Method of authenticating proper access to secured site and device for implementation thereof

• US 7,127,088 B1
• Filed: 07/19/1999
• Issued: 10/24/2006
• Est. Priority Date: 07/19/1999
• Status: Expired due to Fees

• Current Assignee: Mandylion Research Labs LLC
• Original Assignee: Mandylion Research Labs LLC
• Inventors: Grajewski, Joseph, Jaeger, Douglas
• Primary Examiner(s): WERNER, BRIAN P
• Application Number:
  US09/356,940
• Time in Patent Office: 2,654 Days
• Field of Search: 382115-127
• US Class Current: 382/124
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence

Abstract

Apparatus and method of verifying personal identity of an authorized user and providing information necessary to gain access to one or more secure sites in response to such verification. The apparatus is embodied in a hand-held device having an input pad for a biometric parameter such as a finger (thumb) print, an LCD and a small keypad. The device is initialized by placing the authorized user'"'"'s thumb on the input pad and pressing an enter key to store a template commensurate with the thumb print. Thereafter, the device may be activated only by a match of a print presented to the input pad with the previously stored template. By operation of scroll keys on the device keypad, the user enters names of secure sites to which access is desired. A unique password is generated by a random number generator and assigned to each secure site named. The password is stored both in the device and in the computer of the secure site. After activation of the device, previously stored site names and passwords may be recalled and displayed on the device by operation of the keypad. The password is then communicated to the secure site computer via a separate PC. Biometric data is not transmitted or stored in a data file, but exists only in encypted form in the device.

Claims

1. A method for creating, storing, and managing a password, comprising the steps of:

a. providing a device comprising a portable body member, a data storage source contained in said body member, user interface and communication componentry for permitting said individual to store in said data storage source a plurality of indicia each one of which is representative of a secured site, and password circuitry comprising a random number enerator for randomly generating a plurality of passwords, wherein each of said plurality of passwords is uniquely associated with a respective one of said plurality of indicia;

b. entering preselected indicia representative of a secured site into said device in response to a prompt generated by said device;

c. instructing said device to randomly generate a string of characters of predetermined length that is representative of a password in response to a prompt generated by said device, wherein said password is uniquely associated with said indicia entered in step b; and

d. repeating steps b and c in sequence for as many times as desired and permitted by said data storage source.

2. The method of claim 1, further comprising the step of instructing said device to generate a replacement password for said password created in step c in response to a prompt displayed on said portable body member after a predetermined period of time since said password was created in step c.