Use of a processor identification for authentication

• US 6,571,339 B1
• Filed: 12/30/1998
• Issued: 05/27/2003
• Est. Priority Date: 12/30/1998
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Danneels, Gunner D., Nee, Peter A., Kalbag, Sameer
• Primary Examiner(s): Wright, Norman M.
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US09/223,447
• Time in Patent Office: 1,609 Days
• Field of Search: 713/200, 713/201, 713/155, 713/161, 713/156, 713/185, 713/172, 713/154, 705/56, 705/57, 705/58, 705/65, 705/26
• US Class Current: 726/9
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A system comprises a first computer which has a unique processor identification. Additionally, a first application is operatively coupled to the first computer across a network. The first computer provides the unique processor identification to the first application with the first application identifying the first computer based on the unique processor identification.

Claims

1. A method to provide a benefit to a user system, comprising:

the user system transmits to a first remote application an unalterable processor identification associated with the user system;

the first remote application validates the processor identification for the user system, and transmits to the user system an unalterable digital membership card containing the processor identification, where the digital membership card further contains a membership number;

the user system transmits both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

the second application validates the matches the processor identification with the processor identification in the digital membership card, and provides the benefit directly to the user system in the event of a correct match.

2. The method of claim 1 where the processor identification is a unique identifier.

3. The method of claim 1 where the digital membership card is signed as genuine by the first application.

4. A method to provide a benefit to a user system, comprising:

the user system transmits to a first remote application an unalterable processor identification associated with the user system, where the first application is a first site in a network;

the first remote application validates the processor identification for the user system, and transmits to the user system an unalterable digital membership card containing the processor identification;

the user system transmits both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

the second application validates the matches the processor identification with the processor identification in the digital membership card, and provides the benefit directly to the user system in the event of a correct match.

5. The method of claim 4 where the second application is a second site in a network.

6. The method of claim 5 where the first and second sites reside in different domains of the network.

7. The method of claim 5 where the second site is affiliated with the first site to provide the benefit.

8. The method of claim 4 where the processor identification is a unique identifier.

9. A medium containing computer-readable instructions to carry out the method of providing a benefit to a user system, comprising:

the user system transmits to a first remote application an unalterable processor identification associated with the user system;

the first remote application validates the processor identification for the user system, and transmits to the user system an unalterable digital membership card containing the processor identification;

the user system transmits both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

the second application validates the matches the processor identification with the processor identification in the digital membership card, and provides the benefit directly to the user system in the event of a correct match.

10. A method to provide a benefit to a user system, comprising:

transmitting to a first remote application an unalterable processor identification;

receiving from the first application a digital membership card validating the user system'"'"'s right to receive the benefit, the card containing the processor identification in an unalterable form, where the digital membership card is signed by the first application;

transmitting both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

receiving the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.

11. The method of claim 10 where the digital membership card is signed with a public-key cryptography method.

12. The method of claim 10 where the processor identification is unique.

13. A method to provide a benefit to a user system, comprising:

transmitting to a first remote application an unalterable processor identification;

receiving from the first application a digital membership card validating the user system'"'"'s right to receive the benefit, the card containing the processor identification in an unalterable form;

transmitting both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

receiving the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card;

transmitting registration information to the first application.

14. The method of claim 13 further comprising receiving an agent from the first application to access the processor identification and transmit it to the first application.

15. The method of claim 13 where the processor identification is unique.

16. A medium containing computer-readable instructions to carry out the method of providing a benefit to a user system, comprising:

transmitting to a first remote application an unalterable processor identification;

receiving from the first application a digital membership card validating the user system'"'"'s right to receive the benefit, the card containing the processor identification in an unalterable form;

transmitting both the processor identification and the digital membership card directly to a second remote application separate from the first remote application, without contacting the first application;

receiving the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.

17. A system for receiving a benefit from a second application, comprising:

a processor containing an unalterable identification, where the processor identification is unique;

memory coupled to the processor to hold a digital membership card signed as genuine by a first application and containing an unalterable form of the processor identification;

an agent to transmit both the processor identification and the digital membership card directly to a second application, without contacting the first application, to receive the benefit from the second application.

18. A method to provide a benefit to a user system, comprising:

receiving, at a first application, registration information and an unalterable processor identification from the user system;

registering the user system as eligible to receive the benefit from the first application;

transmitting to the user system a digital membership card authorizing a second application, remote from the first application, to provide the benefit to the user system directly, without contacting the first application, the card containing the same processor identification in another unalterable form, and further includes a unique membership number identifying the user system.

19. A method to provide a benefit to a user system, comprising:

receiving, at a first application, registration information and an unalterable processor identification from the user system;

transmitting to the user system an agent to access the processor identification and transmit it to the first application;

registering the user system as eligible to receive the benefit from the first application;

transmitting to the user system a digital membership card authorizing a second application, remote from the first application, to provide the benefit to the user system directly, without contacting the first application, the card containing the same processor identification in another unalterable form.

20. A medium containing computer-readable instructions to carry out the method of of providing a benefit to a user system, comprising:

receiving, at a first application, registration information and an unalterable processor identification from the user system;

registering the user system as eligible to receive the benefit from the first application;

transmitting to the user system a digital membership card authorizing a second application, remote from the first application, to provide the benefit to the user system directly, without contacting the first application, the card containing the same processor identification in another unalterable form.

21. A system for receiving a benefit from a second application, comprising:

a processor containing an unalterable identification;

memory coupled to the processor to hold a digital membership card signed as genuine by a first application and containing an unalterable form of the processor identification;

an agent to transmit both the processor identification and the digital membership card directly to a second application, without contacting the first application, to receive the benefit from the second application;

another agent to access the processor identification and to transmit it to the first application.

22. The system of claim 21 further including registration pages for the user to complete and transmit to the first application.

23. A method to provide a benefit to a user system, comprising:

receiving, at a first application, registration information and an unalterable processor identification from the user system;

registering the user system as eligible to receive the benefit from the first application, comprising;

receiving registration information from the user system, and

signing the digital membership card as genuine before transmitting it to the user system;

transmitting to the user system a digital membership card authorizing a second application, remote from the first application, to provide the benefit to the user system directly, without contacting the first application, the card containing the same processor identification in another unalterable form.

24. The method of claim 23 further comprising entering the registration information into a registration database.

25. A system to provide a benefit to a user system, comprising:

an agent to retrieve an unalterable processor identification from the user system;

a database to hold registration information;

a first application to determine from the registration database that the user system is eligible to receive the benefit;

a session manager coupled to the first application to prepare a digital membership card including the same processor identification in another unalterable form and to transmit the card to the same user system.

26. The system of claim 25 further comprising registration pages containing registration information to be transmitted to the user system for return to the registration database.

27. The system of claim 25 where the system resides at a site on a network.

28. The system of claim 27 where the site is remote from the user system.

29. A method to provide a benefit to a user system, comprising:

receiving an unalterable processor identification and a digital membership card signed as genuine by a first application and containing the processor identification in an unalterable form, directly from the user system to a second application, without passing through the first application;

receiving a request directly from the user system for the benefit;

sending an agent directly from the second application to access the digital identification from within the user system and return it directly to the second application, without contacting the first application;

matching the processor identification with the same processor identification in the membership card;

providing the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.

30. The method of claim 29 where the processor identification is unique.

31. The method of claim 29 where the agent further accesses the digital membership card within the user system, returning it directly to the second application without contacting the first application.

32. A method to provide a benefit to a user system, comprising:

receiving an unalterable processor identification and a digital membership card signed as genuine by a first application and containing the processor identification in an unalterable form, directly from the user system to a second application, without passing through the first application, where the membership card is signed in a public-key cryptography method;

matching the processor identification with the same processor identification in the membership card;

providing the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.

33. The method of claim 32 where the processor identification is unique.

34. A method to provide a benefit to a user system, comprising:

receiving an unalterable processor identification and a digital membership card signed as genuine by a first application and containing the processor identification in an unalterable form, directly from the user system to a second application, without passing through the first application, where the second application is affiliated with the first application to provide the benefit;

matching the processor identification with the same processor identification in the membership card;

providing the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.

35. The method of claim 34 where the processor identification is unique.

36. A system to provide a benefit to a user system, comprising:

a session manager to receive a request for the benefit sent directly from the user system, without contacting a first application;

an agent to access directly from the user system both an unalterable processor identification and an unalterable digital membership card containing the same processor identification and signed as genuine by the first application;

a second application to match the processor identification with the processor identification in the digital membership card, and in response to provide the benefit to the user system without contacting the first application.

37. The system of claim 36 where the system resides at a site on a network.

38. The system of claim 37 where the site is remote from the user system.

39. The system of claim 37 where the second application resides at a second site on the network, the second site being remote from the first site.

40. The system of claim 39 where the first and second sites are located in different domains of the network.

41. A medium containing computer-readable instructions to carry out the method of providing a benefit to a user system, comprising:

receiving an unalterable processor identification and a digital membership card signed as genuine by a first application and containing the processor identification in an unalterable form, directly from the user system to a second application, without passing through the first application;

matching the processor identification with the same processor identification in the membership card;

providing the benefit directly from the second application if the processor identification matches the processor identification in the digital membership card.