User identification and authentication system using ultra long identification keys and ultra large databases of identification keys for secure remote terminal access to a host computer

• US 5,771,291 A
• Filed: 12/11/1995
• Issued: 06/23/1998
• Est. Priority Date: 12/11/1995
• Status: Expired due to Fees

• Current Assignee: MDM Group
• Original Assignee: Farrell Newton, Gareth Williams
• Inventors: Williams, Gareth, Newton, Farrell
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/570,318
• Time in Patent Office: 925 Days
• Field of Search: 380/25, 395/188.01, 364/286.5
• US Class Current: 713/185
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

A method of providing user identification and authentication using ultra long identification key codes and/or ultra large databases of identification key codes in a manner providing secure access to a remote computer terminal to a database or server transaction program stored on a host computer.

Claims

1. A method of providing user identification and authentication using ultra long identification key codes and/or ultra large databases of identification key codes in a manner providing secure access from a remote computer terminal to a database or server transaction program stored on a host computer, comprising the steps of:

(a) utilizing key generation algorithms to generate individual, class specific, or both user key codes which may optionally contain individual encryption keys;

(b) creating a database or otherwise updating an existing database comprising a compilation of each of the access key codes which have been generated for predetermined authorized users of the server transaction program;

(c) recording, on separate individual portable storage media directly compatible with and readily insertable and removable from said remote computer terminal, each of said individualized and class specified user access key codes along with the optional individual encryption keys;

(d) loading or providing the server serving as the host computer with a complete registry or compilation of each individualized and class specified access key code and any optional individual encryption keys which have been generated by the key generation algorithms;

(e) providing each authorized user with said portable storage medium containing the authorized user'"'"'s individual or class specified access key code;

(f) providing the server with computer programming including steps for comparing individual and class specified access key codes transmitted over telephone networks or communication networks from a user'"'"'s remote computer terminal against the stored compilation of authorized access key codes and permitting correct matches to have access to said server transaction program while denying access to unauthorized access key codes;

(g) providing users'"'"' remote computer terminals with programming to permit connection to said server through a communication network or telephone network and to transmit individual and class specific access key codes through said remote computer terminal utilizing readers for the portable storage medium to said server for the purposes of gaining access to said server transaction database; and

(h) conducting a communications session between the user'"'"'s remote computer terminal and said server transaction program through said telephone or communication network.

3. A method of providing user identification and authentication as described in claim 1, further comprising:

(a) an algorithm which generates one time pads;

(b) said one time pads are stored on a CD-ROM which is said portable storage medium and said pads are loaded or provided to the server; and

(c) the one time pads are used to encrypt the user access key codes by the remote computer terminal access program before being transmitted to the host computer.

4. The method of claim 3, further including the step of:

(a) providing additional programming on said CD-ROM.

2. A user identification authentication system using ultra long identification keys and/or ultra large databases of identification keys for secure remote computer terminal access to a host computer comprising:

(a) a host computer having a compiled database of pre-authorized user access key codes of ultra long length;

(b) a series of individual portable storage media directly compatible with and readily insertable and removable from said remote computer terminal, each containing a unique or class unique access key code distributed among authorized users of a server transaction program;

(c) a server with programming to compare received access key codes with stored authorized access key codes and to deny access to the server transaction program to any user transmitting an unauthorized key code but to permit access to any user transmitting an authorized access key code;

(d) each of said access key codes being ultra long and comprising at least 25 characters or 25 bytes.