Process for the dissimulaton of a secret code in a data authentication device

• US 5,894,519 A
• Filed: 04/09/1997
• Issued: 04/13/1999
• Est. Priority Date: 04/09/1996
• Status: Expired due to Term

• Current Assignee: Hanger Solutions, LLC (IP Investments Group LLC)
• Original Assignee: Orange S.A.
• Inventors: Clemot, Olivier, Arditti, David, Campana, Mireille
• Primary Examiner(s): HAYES, GAIL O
• Application Number:
  US08/838,646
• Time in Patent Office: 734 Days
• Field of Search: 380/4, 380/23, 380/24, 380/25, 380/28, 380/49
• US Class Current: 713/183
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A process for the dissimulation of concealment of a secret code in a data authentication device by encrypting the secret code by an encrypting function for forming an image of the secret code and storing the secret code image in the authentication device. Beforehand, an encrypting function is chosen such that with each stored secret code image corresponds a plurality of antecedent codes all differing from the secret code, but which, once encrypted by the encrypting function have an image identical to that of the secret code. The secret code of a user has an authentication device in which is stored the secret code image.

Claims

1. Process for the dissimulation of a secret code in a data authentication device (10) consisting of encrypting the secret code (s) by an encrypting function (g) for forming a secret code image (s) and storing said secret code image in the authentication device, characterized in that it consists of, beforehand, choosing an encrypting function (g) which is such that, with each stored secret code image corresponds a plurality of antecedent codes (s1, . . . , sn) all differing from the secret code, but which, once encrypted by the encrypting function (g) have an image (s) identical to that of the secret code.

2. Process for the dissimulation of a secret code according to claim 1, characterized in that with the secret code having n characters (c1, . . . , cn), the encrypting function (g) consists of associating with said n characters (c1, . . . , cn) a secret code image of k characters with k<

n.

3. Process for the dissimulation of a secret code according to claim 2, characterized in that the number k of characters of the secret code image is n/2.

4. Process for the verification of the secret code of a user wishing to access a central system from a terminal, characterized in that, said user (12) being provided with an authentication device (10) in which is stored the image (s) of the secret code by the encrypting function (g), according to any one of the claims 1 to 3, it comprises a stage (e3) of locally checking the secret code entered by the user and encrypted by the encrypting function, by comparison with the image of the secret code stored in the authentication device and then, if this is verified, an authentication stage (e5) by the central system (16).