Method and apparatus for providing physical security for a user account and providing access to the user's environment and preferences

• US 5,983,273 A
• Filed: 09/16/1997
• Issued: 11/09/1999
• Est. Priority Date: 09/16/1997
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: WebTV Networks Inc. (Microsoft Corporation)
• Inventors: Perlman, Stephen G., White, Christopher M., Matheny, John, Bonnaure, Patrick P.
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US08/931,816
• Time in Patent Office: 784 Days
• Field of Search: 395/200.33, 395/200.49, 395/200.58, 395/200.47, 395/200.59, 395/200.55, 395/200.57, 380/26, 380/49, 380/25, 380/4, 380/21, 380/23, 380/30, 709/200, 709/203, 709/217, 709/219, 709/220, 709/224, 709/225, 709/226, 709/227, 709/228, 709/229
• US Class Current: 709/229
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1075 PIN is checked remotely
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method and apparatus for providing physical security for a user account and supplying access to the environment and preferences associated with a particular user are provided. An internet terminal is coupled to a server system. The internet terminal detects the presence of a smart card. The smart card includes a memory such as a programmable ROM (PROM), any form of erasable PROM (EPROM) or Flash memory having stored therein identification information. The internet terminal reads the identification information from the smart card and transmits the identification information to a server. According to another aspect of the present invention an internet terminal can be configured by a server. The server receives identification information from an internet terminal. The identification information uniquely identifies a smart card. The server locates configuration information associated with a particular user of the server based upon the identification information. The configuration information may include customer preferences for customizing the operation of the internet terminal such as the type of on-screen keyboard presented by the internet terminal, the font used by the internet terminal for displaying text, background music options, and e-mail options. In any event, after locating the configuration information, the server downloads the configuration information to the internet terminal.

Claims

1. A method of initiating a user session with a server system from an internet terminal coupled to the server system, the method comprising the steps of:

an internet terminal determining whether or not a smart card is present;

if the smart card is present, then the internet terminal requesting initiation of a user session by reading identification information from a memory of the smart card, and transmitting the identification information to a server;

the server thereafter using the identification information to access a customer database maintained at the server in order to find a customer record which includes at least a smart card identifier, a customer identifier and a first password which matches a second password received from the client, thereby determining that the identification information read from the smart card is associated with an authorized user of the server;

if the smart card is not present, then the internet terminal requesting initiation of a user session by transmitting an identifier that identifies the internet terminal;

the server generating a ticket for use in accessing various services, the ticket including information from the customer record, which is then transmitted back to and stored by the internet terminal; and

the server then processing a service request from the internet terminal according to a user environment associated with the authorized user.

2. The method of claim 1, further including the steps of:

the internet terminal transmitting the ticket with a service request; and

the server processing the service request with reference to the information stored within the ticket.

3. The method of claim 2, wherein the service request is for a list of favorite web sites, wherein the information stored within the ticket includes a customer identifier, the step of processing the service request with reference to the information stored within the ticket further includes the step of retrieving the list of favorite web sites based upon the customer identifier.

4. The method of claim 2, wherein the service request is for a list of electronic mail, wherein the information stored within the ticket includes an electronic mail identifier, the step of processing the service request with reference to the information stored within the ticket further includes the step of electronic mail based upon the electronic mail identifier.

5. The method of claim 1, further including the steps of:

the server locating configuration information associated with the authorized user of the server based upon the identification information; and

the server downloading the configuration information to the internet terminal.

6. The method of claim 5, wherein the configuration information includes information identifying one or more background music preferences.

7. The method of claim 5, wherein the configuration information includes information identifying one or more font preferences.

8. The method of claim 5, wherein the configuration information includes information identifying one or more on-screen keyboard preferences.

9. The method of claim 5, wherein the configuration information includes information identifying one or more electronic mail preferences.

10. The method of claim 1, wherein the internet terminal has a current state, and the method further includes the step of the internet terminal performing input processing based upon the current state.

11. The method of claim 10, wherein the step of performing input processing based upon the current state further includes the step of the internet terminal opening a connection with the server if the current state of the internet terminal is disconnected.

12. The method of claim 10, wherein the step of performing input processing based upon the current state further includes the step of the internet terminal powering itself up if the current state of the internet terminal is powered down.

13. The method of claim 10, wherein the step of performing input processing based upon the current state further includes the step of the internet terminal waking up by suspending the screen-saver if the current state of the internet terminal is sleeping.

14. In a computer network system that includes a plurality of server computer systems logically connected in order to provide access to one or more internet sites, and a plurality of client systems that serve as internet terminals connectable to one or more of the server computer systems, and wherein at least some of the client systems are comprised of a conventional television set and a processor connected to the television set so that internet sites may be viewed using the television set as a computer display monitor in conjunction with the processor, a method of permitting a particular user to log onto the computer network from any of the internet terminals independent of any internet terminal'"'"'s unique id and independent of any unique user id and passwords associated with any terminal, the method comprising the steps of:

maintaining at one or more server computer systems unique id information for a plurality of the internet terminals, as well user id information for the users of each internet terminal, and any user passwords established for the users of each such internet terminal;

also maintaining at the one or more server computer systems unique id information for a plurality smart cards, each of which uniquely identifies a user of the computer network;

detecting at an internet terminal the presence of a smart card input to the internet terminal by a particular user, and thereafter transmitting to said one or more server computer systems the unique id information from the input smart card that identifies the particular user for that smart card in order to initiate a user session for the particular user; and

at the server computer system to which the unique id information from the input smart card was transmitted, thereafter bypassing normal log in procedure which requires using the unique id information of the internet terminal being used by the particular user, and any user id and user passwords otherwise required for log in at that internet terminal and establishing the user session independent of such otherwise normal log in procedure.

15. The method of claim 14 further comprising the steps of:

at the server computer system to which the unique id information from the input smart card was transmitted, using the unique id information from the input smart card to locate configuration information associated with the particular user of that smart card; and

downloading from the server computer system to the internet terminal at which the smart card was input the configuration information for the particular user of the input smart card.

16. The method of claim 15, wherein prior to the step of a server receiving identification information from an internet terminal the method further including the steps of:

the internet terminal reading identification information from a semiconductor memory of the smart card; and

the internet terminal transmitting the identification information to the server.

17. The method of claim 15, wherein the configuration information is for tailoring one or more operations of the internet terminal to the particular user.

18. The method of claim 15, wherein the configuration information includes information identifying one or more background music preferences.

19. The method of claim 15, wherein the configuration information includes information identifying one or more font preferences.

20. The method of claim 15, wherein the configuration information includes information identifying one or more on-screen keyboard preferences.

21. The method of claim 15, wherein the configuration information includes information identifying one or more electronic mail preferences.

22. In a computer network system that includes a plurality of server computer systems logically connected in order to provide access to one or more internet sites, and a plurality or client systems that serve as internet terminals connectable to one or more of the server computer systems, and wherein at least some of the client systems are comprised of a conventional television set and a processor connected to the television set so that internet sites may be viewed using the television set as a computer display monitor in conjunction with the processor, a method of permitting a particular user to log onto the computer network from any of the internet terminals independent of any internet terminal'"'"'s unique id and independent of any unique user id and passwords associated with any terminal, the method comprising the steps of:

maintaining at one or more server computer systems unique id information for a plurality of the internet terminals, as well user id information for the users of each internet terminal, and any user passwords established for the users of each such internet terminal;

also maintaining at the one or more server computer systems unique id information for a plurality smart cards, each of which uniquely identifies a user of the computer network and account information for the uniquely identified user;

detecting at an internet terminal the presence of a smart card input to the internet terminal by a particular user, and thereafter transmitting to said one or more server computer systems the unique id information from the input smart card that identifies the particular user for that smart card in order to initiate a user session for the particular user;

at the server computer system to which the unique id information from the input smart card was transmitted, thereafter bypassing normal log in procedure which requires using the unique id information of the internet terminal being used by the particular user, and any user id and user passwords otherwise required for log in at that internet terminal, and establishing the user session independent of such otherwise normal log in procedure; and

as part of the user session, locating at the server computer system to which the unique id information from the input smart card was transmitted, the account information for the uniquely identified user, and thereafter responding to subsequent service requests from that internet terminal in a manner determined by an environment associated with the user account.

23. The method of claim 22, wherein the environment associated with the user account includes a set of favorite web sites, and the step of responding to subsequent service requests from the internet terminal in a manner determined by an environment associated with the user account further includes the steps of:

the internet terminal making a request for favorite web sites; and

responsive to the request, the server transmitting a set of favorite web sites associated with the user account.

24. The method of claim 22, wherein the environment associated with the user account includes a set of electronic mail addresses.

25. The method of claim 24, the method further including the steps of:

the internet terminal making a request to compose an electronic mail message; and

responsive to the request, the server transmitting information including the set of electronic mail addresses.

26. The method of claim 22, wherein the predefined environment associated with the authorized user includes an electronic mail identifier by which electronic mail can be received from the Internet.

27. The method of claim 26, wherein the predefined environment associated with the authorized user includes a set of electronic mail messages addressed to the electronic mail identifier.