System and method for authentication

• US 7,434,251 B2
• Filed: 10/04/2002
• Issued: 10/07/2008
• Est. Priority Date: 07/31/2002
• Status: Expired due to Term

• Current Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Original Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Inventors: Tan, Henry, Poo, Teng Pin, Lim, Lay Chuan, Ooi, Chin Shyan
• Primary Examiner(s): LAFORGIA, CHRISTIAN A
• Application Number:
  US10/502,005
• Publication Number:
  US 20050081064A1
• Time in Patent Office: 2,195 Days
• Field of Search: 726/9
• US Class Current: 726/9
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An authentication system (10) to verify a password is provided. The authentication system includes a first storage unit (16) to store an authentication sequence (24) and a read-only memory unit (18) on which an authentication algorithm (26) is programmed. A microcontroller (20) is coupled to the first storage unit, the read-only memory unit and a web server. The microcontroller receives the password and executes the authentication algorithm to verify the password with the authentication sequence. A second storage unit (22) is coupled to the microcontroller to store data from the web server. Access to a second storage unit is permitted by the microcontroller only if the password has been verified.

Claims

1. An authentication system to verify a password, the system being arranged for coupling to a host for communication therewith, and comprising:

a first storage unit to store an authentication sequence;

a read-only memory unit to store an authentication algorithm;

a microcontroller coupled to said first storage unit and said read-only memory unit, wherein the microcontroller is configured to be coupled to and uncoupled from a host and to receive the password from the host and execute the authentication algorithm and wherein the authentication algorithm is configured to verify the password with the authentication sequence;

a second storage unit coupled to the microcontroller and configured to store data received from a web server via the host and the microcontroller and wherein access by the host to data stored in the second storage unit is permitted by the microcontroller only if the password has been verified; and

an encoder coupled to the microcontroller and the second storage unit, wherein the encoder is configured to receive encrypted data from the web server, via the host and the microcontroller and to decrypt that data before use thereof in the host if the password has been verified.

2. The authentication system as recited in claim 1, wherein the password is received by the microcontroller from the host.

3. The authentication system as recited in claim 2, wherein the read-only memory unit is further configured to store a shutdown algorithm configured to shut down the host and the authentication system after a number of incorrect passwords is received by the microcontroller.

4. The authentication system as recited in claim 2, wherein the password is received by the host from the web server.

5. The authentication system as recited in claim 1, wherein the authentication algorithm is hard coded on one of a group consisting of a firmware and a hardware in the microcontroller.

6. The authentication system as recited in claim 1, wherein the second storage unit is a removable storage device.

7. The authentication system as recited in claim 6, wherein the second storage unit uses flash memory.

8. The authentication system as recited in claim 1, wherein the microcontroller and the read-only memory unit are implemented on a single semiconductor chip.

9. The authentication system as recited in claim 8, wherein the first storage unit and the read-only memory unit are incorporated into the microcontroller.

10. The authentication system as recited in claim 1, wherein the authentication sequence is encrypted.

11. The authentication system as recited in claim 1, wherein the authentication sequence is hash-coded.

12. The authentication system as recited in claim 1, wherein the first storage unit is located within the read-only memory unit and wherein the authentication sequence is hard coded into the first storage unit.

13. The authentication system as recited in claim 1, wherein the second storage unit further comprises a public storage area and a private storage area.

14. The authentication system as recited in claim 13, wherein the first storage unit is located within the private storage area.

15. A method for authenticating a password, comprising:

an authentication system receiving the password from a host coupled to the authentication system, wherein the authentication system is configured to be coupled to and uncoupled from the host;

the authentication system receiving encrypted data from a web server via the host and storing the encrypted data in a storage unit of the authentication system;

the authentication system providing an authentication sequence;

the authentication system executing an authentication algorithm to verify the password with the authentication sequence, wherein the authentication algorithm is stored on a read-only memory unit of the authentication system;

the authentication system permitting access to the encrypted data on said storage unit only if the password is verified;

the authentication system decrypting said encrypted data using an encoder coupled to the storage unit; and

the authentication system providing the decrypted data to the host if the password has been verified.

16. The method for authenticating a password as recited in claim 15, wherein the password is received by the host from the web server.

17. The method for authenticating a password as recited in claim 15, wherein the password is entered into the host by a user.