System and Method for Controlling Access to a Third-Party Application with Passwords Stored in a Secure Element

• US 20120266220A1
• Filed: 04/16/2012
• Published: 10/18/2012
• Est. Priority Date: 11/17/2010
• Status: Abandoned Application

• Current Assignee: TIS Incorporated (It Holdings Corporation)
• Original Assignee: Sequent Software, Inc.
• Inventors: Brudnicki, David, Reisgies, Hans
• Application Number:
  US13/447,489
• Publication Number:
  US 20120266220A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/629 to features or functions of an application

Abstract

A system for controlling access to an application on a portable communication device having a secured element and a user interface comprises memory associated with the secure element; a card management module operably associated with the portable communication device and with the secure element capable of controlling the secured element to facilitate writing to and reading from the memory; and a password management module operably associated with the card management module, the portable communication device user interface, and the application, the password management module receiving an application identifier associated with the application, a user name, and a password from the user interface, and providing an access command to the application based on whether the received user name and password match information stored in the memory.

Claims

1. A system for controlling access to an application on a portable communication device having a secured element and a user interface, the system comprising:

memory associated with the secure element;

a card management module operably associated with the portable communication device and with the secure element capable of controlling the secured element to facilitate writing to and reading from the memory;

a password management module operably associated with the card management module, the portable communication device user interface, and the application, the password management module receiving an application identifier associated with the application, a user name, and a password from the user interface, and providing an access command to the application based on whether the received user name and password match information stored in the memory.

2. The system according to claim 1 wherein the memory associated with the secure element is within the secure element.

3. The system according to claim 1 wherein the memory associated with the secure element is outside the secure element and an encryption key is used to encrypt contents of the memory.

4. The system according to claim 3 wherein the encryption key is stored within the secured element.

5. The system according to claim 2 wherein the memory is located within the portable communication device.

6. The system according to claim 1 wherein the secure element includes a pseudo-random number generator, the graphical user interface further comprising an interface for creating passwords with portions generated by the pseudo-random number generator.

7. The system according to claim 1 wherein the operable connection between the card management module and the graphical user interface is a trusted connection.