Universal authentication device for use over telephone lines

• US 5,406,619 A
• Filed: 03/31/1994
• Issued: 04/11/1995
• Est. Priority Date: 04/06/1992
• Status: Expired due to Term

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Hazra, Amitava, Akhteruzzaman
• Primary Examiner(s): Kuntz, Curtis
• Assistant Examiner(s): Woo, Stella L.
• Application Number:
  US08/221,273
• Time in Patent Office: 376 Days
• Field of Search: 340/825.34, 340/825.31, 340/825.32, 340/825.33, 379/355, 379/356, 379/357, 379/91, 379/90, 379/95, 379/96, 379/144, 235/379, 235/380, 235/382, 380/23, 380/25, 380/28
• US Class Current: 379/93.02
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention relates to a universal authenticator for use with an ordinary telephone station over an ordinary telephone line. The authenticator, which is the size and shape of a credit card, receives a query number by being held against the receiver of the telephone station and receiving audio signals in a receiver. Using its own key, it transforms the received query number into an individualized response number which it transmits via its speaker when the authenticator is held against the microphone of the telephone station.

Claims

1. Authentication means comprising:

means for automatically transmitting audio signals over a voice telephone line, said line connected via a telephone network to an authentication system, said means for transmitting arranged for transmitting by having a user of said authentication means hold said means for transmitting against a microphone of a telephone station while leaving a speaker of said telephone station available for said user of said authentication means to listen;

means for generating a number, independent of any keyed personal identification number, coupled to said means for transmitting, wherein said number is derived from a time-varying quantity and a key unique for said authentication means, and said quantity globally and independently maintained internally in said authentication means and in said authentication system;

said number for transmission by said means for transmitting to said authentication system for authenticating an identity of said user of said authentication means; and

said number comprising data for identifying said authentication means and comprising no data based on any keyed personal identification data;

means for storing a personal identification number;

a keypad for entry of a personal identification number; and

means for enabling said authentication means in response to a match of the stored and entered personal identification numbers.

3. The authentication means of claims 1 or 2 further comprising a control key, for operation by said user in response to prompting signals received on said speaker of said telephone station, for changing a state of said authentication means.

4. The authentication means of claim 3 wherein said control key is used for initiating transmission of said number.

5. The authentication means of claims 1 or 2 further comprising a key for disabling said authentication means.

6. The authentication means of claims 1 or 2 further comprising timing means for disabling said authentication device after a lapse of a predetermined interval following enablement or use of said authentication means.

7. The authentication means of claim 1 or 2 further comprising clock means for maintaining date and time;

wherein said independently maintained quantity is date and time.

8. The authentication means of claims 1 or 2 wherein said authentication means is essentially the size of a credit card and is without appendages.

9. The authentication means of claims 1 or 2 further comprising:

means for displaying said number;

wherein, in noisy surroundings, said user is enabled to key said number into said telephone station, using a keypad of said station.

10. The authentication means of claims 1 or 2 further comprising:

means for storing additional personal identification numbers; and

means for storing additional data corresponding to said additional personal identification numbers;

wherein said means for enabling is also responsive to a match of one of said additional personal identification numbers for enabling said authentication means; and

wherein said means for generating is further responsive to said additional data if said user keys one of said additional personal identification numbers.

2. Authentication means comprising:

means for automatically transmitting audio signals over a voice telephone line, said line connected via a telephone network to an authentication system, said means for transmitting arranged for transmitting by having a user of said authentication means hold said means for transmitting against a microphone of a telephone station while leaving a speaker of said telephone station available for said user of said authentication means to listen;

means for generating a number, independent of any keyed personal identification number, coupled to said means for transmitting, wherein said number is derived from a time-varying quantity and a key unique for said authentication means, and said quantity independently maintained internally in said authentication means and in said authentication system;

said number for transmission by said means for transmitting to said authentication system for authenticating an identity of said user of said authentication means; and

said number comprising data for identifying said authentication means and comprising no data based on any keyed personal identification data;

means for storing a personal identification number;

a keypad for entry of a personal identification number; and

means for enabling said authentication means in response to a match of the stored and entered personal identification numbers.