IC card and authentication method for information processing apparatus

• US 5,857,024 A
• Filed: 10/02/1996
• Issued: 01/05/1999
• Est. Priority Date: 10/02/1995
• Status: Expired due to Fees

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: International Business Machines Corporation
• Inventors: Nishino, Kiyoshi, Oshiyama, Takashi
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/726,304
• Time in Patent Office: 825 Days
• Field of Search: 380/4, 380/9, 380/23, 380/24, 380/25, 380/49, 380/50, 380/59, 235/379, 235/380
• US Class Current: 713/172
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An IC card 30, which is employed to permit the exchange of secret information while ensuring that security is maintained, includes: a ROM 38 in which an ID is held; a clock 42; a RAM 40 in which a password is stored; a RAM 36 in which a ciphering program is stored; and a CPU 34 that executes a process. The ciphering program is loaded, the stored ID, password and the time t measured by the clock 42 are read and encoded in accordance with the ciphering program, and the results are outputted to a computer system 10. The computer system 10 decodes the output from the IC card 30 and extracts a password, and compares the decoded password with a registered password. When the passwords match, access is enabled; but when they do not match, access is disabled.

Claims

1. An IC card for connection to an information processing apparatus, comprising:

a clock for counting time;

ID storage means for storing a permanent ID;

information storage means for storing a changeable password to identify said IC card when said IC card is connected to said information processing apparatus;

procedure storage means for storing a changeable ciphering program for encrypting said password; and

control means for encrypting said password in accordance with said ciphering program stored in said procedure storage means and outputting the encrypted password to a connected information processing apparatus in response to a request for such encrypted password from the connected information processing apparatus.

2. An authentication method, for an information processing apparatus, which employs the IC card defined in claim 1 to authenticate a mutual connection between said IC card and said information processing apparatus, in which said password is registered in advance, comprising the steps of:

transmitting the password and the ciphering program from said information processing apparatus to said IC card;

storing the password and the ciphering program by said IC card;

reading a time count of said clock;

encrypting the time count, the password, and the ID in accordance with the stored ciphering program to produce encrypted information;

transmitting the encrypted information to said information processing apparatus; and

deciphering the received encrypted information in accordance with a deciphering program that corresponds to the ciphering program to produce a deciphered password, and authenticating the connection between said IC card and said information processing apparatus only when the deciphered password matches the password registered in advance.

3. The authentication method for an information processing apparatus according to claim 2, wherein the password and the ciphering program are altered in accordance with instructions from said IC card issued at periodic intervals that are based on the time count performed by said clock.

4. The IC card according to claim 1, further comprising a keyboard on the IC card for updating the password.

5. The IC card as in claim 4, further comprising a display mounted on the IC card.

6. The IC card as in claim 1, further comprising a display mounted on the IC card.