One-way communication apparatus with dynamic key generation

• US 20080238709A1
• Filed: 03/25/2008
• Published: 10/02/2008
• Est. Priority Date: 03/28/2007
• Status: Abandoned Application

• Current Assignee: Andrew Pletch, Faramarz Vaziri, Mehrdad Jamei Nadooshan
• Original Assignee: Andrew Pletch, Faramarz Vaziri, Mehrdad Jamei Nadooshan
• Inventors: Pletch, Andrew, Vaziri, Faramarz, Nadooshan, Mehrdad Jamei
• Application Number:
  US12/079,199
• Publication Number:
  US 20080238709A1
• Time in Patent Office: Days
• US Class Current: 340/825.22
• CPC Class Codes: H04N 21/42204 User interfaces specially adapted for controlling a client device through a remote control device; Remote control devices therefor constructive details of casings for the remote control device H01H9/0235; user interfaces for controlling a tuning device of a television receiver through a remote control H03J9/00; remote control of peripheral devices connected to a television receiver through the remote control device of the television receiver H04B1/205
• CPC Class Codes: H04N 21/42206 characterized by hardware details
• CPC Class Codes: H04N 21/4221 Dedicated function buttons, e.g. for the control of an EPG, subtitles, aspect ratio, picture-in-picture or teletext
• CPC Class Codes: H04N 21/42222 Additional components integrated in the remote control device, e.g. timer, speaker, sensors for detecting position, direction or movement of the remote control, microphone or battery charging device
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/441 Acquiring end-user identification , e.g. using personal code sent by the remote control or by inserting a card
• CPC Class Codes: H04N 21/4415 using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning cryptography using biological data H04L9/3231; authentication in networks using biometric H04L63/0861
• CPC Class Codes: H04N 21/4532 involving end-user characteristics, e.g. viewer profile, preferences monitoring of user activities for profile generation for accessing a video database G06F16/739; user profiles in network data switching protocols H04L67/306; processing of user preferences or user profiles in wireless networks H04W8/18
• CPC Class Codes: H04N 21/4751 for defining user accounts, e.g. accounts for children

Abstract

A remote control device is coupled with a computing device such as a set top computing device using wired or wireless connectivity for the purpose of invoking services provided by the computing device. The remote control device uses biometric methods such as fingerprint scanning to identify the user of the remote control device who is also a previously authorized user of the computing device. The remote control device possesses a unique identifying serial number. Identity of the user of the remote control device is communicated to the computing device and used by the computing device to authenticate the remote control device user as a previously authorized user of both devices. Once a remote control user is authenticated, all signals from the remote control device to the set top computing device are encrypted in such a way as to prevent impersonation using a similar remote control device or man-in-the-middle attacks.

Claims

1. A one-way communication apparatus for communicating with a slave computing device for invoking services provided by said slave computing device, said one-way communication apparatus comprising:

a shared secret data retention device to retain a shared identifying cipher associated uniquely with said one-way communication apparatus and retained within said slave computing device and known only to said one-way communication apparatus and said slave computing device;

a dynamic key generation device for generating a dynamic non-reusable key;

a user authentication device connected to receive a current user identification data for generating a user verification code that said user is authorized to communicate with said slave computing device;

an encryption device connected to receive a command instruction code, said command instruction code indicating a service to be invoked on said slave computing system, and connected to said shared secret retention device to extract said shared identifying cipher, said dynamic key generation device to receive said dynamic non-reusable key, and said user authentication device to receive said user verification code and if said user verification code indicates that said user is a known user of said one-way communication apparatus, encrypting said command instruction code, said shared identifying cipher, and said dynamic non-reusable key together to form a authenticated command message that is transmitted to said slave computing device to invoke said services provided by said slave computing device.

2. The one-way communication apparatus of claim 1 wherein said user identification data is a biometric identification data selected from the group of biometric data consisting of fingerprint data, face recognition scan data, voice print data, and unique physical biometric data.

3. The one-way communication apparatus of claim 1 further comprising:

a first memory device retaining an original user identification data captured during a registration of said user on said one-way communication apparatus,

wherein said user authentication device receives said current user identification data and in communication with said first memory device to extract said original user identification data for comparing said current user identification data and said original user identification data for verifying said user identification and generating said verification code.

4. The one-way communication apparatus of claim 1 wherein said shared secret cipher comprises a serial number assigned to said one-way communication apparatus and a personal identification number identifying an authorized user of said slave computing system.

5. The one-way communication apparatus of claim 1 wherein said authenticated command message is generated using a message digest algorithm.

6. The one-way communication apparatus of claim 1 wherein authenticated command message is generated using a secure hash algorithm.

7. The one-way communication apparatus of claim 1 wherein said command instruction code is coupled with said authenticated command message and transmitted to said slave computing system.

8. The one-way communication apparatus of claim 1 further comprising:

a key pad comprising an arrangement of key switches wherein when any of said key switches are activated, said key pad generates a key code; and

a command interpretation device in communication with said key pad receives said key code and generates said command instruction code for invoking services provided by said slave computing device.

9. The one-way communication apparatus of claim 1 wherein said dynamic non-reusable key comprises a monotonically increasing key code and a dynamically generated key.

10. The one-way communication apparatus of claim 9 wherein said dynamic key generation device comprises:

a monotonically increasing number generator for creating said monotonically increasing key code and in communication with said encryption device to transfer said monotonically increasing key code to said encryption device.

a dynamic key calculating device connected to said user authentication device to receive a unique error as a function of said current user identification data.

11. The one-way communication apparatus of claim 1 wherein said dynamic non-reusable key is a timestamp code indicating an initiation time for a session of a plurality of authenticated command messages.

12. The one-way communication apparatus of claim 11 further comprising a timer device that generates said timestamp code and is in communication with said encryption device to transfer said timestamp code to said encryption device as said dynamic non-reusable key.

13. The one-way communication apparatus of claim 1 further comprising:

protocol construction device in communication with said encryption device to receive said authenticated command message and to append a synchronization signal and error code to said authenticated command message to generate a transmission message; and

a transmitter for transmitting said transmission message to said slave computing system to invoke said services provided by said slave computing device.

14. The one-way communication apparatus of claim 4 wherein said one-way communication apparatus registers a user as an authorized user of said one-way communication apparatus by the steps of:

placing said serial number permanently in said shared secret data retention device by a manufacturer;

transferring a register command to said encryption device

communicating from said slave computing system to said user a user identification number;

communicating said user identification number by said user to said encryption device;

encrypting by said encryption device said user identification number with said serial number to generate an encrypted user code;

transferring said encrypted user code to said slave computing system;

requesting by said slave computing system said personal identification number from said user;

communicating said personal identification number to said encryption device and said shared secret data retention device;

encrypting said personal identification number with said serial number to generate an encrypted shared identifying cipher;

transferring said encrypted shared identifying cipher to said slave computing system for verification;

if said encrypted shared identifying cipher is verified, communicating by said user an original user identification data that is compared with said current user identification data to generate user verification code;

encrypting said shared identifying cipher with an approval code to generate an encrypted approval code;

transferring by said one-way communication apparatus an encrypted approval code to said slave computing system; and

registering said user as authorized to use said one-way communication apparatus to invoke said services provided by said slave computing device.

15. The one-way communication apparatus of claim 1 wherein said user invokes said services provided by said slave computing device by the steps of:

providing by said user a user identification number;

generating said current user identification data;

comparing said original user identification data to said current user identification data to verify that said user is authorized to use said one-way communication apparatus;

encrypting said dynamic non-reusable key with said shared identifying cipher to generate an dynamic non-reusable key code; and

communicating said encrypted dynamic non-reusable key code to said slave computing system.

16. The one-way communication apparatus of claim 15 wherein said user further invokes said services provided by said slave computing device by the steps of:

receiving by said one-way communication apparatus said command instruction code from said user;

encrypting said command instruction code with shared identifying cipher and said dynamic non-reusable key to generate said authenticated command message;

communicating said authenticated command message to said slave computing device;

decrypting said authenticated command message by said slave computing device to extract said command instruction code; and

invoking by said slave computing device said services provided and authorized by said slave computing device.

17. The one-way communication apparatus of claim 1 wherein said services are selected from the set of computer services consisting of voice and video telephone services, voice and video conferencing services, email services, and controlling computing functional services of said slave computing device.

18. A one-way communication system for communicating from a remote location to a slave computing system for communicating from said remote location authenticated command messages for invoking services provided by said slave computing device, said one-way communication system comprising:

a one-way communication apparatus comprising;

a shared secret data retention device to retain a shared identifying cipher associated uniquely with said one-way communication apparatus and retained within said slave computing device and known only to said one-way communication apparatus and said slave computing device;

a dynamic key generation device for generating a dynamic non-reusable key;

a user authentication device connected to receive a current user identification data for generating a user verification code that said user is authorized to communicate with said slave computing device;

an encryption device connected to receive a command instruction code, said command instruction code indicating a service to be invoked on said slave computing system, and connected to said shared secret retention device to extract said shared identifying cipher, said dynamic key generation device to receive said dynamic non-reusable key, and said user authentication device to receive said user verification code and if said user verification code indicates that said user is a known user of said one-way communication apparatus, encrypting said command instruction code, said shared identifying cipher, and said dynamic non-reusable key together to form a authenticated command message that is transmitted to said slave computing device to invoke said services provided by said slave computing device; and

a receiving device in communication with said slave computing device and said one-way communication apparatus for receiving a transmission message including said authenticated command message and decrypting said authenticated command message to develop a command invocation code to invoke said services provided by said slave computing device.

19. The one-way communication system of claim 18 wherein said one-way communication apparatus further comprises:

a first memory device retaining an original user identification data captured during a registration of said user on said one-way communication apparatus,

wherein said user authentication device receives said current user identification data and in communication with said first memory device to extract said original user identification data for comparing said current user identification data and said original user identification data for verifying said user identification and generating said verification code.

20. The one-way communication system of claim 18 wherein said shared secret cipher comprises a serial number assigned to said one-way communication apparatus and a personal identification number identifying an authorized user of said slave computing system.

21. The one-way communication system of claim 18 wherein said authenticated command message is generated using a message digest algorithm.

22. The one-way communication system of claim 18 wherein authenticated command message is generated using a secure hash algorithm.

23. The one-way communication system of claim 18 wherein said command instruction code is coupled with said authenticated command message and transmitted to said slave computing system.

24. The one-way communication system of claim 18 wherein said one-way communication apparatus further comprises:

a key pad comprising an arrangement of key switches wherein when any of said key switches are activated, said key pad generates a key code; and

a command interpretation device in communication with said key pad receives said key code and generates said command instruction code for invoking services provided by said slave computing device.

25. The one-way communication system of claim 18 wherein said dynamic non-reusable key comprises a monotonically increasing key code and a dynamically generated key.

26. The one-way communication system of claim 25 wherein said dynamic key generation device comprises:

a monotonically increasing number generator for creating said monotonically increasing key code and in communication with said encryption device to transfer said monotonically increasing key code to said encryption device.

a dynamic key calculating device connected to said user authentication device to receive a unique error as a function of said current user identification data.

27. The one-way communication system of claim 18 wherein said dynamic non-reusable key is a timestamp code indicating an initiation time for a session of a plurality of authenticated command messages.

28. The one-way communication system of claim 27 wherein said one-way communication apparatus further comprises a timer device that generates said timestamp code and is in communication with said encryption device to transfer said timestamp code to said encryption device as said dynamic non-reusable key.

29. The one-way communication system of claim 18 wherein one-way communication apparatus further comprises:

protocol construction device in communication with said encryption device to receive said authenticated command message and to append a synchronization signal and error code to said authenticated command message to generate said transmission message; and

a transmitter for transmitting said transmission message to said slave computing system to invoke said services provided by said slave computing device.

30. The one-way communication system of claim 21 wherein said one-way communication apparatus registers a user as an authorized user of said one-way communication apparatus by the steps of:

placing said serial number permanently in said shared secret data retention device by a manufacturer;

transferring a register command to said encryption device

communicating from said slave computing system to said user a user identification number;

communicating said user identification number by said user to said encryption device;

encrypting by said encryption device said user identification number with said serial number to generate an encrypted user code;

transferring said encrypted user code to said slave computing system;

requesting by said slave computing system said personal identification number from said user;

communicating said personal identification number to said encryption device and said shared secret data retention device;

encrypting said personal identification number with said serial number to generate an encrypted shared identifying cipher;

transferring said encrypted shared identifying cipher to said slave computing system for verification;

if said encrypted shared identifying cipher is verified, communicating by said user an original user identification data that is compared with said current user identification data to generate user verification code;

encrypting said shared identifying cipher with an approval code to generate an encrypted approval code;

transferring by said one-way communication apparatus an encrypted approval code to said slave computing system; and

registering said user as authorized to use said one-way communication apparatus to invoke said services provided by said slave computing device.

31. The one-way communication system of claim 18 wherein said user invokes said services provided by said slave computing device by the steps of:

providing by said user a user identification number;

generating said current user identification data;

comparing said original user identification data to said current user identification data to verify that said user is authorized to use said one-way communication apparatus;

encrypting said dynamic non-reusable key with said shared identifying cipher to generate a dynamic non-reusable key code; and

communicating said encrypted dynamic non-reusable key code to said slave computing system.

32. The one-way communication system of claim 31 wherein said user further invokes said services provided by said slave computing device by the steps of:

receiving by said one-way communication apparatus said command instruction code from said user;

encrypting said command instruction code with shared identifying cipher and said dynamic non-reusable key to generate said authenticated command message;

communicating said authenticated command message to said slave computing device;

decrypting said authenticated command message by said slave computing device to extract said command instruction code; and

invoking by said slave computing device said services provided and authorized by said slave computing device.

33. The one-way communication system of claim 18 wherein said services are selected from the set of computer services consisting of voice and video telephone services, voice and video conferencing services, email services, and controlling computing functional services of said slave computing device.

34. The one-way communication system of claim 18 where in said receiving device comprises:

a reception device for acquiring and conditioning said transmission message;

a protocol extraction device in communication with said reception device to receive said transmission message and extract said authenticated command message

a decryption device in communication with said protocol extraction device to receive said authenticated command message to extract said command instruction code, shared identifying cipher, and said dynamic non-reusable key;

a user verification device in communication with said decryption device to receive said command instruction code, shared identifying cipher, and said dynamic non-reusable key and compare shared identifying cipher, and said dynamic non-reusable key with a retained copy of said shared identifying cipher, and said dynamic non-reusable key to verify that said command instruction code is from an authorized user and to generate a verified user code; and

a signal interpretation device in communication with said user verification device to receive said verified user code and said command instruction code such that if said verified user code indicates that said user is authorized, said signal interpretation device forwards said command instruction code to said slave computing device to invoke said services provided by said slave computing device.

35. The one-way communication system of claim 34 wherein said signal interpretation device is communication with said protocol extraction device to receive an un-encrypted command instruction code and in turn forwards said un-encrypted command instruction code to said slave computing system for execution if said verified user code indicates that said user is authorized.

36. The one-way communication system of claim 34 wherein said user verification device receives a user permission code for determining if an authorized user is permitted to invoke said services provided by said slave computing device and setting said verified user code whether said authorized user has permission for invoking said services from said slave computing device.

37. A method for communicating from a remote control device to a slave computing system using authenticated command messages for invoking services provided by said slave computing device, said method comprising the steps of:

transmitting by way of a one-way communication path an authenticated command message by the steps of;

retaining in a shared secret data retention device a shared identifying cipher associated uniquely with said remote control device,

retaining within said slave computing device said shared identifying cipher such that said shared identifying cipher is known only to said remote control device and said slave computing device,

generating a dynamic non-reusable key,

generating a user verification code that said user is authorized to communicate with said slave computing device from a current user identification data,

receiving a command instruction code indicating a service to be invoked on said slave computing system,

if said user verification code indicates that said user is a known user of said remote control device, encrypting said command instruction code, said shared identifying cipher, and said dynamic non-reusable key together to form said authenticated command message, and

transmitting said authenticated command message to said slave computing device to invoke said services provided by said slave computing device; and

receiving a transmission message including said authenticated command message; and

decrypting said authenticated command message to develop a command invocation code to invoke said services provided by said slave computing device.

38. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the steps of:

retaining an original user identification data captured during a registration of said user on said remote control device in a first memory device;

receiving said current user identification data;

extracting said original user identification data from said first memory device; and

comparing said current user identification data and said original user identification data for verifying said user identification and generating said verification code.

39. The method for communicating from a remote control device to a slave computing system of claim 37 wherein said shared secret cipher comprises a serial number assigned to said one-way communication apparatus and a personal identification number identifying an authorized user of said slave computing system.

40. The method for communicating from a remote control device to a slave computing system of claim 37 wherein encrypting said command instruction code employs a message digest algorithm.

41. The method for communicating from a remote control device to a slave computing system of claim 37 wherein encrypting said command instruction code employs a secure hash algorithm.

42. The method for communicating from a remote control device to a slave computing system of claim 37 wherein said command instruction code is coupled with said authenticated command message.

43. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the steps of:

generating a key code by activating any of an arrangement of key switches of a key pad; and

generating said command instruction code for invoking services provided by said slave computing device from said key code.

44. The method for communicating from a remote control device to a slave computing system of claim 37 wherein said dynamic non-reusable key comprises a monotonically increasing key code and a dynamically generated key.

45. The method for communicating from a remote control device to a slave computing system of claim 44 wherein generating a dynamic non-reusable key comprises the steps of:

creating said monotonically increasing key code and in communication with said encryption device to transfer said monotonically increasing key code to said encryption device; and

generating said dynamically non-reusable key as a unique error that is a function of said current user identification data.

46. The method for communicating from a remote control device to a slave computing system of claim 37 wherein generating said dynamic non-reusable key comprises the step of creating a timestamp code indicating an initiation time for a session of a plurality of authenticated command messages ask said dynamic non-reusable key.

47. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the step of:

constructing said transmission message from said authenticated command message by appending a synchronization signal and error code to said authenticated command message.

48. The method for communicating from a remote control device to a slave computing system of claim 40 further comprising the step of registering a user as an authorized user of said one-way communication apparatus by the steps of:

placing said serial number permanently in said shared secret data retention device by a manufacturer;

transferring a register command to said encryption device

communicating from said slave computing system to said user a user identification number;

communicating said user identification number by said user to said encryption device;

encrypting by said encryption device said user identification number with said serial number to generate an encrypted user code;

transferring said encrypted user code to said slave computing system;

requesting by said slave computing system said personal identification number from said user;

communicating said personal identification number to said encryption device and said shared secret data retention device;

encrypting said personal identification number with said serial number to generate an encrypted shared identifying cipher;

transferring said encrypted shared identifying cipher to said slave computing system for verification;

if said encrypted shared identifying cipher is verified, communicating by said user an original user identification data that is compared with said current user identification data to generate user verification code;

encrypting said shared identifying cipher with an approval code to generate an encrypted approval code;

transferring by said one-way communication apparatus an encrypted approval code to said slave computing system; and

registering said user as authorized to use said one-way communication apparatus to invoke said services provided by said slave computing device.

49. The method for communicating from a remote control device to a slave computing system of claim 37 further comprises the step of invoking said services provided by said slave computing device by the steps of:

providing by said user a user identification number;

generating said current user identification data;

comparing said original user identification data to said current user identification data to verify that said user is authorized to use said one-way communication apparatus;

encrypting said dynamic non-reusable key with said shared identifying cipher to generate a dynamic non-reusable key code; and

communicating said encrypted dynamic non-reusable key code to said slave computing system.

50. The method for communicating from a remote control device to a slave computing system of claim 49 wherein invoking said services provided by said slave computing device further comprises the steps of:

receiving by said one-way communication apparatus said command instruction code from said user;

encrypting said command instruction code with shared identifying cipher and said dynamic non-reusable key to generate said authenticated command message;

communicating said authenticated command message to said slave computing device;

decrypting said authenticated command message by said slave computing device to extract said command instruction code; and

invoking by said slave computing device said services provided and authorized by said slave computing device.

51. The method for communicating from a remote control device to a slave computing system of claim 37 wherein said services are selected from the set of computer services consisting of voice and video telephone services, voice and video conferencing services, email services, and controlling computing functional services of said slave computing device.

52. The method for communicating from a remote control device to a slave computing system of claim 37 wherein decrypting said authenticated command message comprises the step of extracting said command instruction code, shared identifying cipher, and said dynamic non-reusable key.

53. The method for communicating from a remote control device to a slave computing system of claim 37 wherein receiving a transmission message comprises the steps of:

acquiring and conditioning said transmission message;

extracting said authenticated command message;

54. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the steps of:

comparing said shared identifying cipher, and said dynamic non-reusable key with a retained copy of said shared identifying cipher, and said dynamic non-reusable key

verifying that said command instruction code is from an authorized user;

generating a verified user code; and

if said verified user code indicates that said user is authorized, forwarding said command instruction code to said slave computing device to invoke said services provided by said slave computing device.

55. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the steps of”

;

receiving an un-encrypted command instruction code; and

forwarding said un-encrypted command instruction code to said slave computing system for execution if said verified user code indicates that said user is authorized.

56. The method for communicating from a remote control device to a slave computing system of claim 37 further comprising the steps of

receiving a user permission code for determining if an authorized user is permitted to invoke said services provided by said slave computing device;

and

setting said verified user code whether said authorized user has permission for invoking said services from said slave computing device.

57. A computer readable medium containing program instruction code readable by and executable on a computing system which, when executed on the computing system comprising a remote control and a slave computing system, performs a computer program process for communicating from said remote control device to said slave computing system using authenticated command messages for invoking services provided by said slave computing device, said program process comprising the steps of:

transmitting by way of a one-way communication path an authenticated command message by the steps of;

retaining in a shared secret data retention device a shared identifying cipher associated uniquely with said remote control device,

retaining within said slave computing device said shared identifying cipher such that said shared identifying cipher is known only to said remote control device and said slave computing device,

generating a dynamic non-reusable key,

generating a user verification code that said user is authorized to communicate with said slave computing device from a current user identification data,

receiving a command instruction code indicating a service to be invoked on said slave computing system,

if said user verification code indicates that said user is a known user of said remote control device, encrypting said command instruction code, said shared identifying cipher, and said dynamic non-reusable key together to form said authenticated command message, and

transmitting said authenticated command message to said slave computing device to invoke said services provided by said slave computing device; and

receiving a transmission message including said authenticated command message; and

decrypting said authenticated command message to develop a command invocation code to invoke said services provided by said slave computing device.

58. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the steps of:

retaining an original user identification data captured during a registration of said user on said remote control device in a first memory device;

receiving said current user identification data;

extracting said original user identification data from said first memory device; and

comparing said current user identification data and said original user identification data for verifying said user identification and generating said verification code.

59. The computer readable medium containing program instruction code of claim 57 wherein said shared secret cipher comprises a serial number assigned to said one-way communication apparatus and a personal identification number identifying an authorized user of said slave computing system.

60. The computer readable medium containing program instruction code of claim 57 wherein encrypting said command instruction code employs a message digest algorithm.

61. The computer readable medium containing program instruction code of claim 57 wherein encrypting said command instruction code employs a secure hash algorithm.

62. The computer readable medium containing program instruction code of claim 57 wherein said command instruction code is coupled with said authenticated command message.

63. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the steps of:

generating a key code by activating any of an arrangement of key switches of a key pad; and

generating said command instruction code for invoking services provided by said slave computing device from said key code.

64. The computer readable medium containing program instruction code of claim 57 wherein said dynamic non-reusable key comprises a monotonically increasing key code and a dynamically generated key.

65. The computer readable medium containing program instruction code of claim 64 wherein generating a dynamic non-reusable key comprises the steps of:

creating said monotonically increasing key code and in communication with said encryption device to transfer said monotonically increasing key code to said encryption device; and

generating said dynamically non-reusable key as a unique error that is a function of said current user identification data.

66. The computer readable medium containing program instruction code of claim 57 wherein generating said dynamic non-reusable key comprises the step of creating a timestamp code indicating an initiation time for a session of a plurality of authenticated command messages ask said dynamic non-reusable key.

67. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the step of:

constructing said transmission message from said authenticated command message by appending a synchronization signal and error code to said authenticated command message.

68. The computer readable medium containing program instruction code of claim 61 wherein said program process further comprises the step of registering a user as an authorized user of said one-way communication apparatus by the steps of:

placing said serial number permanently in said shared secret data retention device by a manufacturer;

transferring a register command to said encryption device

communicating from said slave computing system to said user a user identification number;

communicating said user identification number by said user to said encryption device;

encrypting by said encryption device said user identification number with said serial number to generate an encrypted user code;

transferring said encrypted user code to said slave computing system;

requesting by said slave computing system said personal identification number from said user;

communicating said personal identification number to said encryption device and said shared secret data retention device;

encrypting said personal identification number with said serial number to generate an encrypted shared identifying cipher;

transferring said encrypted shared identifying cipher to said slave computing system for verification;

if said encrypted shared identifying cipher is verified, communicating by said user an original user identification data that is compared with said current user identification data to generate user verification code;

encrypting said shared identifying cipher with an approval code to generate an encrypted approval code;

transferring by said one-way communication apparatus an encrypted approval code to said slave computing system; and

registering said user as authorized to use said one-way communication apparatus to invoke said services provided by said slave computing device.

69. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the step of invoking said services provided by said slave computing device by the steps of:

providing by said user a user identification number;

generating said current user identification data;

comparing said original user identification data to said current user identification data to verify that said user is authorized to use said one-way communication apparatus;

encrypting said dynamic non-reusable key with said shared identifying cipher to generate a dynamic non-reusable key code; and

communicating said encrypted dynamic non-reusable key code to said slave computing system.

70. The computer readable medium containing program instruction code of claim 69 wherein invoking said services provided by said slave computing device further comprises the steps of:

receiving by said one-way communication apparatus said command instruction code from said user;

encrypting said command instruction code with shared identifying cipher and said dynamic non-reusable key to generate said authenticated command message;

communicating said authenticated command message to said slave computing device;

decrypting said authenticated command message by said slave computing device to extract said command instruction code; and

invoking by said slave computing device said services provided and authorized by said slave computing device.

71. The computer readable medium containing program instruction code of claim 57 wherein said services are selected from the set of computer services consisting of voice and video telephone services, voice and video conferencing services, email services, and controlling computing functional services of said slave computing device.

72. The computer readable medium containing program instruction code of claim 57 wherein decrypting said authenticated command message comprises the step of extracting said command instruction code, shared identifying cipher, and said dynamic non-reusable key.

73. The computer readable medium containing program instruction code of claim 57 wherein receiving a transmission message comprises the steps of:

acquiring and conditioning said transmission message;

extracting said authenticated command message;

74. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the steps of:

comparing said shared identifying cipher, and said dynamic non-reusable key with a retained copy of said shared identifying cipher, and said dynamic non-reusable key

verifying that said command instruction code is from an authorized user;

generating a verified user code; and

if said verified user code indicates that said user is authorized, forwarding said command instruction code to said slave computing device to invoke said services provided by said slave computing device.

75. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the steps of”

;

receiving an un-encrypted command instruction code; and

forwarding said un-encrypted command instruction code to said slave computing system for execution if said verified user code indicates that said user is authorized.

76. The computer readable medium containing program instruction code of claim 57 wherein said program process further comprises the steps of

receiving a user permission code for determining if an authorized user is permitted to invoke said services provided by said slave computing device;

and

setting said verified user code whether said authorized user has permission for invoking said services from said slave computing device.