System for authenticating access to online content referenced in hardcopy documents

• US 6,802,000 B1
• Filed: 10/28/1999
• Issued: 10/05/2004
• Est. Priority Date: 10/28/1999
• Status: Expired due to Fees

• Current Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Greene, Daniel H., Berson, Thomas A., Dean, R. Drews
• Primary Examiner(s): Morse, Gregory
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US09/429,539
• Time in Patent Office: 1,804 Days
• Field of Search: 380/44, 380/28, 380/286, 705/55, 705/57, 705/72, 705/18, 713/183, 713/184, 713/185, 713/168
• US Class Current: 713/168
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]

Abstract

A system for controlling access to online content referenced in a hardcopy document. A user requesting access to online content available on a server responds to an authentication challenge from the server using a password mechanism printed in the hardcopy document. The password mechanism allows the user to identify a password for responding to an authentication request by the server. After authenticating the user, the server initiates a state change to enable subsequent access to the online content by the user with a different password that is also identified with the password mechanism.

Claims

1. A method for providing secure access to online content referenced in a hardcopy document, comprising the steps of:

(a) receiving a first request for access to the online content referenced in the hardcopy document;

(b) issuing a challenge to the first request for online content;

(c) receiving a first password derived from a password generation mechanism in the hardcopy document in response to the challenge issued at step (b); and

(d) suggesting a state change to the password generation mechanism on the hardcopy document for identifying a second password to be used during a second request for access to the online content referenced in the hardcopy document.

2. The method according to claim 1, wherein said step (b) further comprises the step of issuing the challenge with a hint for identifying the first password from the password generation mechanism in the hardcopy document.

3. The method according to claim 1, wherein said step (d) further comprises the step of identifying a missing element in the second password.

4. The method according to claim 1, further comprising the steps of:

(e) receiving the second request for access to the online content referenced in the hardcopy document;

(f) issuing a challenge to the second request for the online content; and

(g) receiving the second password derived using the state change to the password generation mechanism in the hardcopy document suggested at said step (d).

5. The method according to claim 1, wherein said step (d) is performed after receiving the first password at said step (c).

6. The method according to claim 5, further comprising the steps of:

(e) receiving acknowledgment of the state change suggested at said step (d);

(f) enabling access to the online content using the second password upon receipt of the second request for online content; and

(g) providing access to the online content when the first password is valid.

7. The method according to claim 1, wherein said step (d) is performed simultaneously with said step (b).

8. The method according to claim 7, wherein said step (c) further comprises the step of receiving acknowledgment of the suggested state change at step (d).

9. The method according to claim 1, wherein said step (d) is performed when the first password is valid.

10. The method according to claim 1, wherein said step (b) is repeated when the first password is invalid.

11. The method according to claim 1, further comprising the step of printing the password generation mechanism on the hardcopy document.

12. The method according to claim 1, further comprising the steps of:

(e) receiving a request to register for access to online content; and

(f) suggesting an initial state for identifying the first password.

13. The method according to claim 1, wherein said step (d) further comprises the step of providing a character to complete the second password.

14. The method according to claim 1, wherein said step (d) further comprises tile step of identifying a locator character to scratch off of the password generation mechanism.

15. The method according to claim 1, wherein the state change to the password generation mechanism on the hardcopy document suggested at said step (d) is in a form that is humanly readable.

16. The method according to claim 1, wherein said step (c) further comprises the step of receiving a login identifier of the hardcopy document.

17. A server for providing secure access to online content referenced in a hardcopy document, comprising:

means for receiving a first request for access to the online content referenced in the hardcopy document;

means for issuing a challenge to the first request for online content;

means for receiving a first password derived from a password generation mechanism in the hardcopy document in response to the issued challenge; and

means for suggesting a state change to the password generation mechanism on the hardcopy document for identifying a second password to be used during a second request for access to the online content referenced in the hardcopy document.

18. A hardcopy document, comprising:

a reference for identifying online content on a network; and

a password generation mechanism for providing a first password to respond to a first challenge to a first request for the online content;

the password generation mechanism further comprising means for recording a state change;

the state change providing a second password to respond to a second challenge to a second request for the online content; and

wherein the first challenge and the second challenge include instructions for identifying the first password and the second password with the password generation mechanism.