Allowing an electronic device accessing a service to be authenticated

• US 7,322,043 B2
• Filed: 06/20/2002
• Issued: 01/22/2008
• Est. Priority Date: 06/20/2002
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Letsinger, Reed
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Shiferaw; Eleni A
• Application Number:
  US10/175,619
• Publication Number:
  US 20030236991A1
• Time in Patent Office: 2,042 Days
• Field of Search: 726/9, 726/20, 726/17, 726/18, 726/19
• US Class Current: 726/19
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A method for allowing an electronic device accessing a service to be authenticated. A communications device is loaded with a first identifier. To gain access to the service, the communications device transmits the first identifier to an authentication device which contains a second identifier. In response to receiving the first identifier from the communications device, the authentication device provides the communications device with the second identifier. The communications device forwards the second identifier to the service to authenticate the user in order to gain access to that service.

Claims

1. A method for allowing an electronic device accessing a service to be authenticated, comprising:

loading a communications device with a first identifier from an authorization device, wherein the authorization device was previously loaded with the first identifier and wherein the communications device is the electronic device;

the communication device requesting said service using a second identifier, wherein the second identifier is a user identifier;

transmitting the first identifier from the communications device to the authentication device;

receiving the second identifier at the communications device from the authentication device in response to the authentication device authenticating the first identifier;

transmitting the second identifier to the service to gain access to the service; and

placing said authentication device in physical contact with said communications device to load said first identifier into said communications device.

2. The method of claim 1 further comprising:

accessing said service only so long as said communications device remains within range of said authentication device.

3. The method of claim 2, wherein said range corresponds to an area which is within immediate control of a user of said communications device.

4. The method of claim 1, wherein only one first identifier can be stored at a time within said communications device.

5. The method of claim 1 further comprising:

initiating a timer when said communications device is moved beyond said range of said authentication device;

erasing said first identifier from said communications device when said timer expires.

6. The method of claim 1, wherein said communications device comprises a mobile device.

7. The method of claim 1, wherein said communications device comprises a fixed device which is shared by a plurality of users.

8. An apparatus for accessing a remote service, comprising:

a first interface for accepting a first identifier sent by an authentication device over a first channel, wherein said authentication device was loaded with said first identifier prior to said first interface accepting said first identifier;

a memory coupled to said first interface which stores said first identifier;

a second interface coupled to said memory, wherein said second interface transmits said first identifier to said authentication device over a second channel and said second interface also receiving a second identifier from said authenticator in response to transmission of said first identifier;

a third interface coupled to said second interface which forwards said second identifier to a network, wherein said transmission of said second interface is used to gain access to said remote service, wherein the service requested the second identifier from the apparatus and wherein the second identifier is a user identifier;

a controller coupled to said third interface, wherein said controller determines when data is to be sent over said network, what data is to be sent over said network, and when data sent over said network needs user authentication; and

an authenticator coupled to said controller, wherein said authenticator transfers said first identifier from said first interface to said memory when said apparatus is placed within close enough proximity to said authenticating device to activate said first channel.

9. The apparatus of claim 8, wherein in response to a request from said service, said authenticator reads said first identifier from said memory and sends said first identifier to said first interface.

10. The apparatus of claim 8, wherein said third interface continues to forward said second identifier to said network only so long as said second channel remains active.

11. The apparatus of claim 8 further comprising a timer which causes said first identifier to be deleted from said memory after a pre-determined amount of time has elapsed from when said communications device is moved beyond a range of said second channel.

12. A method for providing authentication information used to authenticate electronic transmissions, comprising:

storing a first identifier and a second identifier in memory associated with an authentication device;

transmitting said first identifier from said authentication device to a communications device over a first channel when said first channel is activated;

receiving at said authentication device said first identifier transmitted by said communications device;

comparing said first identifier transmitted by said communications device to said first identifier stored in said memory;

transmitting said second identifier from said authentication device to said communications device only if said first identifier transmitted by said communications device matches said first identifier stored in said memory, wherein said second identifier is a user identifier and transmitted to said communications device over a second channel; and

placing said authentication device in physical contact with said communications device to load said first identifier into said communications device.

13. The method of claim 12 further comprising embedding said authentication device which performs said storing, transmitting, receiving, and comparing in a personal item of an owner of said communications device.

14. An authentication device which provides a first unique identifier and a second unique identifier used to authenticate electronic transmissions for accessing a remote service, comprising:

a memory which stores said first unique identifier and said second unique identifier;

a first interface coupled to said memory, wherein said first interface transmits said first unique identifier to a communications device over a first channel when said authentication device and said communications device is within range of said first channel;

a second interface coupled to said memory, wherein said second interface receives said first unique identifier from said communications device;

a controller coupled to said second interface, wherein said controller determines whether said first unique identifier from said communications device matches said first unique identifier stored in said memory and said controller provides said second unique identifier for transmission by said second interface only if said first unique identifier from said communications device matches said first unique identifier stored in said memory, wherein said second unique identifier is a user identifier;

transmitting said second unique identifier to said remote server to gain access to a service; and

wherein said first interface requires physical contact with said communications device to be within range of said first channel.

15. The authentication device of claim 14, wherein a maximum range of said first channel is approximately two inches.

16. The authentication device of claim 14, wherein a maximum range of said second channel is approximately one meter.

17. The authentication device of claim 14 further comprising means for attaching said authentication device to a personal item belonging to a user of said communications device.

18. The authentication device of claim 14, wherein said authentication device is designed to be embedded in a person.