METHOD, SYSTEM AND DEVICE FOR AUTHENTICATING A USER

• US 20090282247A1
• Filed: 07/10/2009
• Published: 11/12/2009
• Est. Priority Date: 08/17/2004
• Status: Abandoned Application

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Adams, Neil P., Brown, Michael S., Brown, Michael K., Kirkup, Michael G., Little, Herbert A.
• Application Number:
  US12/500,840
• Publication Number:
  US 20090282247A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly

Abstract

Embodiments described herein relate to a method and device for authenticating a user of a computer and a corresponding system using the method and device. The device is a handheld electronic device configured to receive a first authentication code and to generate a secure identification token. If the received first authentication code and the generated token match, a second authentication code is transmitted to a computer to unlock the computer.

Claims

1. A method of authenticating a user of a computer via a handheld electronic device, the method comprising:

receiving a first authentication code at the handheld electronic device, wherein the first authentication code has been generated using an algorithm and objective criterion;

generating a secure identification token at the handheld electronic device using the algorithm and objective criterion;

comparing the secure identification token generated at the handheld electronic device to the first authentication code received at the handheld electronic device; and

if the secure identification token generated at the handheld electronic device matches the first authentication code received at the handheld electronic device, transmitting a second authentication code from the handheld electronic device to the computer over a communication link therebetween, the second authentication code for unlocking the computer.

2. The method of claim 1, wherein the first authentication code is received at the handheld electronic device via a user interface.

3. The method of claim 1, wherein the handheld electronic device is received in a cradle and the communication link is established between the computer and the handheld electronic device through the cradle.

4. The method of claim 1, wherein the communication link is formed directly between an I/O port of the computer and an I/O port of the handheld electronic device.

5. The method of claim 4, wherein the communication link comprises a wireless communication link.

6. The method of claim 4, wherein the communication link comprises a serial cable or USB cable.

7. The method of claim 1, further comprising:

if the secure identification token generated at the handheld electronic device matches the first authentication code received at the handheld electronic device, permitting user access to the handheld electronic device.

8. The method of claim 1, further comprising:

requesting user confirmation input at the handheld electronic device prior to transmitting the second authentication code to the computer.

9. The method of claim 1, wherein the second authentication code is stored in a memory of the handheld electronic device or in a separate memory accessible to the handheld electronic device.

10. The method of claim 1, wherein the second authentication code is stored on a smart card readable by the handheld electronic device.

11. A handheld electronic device comprising:

a processor configured to implement a token generator at the handheld electronic device, the token generator configured to generate a secure identification token at the handheld electronic device using an algorithm and objective criterion; and

a communication interface configured to permit communications between the handheld electronic device and a computer;

wherein the processor is configured to receive a first authentication code at the handheld electronic device, wherein the first authentication code has been generated using the algorithm and objective criterion; and

wherein the processor is further configured to compare the secure identification token generated at the handheld electronic device to the first authentication code received at the handheld electronic device, and, if the secure identification token generated at the handheld electronic device matches the first authentication code received at the handheld electronic device, to transmit a second authentication code from the handheld electronic device to the computer over a communication link therebetween, the second authentication code for unlocking the computer.

12. The device of claim 11, further comprising a user interface, wherein the first authentication code is received at the handheld electronic device via the user interface.

13. The device of claim 11, further comprising a user interface, wherein the processor is further configured to control the user interface to request user confirmation input prior to providing the second authentication code to the computer.

14. The device of claim 11, wherein the second authentication code is stored in a memory of the handheld electronic device or in a separate memory accessible to the handheld electronic device.

15. The device of claim 11, wherein the second authentication code is stored on a smart card readable by the handheld electronic device.

16. The device of claim 11, further comprising a communication port coupled to the communication interface.

17. The device of claim 11, wherein the handheld electronic device is receivable in a cradle so that a communication link can be established between the computer and the handheld electronic device through the cradle.

18. The device of claim 11, wherein a communication link is formed directly between an I/O port of the computer and an I/O port of the handheld electronic device.

19. The device of claim 18, wherein the communication link comprises a wireless communication link.

20. The device of claim 18, wherein the communication link comprises a serial cable or USB cable.

21. A computer readable storage medium having stored thereon computer program instructions which, when executed by a processor of a handheld electronic device, cause the handheld electronic device to perform a method of authenticating a user of a computer via the handheld electronic device, wherein the method comprises:

receiving a first authentication code at the handheld electronic device, wherein the first authentication code has been generated using an algorithm and objective criterion;

generating a secure identification token at the handheld electronic device using the algorithm and objective criterion;

comparing the secure identification token generated at the handheld electronic device to the first authentication code received at the handheld electronic device; and

if the secure identification token generated at the handheld electronic device matches the first authentication code received at the handheld electronic device, transmitting a second authentication code from the handheld electronic device to the computer over a communication link therebetween, the second authentication code for unlocking the computer.