Methods and apparatus for restricting access of a user using a cellular telephone

• US 7,133,662 B2
• Filed: 05/24/2001
• Issued: 11/07/2006
• Est. Priority Date: 05/24/2001
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bravo, Jose F., Covalla, Thomas A.
• Primary Examiner(s): Tran, CongVan
• Application Number:
  US09/865,026
• Publication Number:
  US 20020177433A1
• Time in Patent Office: 1,993 Days
• Field of Search: 455411-4121, 455/412.2, 4554141-4143, 455/415, 455/418, 455/419, 455/420, 455424-425, 455/565, 455/554.1, 455/554.2, 455/556.1, 455/410, 455/435.1, 455/556.2, 455/557, 455/558, 455/422, 455/422.1, 379/183, 379/185, 379/189, 713/183, 713/184, 713/185, 713/190, 713/200, 713/201, 713/202
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04M 1/67 by electronic means
• CPC Class Codes: H04M 1/673 the user being required to key in a code
• CPC Class Codes: H04M 2207/18 wireless networks
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords

Abstract

A method and apparatus are disclosed for preventing unauthorized access to a restricted item using a cellular telephone that has been previously associated with a user, for example, during a registration process. The user is initially identified, for example, by entering a password, and a one-time pseudo-random token is provided to the user using a first communication channel. The user is requested to dial a telephone number associated with an access control service using a cellular telephone that has been previously associated with the user and enter the assigned token. The user obtains access to the restricted item if the assigned token is entered from a cellular telephone having a serial number that has been previously associated with the particular user.

Claims

1. A access control method for restricting access of a user to a restricted item, said method comprising the steps of:

providing a token to an access control administrator;

providing said token to said user using a first communication channel;

instructing said user to dial a telephone number associated with said access control administrator using a cellular telephone that has been previously associated with said user to enter said provided token;

providing access to said user if said entered token matches said provided token and is received via a wireless connection from a cellular telephone having a serial number previously associated with said user; and

receiving an indication from said access control administrator indicating that said entered token matches said provided token and was received from a cellular telephone having a serial number previously associated with said user.

2. The method of claim 1, wherein said access control administrator compares said entered token to said provided token.

3. The method of claim 1, further comprising the step of providing a cellular telephone number that has been previously associated with said user to said access control administrator and wherein said access control administrator determines a cellular telephone number associated with a serial number of a cellular telephone from which said token was received and compares said provided cellular telephone number with said determined cellular telephone number.

4. The method of claim 1, further comprising the step of receiving a password from said user before providing said token.

5. The method of claim 1, wherein said token is a pseudo-random number.

6. A access control system for restricting access of a user to a restricted item, comprising:

a memory that stores computer-readable code; and

a processor operatively coupled to said memory, said processor configured to implement said computer-readable code, said computer-readable code configured to;

provide a token to an access control administrator;

provide said token to said user using a first communication channel;

instruct said user to dial a telephone number associated with said access control administrator using a cellular telephone that has been previously associated with said user to enter said provided token; and

provide access to said user if said entered token matches said provided token and is received via a wireless connection from a cellular telephone having a serial number previously associated with said user.

7. An article of manufacture for implementing an access control method that restricts access of a user to a restricted item, comprising:

a computer readable medium having computer readable code means embodied thereon, said computer readable program code means comprising;

a step to provide a token to an access control administrator;

a step to provide said token to said user using a first communication channel;

a step to instruct said user to dial a telephone number associated with said access control administrator using a cellular telephone that has been previously associated with said user to enter said provided token; and

a step to provide access to said user if said entered token matches said provided token and is received via a wireless connection from a cellular telephone having a serial number previously associated with said user.