SYSTEM AND METHOD FOR AUTHENTICATION

• US 20100333184A1
• Filed: 09/10/2010
• Published: 12/30/2010
• Est. Priority Date: 07/31/2002
• Status: Active Grant

• Current Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Original Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Inventors: Ooi, Chin Shyan, Tan, Henry, Poo, Teng Pin, Lim, Lay Chuan
• Granted Patent: US 8,234,700 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A system and method for authentication including verifying a password is disclosed. In one embodiment, the authentication system includes a first storage unit to store an authentication sequence, a read-only memory unit to store an authentication algorithm, and a second storage unit. A microcontroller is coupled to the first storage unit, the read-only memory unit, and is configured to be coupled to and uncoupled from a host. The microcontroller is configured to execute the authentication algorithm to verify a password with the authentication sequence, and to send an access request to a web server via the host if the authentication algorithm has verified the password with the authentication sequence.

Claims

1. An authentication system comprising:

a first storage unit configured to store an authentication sequence;

a read-only memory unit configured to store an authentication algorithm;

a second storage unit; and

a microcontroller coupled to the first storage unit, the read-only memory unit, and the second storage unit, and configured to be coupled to and uncoupled from a host and configured to execute the authentication algorithm to verify a password with the authentication sequence;

the microcontroller further configured to store data received from a web server via the host in the second storage unit if the authentication algorithm has verified the password with the authentication sequence.

2. The authentication system of claim 1, further comprising a universal serial bus (USB) connector for coupling the microcontroller to the host.

3. The authentication system of claim 1, further comprising an encoder coupled to the microcontroller, the encoder configured to encrypt data received from the web server.

4. The authentication system of claim 1, further comprising an encoder coupled to the microcontroller, the encoder configured to decrypt data received from the web server.

5. The authentication system of claim 1, wherein the authentication sequence is encrypted.

6. A method comprising:

receiving a password in an authentication system coupled to a host;

executing an authentication algorithm stored in a read-only memory unit of the authentication system to verify the password with an authentication sequence; and

if the authentication algorithm has verified the password, storing secured data received from a web server via the host in a second memory unit of the authentication system.

7. The method of claim 6, further comprising encrypting the secured data received from the web server before storing the secured data in the second memory unit.

8. The method of claim 6, further comprising decrypting the secured data received from the web server before storing the secured data in the second memory unit.

9. The method of claim 6, further comprising allowing access to the secured data stored in the second memory unit only if the authentication algorithm has verified the password.