Portable Device For Clearing Access

• US 20080244720A1
• Filed: 09/08/2005
• Published: 10/02/2008
• Est. Priority Date: 09/14/2004
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke & Devrient GmbH
• Inventors: Bartsch, Armin, Muller, Robert, Stephan, Elmar
• Granted Patent: US 8,438,620 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The invention relates to a portable device (2) for activating access in or over a computer network (4). A terminal (1) is connected to the computer network (4) at least temporarily. The portable device (2) has functionalities implemented therein for inserting the portable device (2) into a communication path between the terminal (1) and the computer network (4), for authenticating a user, and for providing access data for activating access.

Claims

1. A portable device for activating access in or over a computer network to which a terminal is connected at least temporarily, comprising functionalities for inserting the portable device into a communication path between the terminal and the computer network and for providing access data for activating access.

2. The portable device according to claim 1, wherein the device is associated personally with a user or group of users.

3. The portable device according to claim 1, wherein said functionalities include functionalities for authenticating a user.

4. The portable device according to claim 1, including a sensor device for detecting a biometric feature.

5. The portable device according to claim 1, including a server program.

6. The portable device according to claim 1, wherein the device is operable as a proxy server.

7. The portable device according to claim 1, wherein the device is operable as a gateway.

8. The portable device according to claim 1, wherein the access data are stored in the device so as to be protected from access.

9. The portable device according to claim 1, wherein the access data can be generated therewith.

10. The portable device according to claim 1, wherein the device is configured to independently perform measures for causing the activating of access.

11. The portable device according to claim 1, wherein the device includes means for recognizing changes of an Internet page and does not provide the access data if changes on an access page are recognized.

12. The portable device according to claim 1, configurable with regard to the access or accesses to be activated therewith.

13. The portable device according to claim 12, wherein the configuration can specify the modalities for at least one of providing the access data and providing the content of the access data.

14. The portable device according to claim 12, wherein the configuration is creatable by means of at least one of a manual and software-supported execution of at least part of the sequence during the activation of access.

15. The portable device according to claim 1, wherein the computer network is the Internet.

16. The portable device according to claim 1, wherein the device it is formed as a chip card.

17. A system for activating access in or over a computer network, comprising a terminal which is connected to the computer network at least temporarily, and a portable device in which functionalities are implemented for inserting the portable device into a communication path between the terminal and the computer network and for providing access data for activating access.

18. A method for activating access in or over a computer network to which a terminal is connected at least temporarily, comprising:

producing a data connection between the terminal and a portable device for providing access data,

inserting the portable device into a communication path between the terminal and the computer network, and

causing the activation of access with the help of the access data.

19. The method according to claim 18, wherein the terminal uses for communication with the portable device at least partly the same software with which it communicates in the computer network or software stored on the portable device.

20. The method according to claim 18, wherein the authentication of the user to the portable device is effected by means of secret information which is at least one of input to the terminal and using a biometric feature of the user which is detected by the portable device.

21. The method according to claim 18, wherein the procedure for activating access is invisible to the user.

22. The method according to claim 18, wherein the activation of access is caused by the portable device performing an entry of the access data in an entry field or a plurality of entry fields of an access page.

23. The method according to claim 18, wherein the access to data or an application is activated.