenge in a scrambled format or concatenated with the response.

5. The authentication system of claim 3, wherein the individual communicates the identification of the portable device, the challenge, and the response to the decryption node.

6. The authentication system of claim 1, wherein the authentication system is for authenticating a signor of a document, wherein the portable device is further configured to perform the step of adding, by the signor of the document, a time, a date and the challenge and the response to the document.

7. The authentication system of claim 6, wherein the display is configured to present the challenge in a scrambled format or concatenated with the response and wherein the portable device is further configured to perform the step of writing, by the Signor, on the document the challenge in a scrambled format or concatenated with the response.

8. The authentication system of claim 6, wherein the authentication system includes a decryption node operated by an operator, wherein the operator receives the document and the decryption node includes:

a second clock means for generating a second time dependent dynamic variable;

wherein the decryption node is configured to perform the following steps;

receiving an identification of the portable device or an identification of an operator of the portable device;

receiving the challenge and the response displayed by the portable device during the selected time interval;

storing the predetermined static variable of the portable device;

retrieving the predetermined static variable using the received identification;

storing a last event first dynamic variable of the portable device;

retrieving the last event first dynamic variable corresponding to the portable device;

storing a last event receiver time of the portable device;

retrieving the last event receiver time corresponding to the portable device;

utilizing the second time dependent dynamic variable, the predetermined static variable, the last event first dynamic variable, the last event receiver time, and the challenge to calculate at the selected time interval an approximate value of the first time dependent dynamic variable and a presumed response in accordance with a third predetermined algorithm;

comparing the presumed response with the response;

storing the last event receiver time; and

storing the last event first dynamic variable.