Method and apparatus for forming unique user identification data at remote terminal for secure transmission of data from host terminal

• US 5,261,070 A
• Filed: 09/20/1990
• Issued: 11/09/1993
• Est. Priority Date: 07/24/1986
• Status: Expired due to Fees

• Current Assignee: Meiji Milk Product Company Limited
• Original Assignee: Meiji Milk Product Company Limited
• Inventors: Ohta, Junichi
• Primary Examiner(s): Anderson, Lawrence E.
• Assistant Examiner(s): Coleman, Eric
• Application Number:
  US07/587,615
• Time in Patent Office: 1,146 Days
• Field of Search: 340/825.3, 340/825.31, 340/825.34, 380/3, 380/4, 380/23, 380/24, 380/25, 380/26, 380/42, 380/43, 380/44, 395/425, 395/200, 395/400, 364/200 MS File, 364/900 MS File
• US Class Current: 726/3
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention relates to a method and apparatus to determine whether a user is authorized to utilize a data communication network, and more particularly a terminal machine in the network. Data having a predetermined number of bits are read out from a relatively large random number memory, containing previously stored data, by using key data to address said bits at the terminal machine. The addressed data are used as new key data and data each having a predetermined number of bits are repeatedly read from the data in the random number memory to form identification data on the basis of the old and new key data in each cycle. In such manner, there are formed identification data unequivocally determined in accordance with the key data and having high security or confidentiality.

Claims

1. A method for forming identification data for use in a computer system including a host machine and a user terminal machine, comprising the steps of:

transmitting to the user terminal machine from the host machine a number L representing a length of the identification data and key data in response to a user entering a password in the user terminal machine;

reading out random number data having a prescribed number of bits equal to a number of bits of said key data from a random number memory in the user terminal machine by addressing said random number memory using said key data, said random number memory having previously stored therein a relatively large number of bits compared to said prescribed number, said large number being within a range to permit use as random number data, and said random number data being read out from said random number memory forming a portion equal to 1/L of the identification data;

generating new key data at the user terminal machine, at least a part of said new key data being formed by said portion of identification data having said prescribed number of bits read out from said random number memory;

reading out, from said random number memory, new identification data having said prescribed number of bits from said random number data containing a relatively large number of bits by addressing said random number memory using said new key data; and

repeatedly performing a number of times equal to said number L the operation of reading out the new data from said random number memory by addressing said random number with successive new key data and forming identification data having a length given by said number L times said prescribed number of bits; and

transmitting said identification data having a length given by said number L times said prescribed number of bits for storage in said host machine to subsequently identify said user terminal machine.

2. A method according to claim 1 further comprising the step of subjecting said key data and each new key data to an irreversible function processing to form address data for addressing said random number memory.

3. A method according to claim 1 including the further step of incorporating said identification data with said new key data in the host machine for subsequent transmission to the user terminal machine.