METHOD AND APPARATUS FOR DYNAMIC AUTHENTICATION

• US 20130318575A1
• Filed: 02/03/2012
• Published: 11/28/2013
• Est. Priority Date: 02/03/2011
• Status: Abandoned Application

• Current Assignee: Identive Group Incorporated
• Original Assignee: Identive Group Incorporated
• Inventors: Hart, Jason Dean, Herscovitch, Matthew Patrick
• Application Number:
  US13/983,047
• Publication Number:
  US 20130318575A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

One embodiment provides a token for dynamically authenticating a user. The token includes a memory for storing secure data; a processor for calculating authentication credentials of the user based on the secure data, and for constructing a server address based on the authentication credentials. Also included is a transmitter for transmitting the server address to a host controller wherein the host controller is configurable to communicate with a remote server locatable at the server address such that the user is dynamically authenticated on the remote server using the authentication credentials.

Claims

1. A token for dynamically authenticating a user, said token including:

a memory for storing secure data;

a processor for calculating authentication credentials of said user based on said secure data, and for constructing a server address based on said authentication credentials; and

a transmitter for transmitting said server address to a host controller wherein said host controller is configurable to communicate with a remote server locatable at said server address such that said user is dynamically authenticated on said remote server using said authentication credentials.

2. A token according to claim 1 wherein said host controller is a mobile communications device configurable for communication with said remote server.

3. A token according to claim 1 or claim 2 wherein said secure data includes a client key that corresponds to a host key stored on said host controller.

4. A token according to any one of the preceding claims wherein said authentication credentials includes an encrypted one-time password that is generated based on said secure data.

5. A token according to any one of the preceding claims wherein said secure data includes a username for identifying a user and for determining whether said user has permission to access said remote server.

6. A token according to any one of the preceding claims wherein said remote server is a webserver and said authentication credentials grants access to a website stored on said webserver.

7. A token according to any one of the preceding claims wherein said authentication credentials only grants access to one section of said remote server.

8. A token according to claim 7 wherein access to other sections of said remote server is granted upon further authentication by said remote server.

9. A token according to any one of the preceding claims wherein said host controller includes a proximity coupling device and said token is energised when brought into proximity with said proximity coupling device.

10. A token according to any one of the preceding claims wherein said token is energised by a local energy source.

11. A system for dynamically authenticating a user, said system including a token according to any one of the preceding claims and a host controller, said host controller including:

a receiver for receiving said server address;

a network interface for locating and communicating with said remote server, wherein said authentication credentials are provided to said remote server thereby to authenticate said user.

12. A method for dynamically authenticating a user, said method including the steps of:

a) calculating authentication credentials of said user based on secure data stored on a token,

b) constructing a server address based on said authentication credentials; and

c) transmitting said server address to a host controller wherein said host controller is configurable to communicate with a remote server locatable at said server address, such that said user is dynamically authenticated on said remote server using said authentication credentials.

13. A system for dynamically authenticating a user, said system including a token and a host controller, said token including:

a memory for storing secure data;

a processor for calculating authentication credentials of said user based on said secure data, and for constructing a server address based on said authentication credentials; and

a transmitter for transmitting said server address to a host controller wherein said host controller is configurable to communicate with a remote server locatable at said server address; and

said host controller including;

a proximity coupling device for coupling with said token;

a receiver for receiving said server address;

a network interface for communicating with said remote server, wherein said authentication credentials are provided to said remote server thereby to dynamically authenticate said user.