System and method for using internet based caller ID for controlling access to an object stored in a computer

• US 6,523,067 B2
• Filed: 04/12/2002
• Issued: 02/18/2003
• Est. Priority Date: 01/19/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Teng, Albert, Parikh, Vishesh, Mi, James
• Primary Examiner(s): Coulter, Kenneth R.
• Application Number:
  US10/121,174
• Publication Number:
  US 20020116616A1
• Time in Patent Office: 312 Days
• Field of Search: 713/200, 713/201, 713/168, 713/170, 709/229
• US Class Current: 709/229
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for controlling access to an object. The system stores an object and a processor identifier. The system includes a verification agent that can access information embedded in a processor and then calculate from that embedded information a value that may be compared with the stored processor identifier. A comparison agent is used to compare that value with the processor identifier to determine whether the processor corresponds to the processor identifier. If the value that the verification agent returns matches the processor identifier, then the computer grants the user access to the object.

Claims

1. A method for permitting access to a server through a virtual private network, comprising:

receiving a request to access the server from a remote user having a certificate for verifying the users identity and public key, and using a platform having a hardware based platform identifier,

decrypting the certificate using a certificate authority'"'"'s public key;

checking the platform identifier, and

allowing the user to access the server, wherein the platform identifier is a

hash of a value comprising a processor number.

2. A method for enabling a platform to access via the Internet an object stored on a web server comprising:

storing a platform identifier on the web server;

receiving a request from a platform for access to the object;

initiating a dynamic call-back process for dynamically accessing a hardware based platform identifier associated with the platform;

comparing the platform identifier associated with the platform to the platform identifier stored on the web server; and

granting access to the object if the platform identifier associated with the platform matches the platform identifier stored on the web server.