System and method for using internet based caller ID for controlling access to an object stored in a computer

• US 6,418,472 B1
• Filed: 01/19/1999
• Issued: 07/09/2002
• Est. Priority Date: 01/19/1999
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Teng, Albert, Parikh, Vishesh, Mi, James
• Primary Examiner(s): Coulter, Kenneth R.
• Application Number:
  US09/234,051
• Time in Patent Office: 1,267 Days
• Field of Search: 709/202, 709/229, 713/200, 713/201
• US Class Current: 709/229
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for controlling access to an object. The system stores an object and a processor identifier. The system includes a verification agent that can access information embedded in a processor and then calculate from that embedded information a value that may be compared with the stored processor identifier. A comparison agent is used to compare that value with the processor identifier to determine whether the processor corresponds to the processor identifier. If the value that the verification agent returns matches the processor identifier, then the computer grants the user access to the object.

Claims

1. A machine readable storage medium having stored therein programming instructions which, when executed by a central processing unit, permit access to information embedded in a processor and subsequently calculate from that embedded information a value that may be compared with a processor identifier stored in a server, wherein the programming instructions include instructions for:

selecting a verification agent from a plurality of verification agents; and

transmitting a selected verification agent from the server to a client computer.

2. The machine readable storage medium of claim 1 wherein each verification agent includes programming instructions for calculating a hash value.

3. The machine readable storage medium of claim 2 wherein the programming instructions further include instructions for comparing a hash value calculated from the combination of the embedded information, a server identifier, a secret key, and a session identifier, to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

4. The machine readable storage medium of claim 3 wherein the programming instructions further include instructions for disconnecting a server from a client computer when the verification agent does not return to the server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

5. A system for controlling access to an object comprising:

an accessible object;

a processor identifier associated with the object;

a verification agent for accessing information embedded in a processor and calculating from that embedded information a value that may be compared with the processor identifier; and

a comparison agent for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

6. The system of claim 5 further comprising a server that includes:

a session identifier generator for generating a session identifier;

a plurality of verification agents, each including a different secret key and a calculator for calculating a return value that is a function of the embedded information, the secret key and a session identifier;

a selection agent for selecting a verification agent; and

a transmitter for transmitting a selected verification agent from the server to a client computer that contains the processor.

7. The system of claim 6 wherein the server is a web server that stores the object in a web site, and the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.

8. The system of claim 7 wherein the calculator is a hash engine for calculating a return value comprising a hash value calculated from the combination of the embedded information, the server identifier, a secret key and a session identifier.

9. The system of claim 8 wherein the comparison agent compares the return value to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

10. The system of claim 9 wherein the web server further includes a timer for disconnecting the web server from a client computer when the verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.

11. The system of claim 6 wherein the server includes a processor number generator for generating a processor number from the return value, the secret key and the session identifier.

12. A system for controlling access to an object comprising:

means for storing the object;

means for storing a processor identifier;

means for accessing information embedded in a processor;

means for calculating from that embedded information a value that may be compared with the processor identifier; and

means for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

13. The system of claim 12 wherein:

the means for storing the object is a web server that stores the object on a web site; and

the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.

14. The system of claim 13 wherein the web server includes:

means for generating a session identifier;

a plurality of verification agents, each containing a different secret key and means for calculating a hash value from the combination of the embedded information, the server identifier, the secret key and a session identifier;

means for selecting a verification agent; and

means for transmitting a selected verification agent from the web server to a client computer.

15. The system of claim 14 wherein the web server further includes means for disconnecting the web server from the client computer when the selected verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, a secret key and a session identifier.

16. A method for controlling access to an object comprising the steps of:

storing the object in a computer;

storing a processor identifier in the computer;

accessing information embedded in a processor;

calculating from that embedded information a value that may be compared with the processor identifier; and

comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.

17. The method of claim 16 wherein:

the computer is a web server that stores the object on a web site; and

the processor identifier is stored in the web server and comprises a hash value calculated from the combination of a processor number and a server identifier.

18. The method of claim 17 further including the steps of:

generating a session identifier; and

calculating a hash value from the combination of the embedded information, the server identifier, a secret key and a session identifier.