Personal access management system

• US 5,604,800 A
• Filed: 02/13/1995
• Issued: 02/18/1997
• Est. Priority Date: 02/13/1995
• Status: Expired due to Term

• Current Assignee: Quantum Digital Solutions Incorporated
• Original Assignee: ETA Technologies Corp.
• Inventors: Johnson, William C., McMullen, Charles C.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/388,268
• Time in Patent Office: 736 Days
• Field of Search: 380/3, 380/4, 380/23, 380/24, 380/25, 380/49, 380/21
• US Class Current: 713/189
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A multi-component system for linking a user to a product or service provider includes a user processing device, a storage device, and a provider device. The storage device stores provider-specific application software, user-specific data, and a file management program. The storage device and the processing device are coupled to each other to form a user device which communicates with the provider device. Under direction of the file management program, the processing device carries out a recognition methodology which determines whether the processing device and the storage device are authorized to operate with each other. This aspect of the system makes it possible to render the storage device operable only with a specific user processing device, referred to as the principal processing device. This, in turn, reduces the possibility of fraud since the storage device cannot be used without the principal processing device. Once it is determined that the processing and storage devices are authorized to interact with each other, the processing device executes the provider-specific application software to exchange information with the provider device. Together, the user and provider devices implement unique recognition and comprehension methodologies to ensure that the parties are authorized to communicate with each other and to ensure that the information exchanged cannot be understood by third parties. Overall, the system provides a highly secure mechanism for transferring information from one party to another.

Claims

1. In a system comprising a processing device having a memory, and a storage device coupled to the processing device, a method for establishing recognition parameters within the processing device, comprising the steps of:

accessing by the processing device a set of instructions stored on the storage device; and

executing by the processing device said set of instructions to carry out the steps of;

deriving a key code;

generating an operational key file name to associate with said key code;

creating a file within the memory of the processing device;

assigning said operational key file name to said file; and

storing said key code into the memory in said file, thereby establishing said operational key file name and said key code as recognition parameters within the processing device.

2. A method for establishing a unique relationship between a processing device and a storage device, comprising the steps of:

deriving a set of parameters;

generating a master key code;

processing said parameters using said master key code to derive a first set of processed parameters;

storing said first set of processed parameters into the storage device;

generating a processing device key code;

processing said parameters using said processing device key code to derive a second set of processed parameters; and

storing said second set of processed parameters into the processing device.

3. The method of claim 2, wherein the step of deriving said set of parameters comprises the steps of:

receiving an operational key code from a user;

generating an operational key file name; and

associating said operational key file name with said operational key code.

4. The method of claim 2, wherein the step of deriving said set of parameters comprises the steps of:

generating an operational key code;

generating an operational key file name; and

associating said operational key file name with said operational key code.

5. The method of claim 2, wherein the step of processing said parameters using said master key code comprises the step of:

encrypting said parameters using said master key code as an encryption key.

6. The method of claim 2, wherein the step of processing said parameters using said processing device key code comprises the step of:

encrypting said parameters using said processing device key code as an encryption key.

7. The method of claim 2, further comprising the step of:

storing said master key code into the processing device.

8. The method of claim 2, wherein the processing device has an identification code stored therein, and wherein said method further comprises the steps of:

processing said identification code using said master key code to derive a processed identification code; and

storing said processed identification code into the storage device.

9. The method of claim 8, wherein the step of processing said identification code comprises the step of:

encrypting said identification code using said master key code as an encryption key.

10. A method for establishing a unique relationship between a processing device and a storage device, comprising the steps of:

receiving a dynamic personal identification number (DPIN) from a user;

generating a master key code using said DPIN;

generating a processing device key code, different from said master key code, using said DPIN;

deriving a set of parameters;

processing said parameters using said master key code to derive a first set of processed parameters;

storing said first set of processed parameters into the storage device;

processing said parameters using said processing device key code to derive a second set of processed parameters; and

storing said second set of processed parameters into the processing device.

11. The method of claim 10, wherein the step of deriving said set of parameters comprises the steps of:

receiving an operational key code from a user;

generating an operational key file name; and

associating said operational key file name with said operational key code.

12. The method of claim 10, wherein the step of deriving said set of parameters comprises the steps of:

generating an operational key code;

generating an operational key file name; and

associating said operational key file name with said operational key code.

13. The method of claim 10, wherein the step of processing said parameters using said master key code comprises the step of:

encrypting said parameters using said master key code as an encryption key.

14. The method of claim 10, wherein the step of processing said parameters using said processing device key code comprises the step of:

encrypting said parameters using said processing device key code as an encryption key.

15. The method of claim 10, further comprising the step of:

storing said master key code into the processing device.

16. The method of claim 10, wherein the processing device has an identification code stored therein, and wherein said method further comprises the steps of:

processing said identification code using said master key code to derive a processed identification code; and

storing said processed identification code into the storage device.

17. The method of claim 10, wherein the step of generating said master key code comprises the steps of:

generating a master hash code using said DPIN; and

generating said master key code using said master hash code.

18. The method of claim 17, further comprising the step of:

storing said master hash code into the processing device.

19. The method of claim 17, wherein said master hash code is generated using a hashing algorithm known as the Secure Hash Algorithm (SHA).

20. The method of claim 10, wherein the step of generating said processing device key code comprises the steps of:

modifying said DPIN to derive a modified DPIN;

generating a processing device hash code using said modified DPIN; and

generating said processing device key code using said processing device hash code.

21. The method of claim 20, wherein the processing device has an identification code stored therein, and wherein the step of modifying said DPIN comprises the step of:

combining said DPIN with said identification code to derive said modified DPIN.

22. The method of claim 20, wherein said processing device hash code is generated using a hashing algorithm known as the Secure Hash Algorithm (SHA).

23. The method of claim 20, further comprising the step of:

storing said processing device hash code into the storage device.

24. A storage device for interacting with a processing device having a memory to establish recognition parameters within the processing device, said storage device comprising:

means for causing the processing device to derive a key code;

means for causing the processing device to generate an operational key file name to associate with said key code;

means for causing the processing device to create a file within the memory of the processing device;

means for causing the processing device to assign said operational key file name to said file; and

means for causing the processing device to store said key code into the memory in said file, thereby establishing said operational key file name and said key code as recognition parameters within the processing device.

25. A storage device for interacting with a processing device having a memory to establish a unique relationship between the processing device and said storage device, said storage device comprising:

a first storage unit;

means for causing the processing device to derive a set of parameters;

means for causing the processing device to generate a master key code;

means for causing the processing device to process said parameters using said master key code to derive a first set of processed parameters;

means for causing the processing device to store said first set of processed parameters into said first storage unit;

means for causing the processing device to generate a processing device key code;

means for causing the processing device to process said parameters using said processing device key code to derive a second set of processed parameters; and

means for causing the processing device to store said second set of processed parameters into the memory of the processing device.

26. The storage device of claim 25, further comprising:

means for causing the processing device to store said master key code into the processing device.

27. The storage device of claim 25, wherein the processing device has an identification code stored in the memory, and wherein said storage device further comprises:

a second storage unit;

means for causing the processing device to process said identification code using said master key code to derive a processed identification code; and

means for causing the processing device to store said processed identification code into said second storage unit.

28. A storage device for interacting with a processing device having a user interface and a memory to establish a unique relationship between the processing device and said storage device, said storage device comprising:

a first storage unit;

means for causing the processing device to receive a dynamic personal identification number (DPIN) from a user via the user interface;

means for causing the processing device to generate a master key code using said DPIN;

means for causing the processing device to generate a processing device key code, different from said master key code, using said DPIN;

means for causing the processing device to derive a set of parameters;

means for causing the processing device to process said parameters using said master key code to derive a first set of processed parameters;

means for causing the processing device to store said first set of processed parameters into said first storage unit;

means for causing the processing device to process said parameters using said processing device key code to derive a second set of processed parameters; and

means for causing the processing device to store said second set of processed parameters into the memory of the processing device.

29. The storage device of claim 28, further comprising:

means for causing the processing device to store said master key code into the memory of the processing device.

30. The storage device of claim 28, wherein the processing device has an identification code stored in the memory, and wherein said storage device further comprises:

a second storage unit;

means for causing the processing device to process said identification code using said master key code to derive a processed identification code; and

means for causing the processing device to store said processed identification code into said second storage unit.

31. The storage device of claim 28, wherein said means for causing the processing device to generate said processing device key code comprises:

means for causing the processing device to modify said DPIN to derive a modified DPIN;

means for causing the processing device to generate a processing device hash code using said modified DPIN; and

means for causing the processing device to generate said processing device key code using said processing device hash code.

32. The storage device of claim 31, wherein the processing device has an identification code stored in the memory, and wherein said means for causing the processing device to modify said DPIN comprises:

means for causing the processing device to combine said DPIN with said identification code to derive said modified DPIN.

33. The storage device of claim 31, further comprising:

a second storage unit;

means for causing the processing device to store said processing device hash code into said second storage unit.

34. The storage device of claim 28, wherein said means for causing the processing device to generate said master key code comprises:

means for causing the processing device to generate a master hash code using said DPIN; and

means for causing the processing device to generate said master key code using said master hash code.

35. The storage device of claim 34, further comprising:

means for causing the processing device to store said master hash code into the memory of the processing device.

36. A processing assembly, comprising:

a processing device comprising a processor, a memory coupled to said processor, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device interacting with said processing device to establish recognition parameters within said processing device, said storage device comprising;

means for causing said processor to derive a key code;

means for causing said processor to generate an operational key file name to associate with said key code;

means for causing said processor to create a file within said memory;

means for causing said processor to assign said operational key file name to said file; and

means for causing said processor to store said key code into said memory in said file, thereby establishing said operational key file name and said key code as recognition parameters within said processing device.

37. A processing assembly, comprising:

a first storage unit;

a processing device comprising a processor, a memory coupled to said processor, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device interacting with said processing device to establish a unique relationship between said processing device and said storage device, said storage device comprising;

means for causing said processor to derive a set of parameters;

means for causing said processor to generate a master key code;

means for causing said processor to process said parameters using said master key code to derive a first set of processed parameters;

means for causing said processor to store said first set of processed parameters into said first storage unit;

means for causing said processor to generate a processing device key code;

means for causing said processor to process said parameters using said processing device key code to derive a second set of processed parameters; and

means for causing said processor to store said second set of processed parameters into said memory.

38. The processing assembly of claim 37, wherein said storage device further comprises:

means for causing said processor to store said master key code into said memory.

39. The processing assembly of claim 37, wherein said memory has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing said processor to process said identification code using said master key code to derive a processed identification code; and

means for causing said processor to store said processed identification code into said second storage unit.

40. A processing assembly, comprising:

a processing device comprising a processor, a memory coupled to said processor, a user interface coupled to said processor, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device interacting with said processing device to establish a unique relationship between said processing device and said storage device, said storage device comprising;

a first storage unit;

means for causing said processor to receive a dynamic personal identification number (DPIN) from a user via said user interface;

means for causing said processor to generate a master key code using said DPIN;

means for causing said processor to generate a processing device key code, different from said master key code, using said DPIN;

means for causing said processor to derive a set of parameters;

means for causing said processor to process said parameters using said master key code to derive a first set of processed parameters;

means for causing said processor to store said first set of processed parameters into said first storage unit;

means for causing said processor to process said parameters using said processing device key code to derive a second set of processed parameters; and

means for causing said processor to store said second set of processed parameters into said memory.

41. The processing assembly of claim 40, wherein said storage device further comprises:

means for causing said processor to store said master key code into said memory.

42. The processing assembly of claim 40, wherein said memory has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing said processor to process said identification code using said master key code to derive a processed identification code; and

means for causing said processor to store said processed identification code into said second storage unit.

43. The processing assembly of claim 40, wherein said means for causing said processor to generate said processing device key code comprises:

means for causing said processor to modify said DPIN to derive a modified DPIN;

means for causing said processor to generate a processing device hash code using said modified DPIN; and

means for causing said processor to generate said processing device key code using said processing device hash code.

44. The processing assembly of claim 43, wherein said memory has an identification code stored therein, and wherein said means for causing said processor to modify said DPIN comprises:

means for causing said processor to combine said DPIN with said identification code to derive said modified DPIN.

45. The processing assembly of claim 43, wherein said storage device further comprises:

a second storage unit;

means for causing said processor to store said processing device hash code into said second storage unit.

46. The processing assembly of claim 40, wherein said means for causing the processing device to generate said master key code comprises:

means for causing the processing device to generate a master hash code using said DPIN; and

means for causing the processing device to generate said master key code using said master hash code.

47. The processing assembly of claim 46, wherein said storage device further comprises:

means for causing the processing device to store said master hash code into said memory.