Personal Portable Secured Network Access System

• US 20100186078A1
• Filed: 01/20/2010
• Published: 07/22/2010
• Est. Priority Date: 01/20/2009
• Status: Active Grant

• Current Assignee: Gemcar Inc.
• Original Assignee: Authentication Holdings LLC
• Inventors: Napoli, John F., Hooks, Edward F. JR.
• Granted Patent: US 9,166,786 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Authenticating a customer for access to a content server. The customer is biometrically authenticated to a secure terminal based on information stored in a secure personal storage device belonging to the customer. The customer is allowed access to the secure terminal after a successful authentication. The customer is authenticated to the content server based on account credentials stored on the secure personal storage device issued by the content server.

Claims

1. A method for authenticating a customer for access to a content server, comprising:

biometrically authenticating a customer to a secure terminal based on information stored in a secure personal storage device belonging to the customer, wherein the customer is allowed access to the secure terminal after a successful authentication; and

authenticating the customer to the content server based on account credentials stored on the secure personal storage device issued by the content server.

2. A system, comprising:

a secure personal storage device that includes biometric authentication information and a plurality of confidentially issued access credentials for a plurality of network resources; and

a secure terminal that is adapted to operate only when the secure personal storage device is inserted into the secure terminal, wherein the secure terminal authenticates a customer belonging to the secure personal storage device using the biometric authentication information, and enables authenticating the customer for accessing the plurality of network resources based on the plurality of confidentially issued access credentials.