Time code telephone security access system

• US 4,761,808 A
• Filed: 03/18/1987
• Issued: 08/02/1988
• Est. Priority Date: 03/18/1987
• Status: Expired due to Fees

• Current Assignee: Security Dynamics Technologies, Inc. (Symphony Technology Group LLC)
• Original Assignee: Sheldon Howard
• Inventors: Howard, Sheldon
• Primary Examiner(s): SCHREYER, STAFFORD
• Application Number:
  US07/027,336
• Time in Patent Office: 503 Days
• Field of Search: 379/112, 379/418, 379/361, 379/189, 379/95, 379/97
• US Class Current: 379/93.02
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04Q 3/0016 Arrangements providing connection between exchanges
• CPC Class Codes: Y10S 379/903 Password

Abstract

The present invention comprises a novel means of controlling access to long distance telephone services or other information processing systems through the use of time dependent user ID numbers. The ID number of the present invention contains a fixed portion, and a changing portion that changes over time in a predetermined manner. Unless the fixed and changing portions of an incoming ID number received from a user attempting to gain access to the secured system are both correct, access is denied. The invention also includes a multi-use detector that determines if a valid ID number is used simultaneously by two different users.

Claims

1. A security access control system for controlling access of users to an information processing system, said security access control system comprising:

a plurality of remote terminals each comprising a signal generating means for generating a coded identification signal and a transmitting means for transmitting said coded identification signal;

a base terminal comprising a receiving means for receiving said coded identification signals, a signal processing means for decoding and determining the validity of each of said coded identification signal, and an access control means for controlling access to said information processing system;

each of said coded identification signals generated by said signal generating means of said remote terminal comprising a sequence of a predetermined number of alphanumeric digits, a first group of said alphanumeric digits comprising a time code and a second group of said alphanumeric digits comprising an address code;

said time code changing periodically in a predetermined manner;

said address code remaining essentially constant over time;

each of said signal generating means comprising a first time code memory means containing a first predetermined sequence of time codes, and a first clock means for selecting a first time code from said first sequence of time codes contained in said first time code memory means;

said signal processing means of said base terminal comprising a second time code memory means containing a second predetermined sequence of time codes and a second clock means; and

said signal processing means further comprising first comparator means for comparing said time code component of said incoming identification signal with a second time code selected according to the time indicated by said second clock means from said second time code memory means;

whereby said base terminal denies access to said information processing system if said time code component of said incoming identification signal and said second time code are not identical.

2. The security access control system of claim 1 wherein:

each of said signal generating means further comprises a first address code memory means containing a unique first address code; and

said signal processing means further comprises a second address code memory means containing a plurality of address codes including said first address codes of each of said remote terminals and a second comparator means for comparing said address code component of said incoming identification signal to said plurality of address codes contained in said second address code memory means;

whereby said base terminal denies access to said system if said address code component of said incoming identification signal is not identical with at least one of said plurality of address codes contained in said second address code memory means.

3. The security access control system of claim 1 wherein each of said first sequences of time codes contained in each of said first time code memories of each of said remote terminals are identical to each other and to said second sequence of time codes contained in said second time code memory of said base terminal.

4. The security access control system of claim 2 wherein each of said first sequences of time codes contained in each of said first time code memories of each of said remote terminals differ from each other, and wherein said second time code memory means contains each of said first sequences of time codes of each of said remote terminals, each of said first sequences of time codes being identified in said second time code memory means by the address code of the corresponding remote terminal.

5. The security access control system of claim 2 wherein said base terminal further comprises a multiple use detector, said multiple use detector comprising an in-use register means and an in-use comparator means, said in-use register means containing the address codes which, at any point in time, are being used to access said system, said in-use comparator means for comparing the address code portion of an incoming identification signal to the address codes contained in said in-use register, such that any address code being used simultaneously by two or more users can be detected.

6. The security access control system of claim 1 wherein said transmitting means comprises a tone generator, said tone generator for transforming said sequence of alphanumeric digits of said identification signal into a corresponding sequence of tones;

and

wherein said receiving means comprises a tone decoder for transforming said sequence of tones into the corresponding sequence of alphanumeric digits;

whereby said coded identification code can be transmitted as an audio signal by conventional audio communications means.

7. The security access control system of claim 6 wherein said receiving means further comprises a timer means for measuring the time between reception by said receiving means of the first and last tones of said sequences of tones received by said receiving means.

8. The security access control system of claim 1 wherein said signal generating means comprises a display means for visually displaying said coded identification signal.

9. The security access control system of claim 1 wherein said transmitting means comprises a telephone.

10. A method for verifying the authenticity of incoming identification signals received by an access control means of a secured information processing system to prevent access by unauthorized users to said system, said verification method comprising the steps of:

providing each of a plurality of authorized users of said system with a unique, multi-digit alphanumeric address code;

providing each of said authorized users with a predetermined sequence of multi-digit alphanumeric time codes, each time code corrresponding to different period of time;

providing each of said authorized users with a means for combining said address code and said time code in a predetermined pattern;

dividing an incoming identification signal into time code portions and address code portions corresponding to said predetermined patterns;

comparing said address code portion of said incoming identification signal to a list of valid address codes of authorized users;

rejecting said incoming identification signal as invalid if said address code portion of said incoming identification signal is not identical to any of said valid address codes;

comparing said time code portion of said incoming identification signal to the time code corresponding to the time at which said incoming identification signal is received; and

rejecting said incoming identification signal as invalid if said time code portion of said incoming identification signal is not identical to said corresponding time code.

11. The verification method of claim 10 wherein each authorized user is provided with identical sequences of time codes.

12. The verification method of claim 10 wherein each authorized user is provided with a different sequence of time codes.

13. The verification method of claim 10 wherein said predetermined pattern for combining said address codes and said time codes is the same for all authorized users and remains constant over time.

14. The verification method of claim 10 wherein said predetermined pattern for combining said address codes and said time codes for each authorized user is selected from a predetermined set of patterns such that the same pattern is not used by all authorized users.

15. The verification method of claim 14 wherein for each authorized user said predetermined pattern for combining said address codes and said time codes remains constant over time.

16. The verification method of claim 14 wherein, for each authorized user, said predetermined pattern for combining said address code and said time codes changes over time in a predetermined manner.

17. The verification method of claim 10 further comprising the steps of:

measuring the length of time it takes to receive an incoming identification signal from the time of receipt of the first digit of said incoming signal to the time of receipt of the last digit of said incoming signal;

comparing said length of time to a predetermined maximum allowable value of such length of time; and

denying access to said secured system is said length of time exceeds said maximum allowable value.

18. The verification method of claim 10 further comprising the steps of:

maintaining a list of all address codes of all users who are at any period of time accessing said secured system;

comparing the address code of any incoming identification signal to said list of address codes; and

identifying any address code that is used simultaneously by two or more different users.