Method for securing communication by selecting an encoding process using a first computer based upon ability of a second computer and deleting the process thereafter

• US 6,446,210 B1
• Filed: 09/20/1999
• Issued: 09/03/2002
• Est. Priority Date: 12/04/1996
• Status: Expired due to Term

• Current Assignee: Activcard Ireland, Limited
• Original Assignee: Activcard Ireland, Limited
• Inventors: Borza, Stephen J.
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): DU, THUAN N
• Application Number:
  US09/399,175
• Time in Patent Office: 1,079 Days
• Field of Search: 713/201, 713/200, 713/150, 713/160, 713/182, 713/186, 380/277
• US Class Current: 726/4
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30

Abstract

A method of enhancing network security is provided for a communication session initiated between a first computer and a second other computer. From the first computer to the second computer in communications therewith a process for securing communications therebetween is transmitted. One such process is a biometric characterisation process for characterising fingerprints. The process is for execution on the second computer and is selected to be compatible therewith. Communications from the second computer to the first computer are secured using the transmitted process on the second computer and using, on the first computer, a compatible process to the transmitted process. The host computer can modify or replace the process or data particular to the process before each session, during a session, or at intervals.

Claims

1. A method of enhancing network security comprising the steps of:

(a) initiating a communication session between a first computer and a second other computer;

(a1) providing from the second computer to the first computer data indicative of processing ability of the second computer;

(a2) selecting the process based on the provided data

(b) transmitting from the first computer to the second other computer in communication therewith a process selected from a plurality of processes for securing communications therebetween;

(c) securing communications on the second other computer using said process;

(d) securing communications on the first computer using a process associated with the transmitted process; and

,

(e) erasing the process from the second other computer approximately when the communication session is ended.

2. A method of enhancing network security as defined in claim 1 wherein the provided data is indicative of an operating system of the second computer.

3. A method of enhancing network security comprising the steps of

(a) initiating a communication session between a first computer and a second other computer;

(b) transmitting from the first computer to the second other computer in communication therewith a process for characterising user authorisation information;

(c) characterising user authorisation information received at the second other computer to produce data using the process for characterising user authorisation information;

(d) transmitting the data to the first computer; and

(e) comparing the data received by the first computer to information on the first computer to determine a value indicative of a quality of user identification and when the quality is within predetermined limits for an acceptable quality, performing one of identifying a source of the authorisation information and authorising access from the second other computer to information secured by the first computer.

4. A method of improving network communication security for a system having a first computer in communications with a second other computer as defined in claim 3 comprising the step of replacing the security process at intervals.

5. A method of enhancing network security as defined in claim 3 wherein the process for characterising user authorisation information comprises a non reversible transformation of the information.

6. A method of enhancing network security as defined in claim 3 wherein the user authorisation information comprises a fingerprint.

7. A method of enhancing network security as defined in claim 3 comprising the step of

providing data indicative of a user identity to the second other computer; and,

transmitting the data indicative of a user identity to the first computer wherein the user authorisation information is biometric information, wherein the process is selected by the first computer in dependence upon data indicative of a user identity, and wherein the process for characterising user authorisation information transmitted t the t second other computer comprises the step of extracting features from the biometric information.

8. A method of enhancing network security as defined in claim 3 wherein the user authorisation information is biometric information comprising the steps of

providing a biometric information sample to a biometric input device in communication with the second other computer;

providing data indicative of a biometric information source of the biometric information sample;

providing data indicative of a user identity;

transmitting to the first computer the data indicative of a user identity and the biometric information source;

selecting a process from a plurality of processes associated with one of a plurality of templates associated with the identified biometric information source of the identified individual;

and wherein the step of (e) performing one of identifying a source of the biometric information and authorising access from the second other computer to information secured by the first computer comprises the step of determining within predetermined level of security whether the biometric information provided is from a same individual as that identified.

9. A method of enhancing network security as defined in claim 3 wherein the user authorisation information is biometric information comprising the steps of

providing data indicative of a user identity;

wherein the process comprises one of a plurality of processes associated with the data indicative of a user identity and wherein the process comprises the step of;

prompting the user to provide a biometric information sample from a

predetermined biometric information source to a biometric input device in communication with the second other computer;

and wherein the step of (e) performing one of identifying a source of the biometric information and authorising access from the second other computer to information secured by the first computer comprises the step of determining within predetermined level of security whether the biometric information provided is from a same individual as the user identity.

10. A method of enhancing network security as defined in claim 9 comprising the steps of:

when the determination is not with a predetermined level of security, repeating steps (b), (c), (d) and (e).