Encoding data in a password

• US 7,650,509 B1
• Filed: 05/28/2004
• Issued: 01/19/2010
• Est. Priority Date: 01/28/2004
• Status: Active Grant

• Current Assignee: Gordon Howard Associates Incorporated
• Original Assignee: Gordon Howard Associates Incorporated
• Inventors: Dunning, Ted E.
• Primary Examiner(s): Moazzami; Nasser G
• Assistant Examiner(s): Louie; Oscar A
• Application Number:
  US10/856,968
• Time in Patent Office: 2,062 Days
• Field of Search: 713/184, 713/185, 713/160, 713/168, 713/170, 713/172, 713/182, 726 2- 5, 726/7, 726/9, 726/16, 726/17, 726 19- 21, 380/59
• US Class Current: 713/184
• CPC Class Codes: B60R 25/10 actuating a signalling device
• CPC Class Codes: B60R 25/2018 Central base unlocks or authorises unlocking
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A password authentication mechanism is capable of determining whether a password has expired without referring to a database or other information repository. Additional information can be encoded in the password without unduly lengthening the password, so that the additional information can be extracted from the password when the user provides the password for authentication purposes. Thus, the password serves as an information-carrying data item as well as acting as an authentication mechanism. Such a password can be used, for example, to provide time-limited access to a vehicle in response to receipt of timely payment, and to disable the vehicle if payment is not made.

Claims

1. A method of encoding a validity period in a vehicle access password for entry by a user, comprising:

forming a data packet comprising a representation of a validity period for the password, the validity period specifying a time period during which the password permits access to a vehicle;

combining the data packet with a key and a date stamp, to generate a string;

applying a hash function to the generated string, to generate a checksum;

combining the checksum with the data packet, to generate the password comprising an encoded representation of the validity period, the password not being identical to the data packet; and

transmitting the generated password to a user via an electronic communications medium.

2. The method of claim 1, wherein the representation of a validity period for a password comprises a password expiry date.

3. The method of claim 1, wherein the representation of a validity period for a password comprises a representation of an amount of time.

4. The method of claim 1, wherein the data packet comprises a representation of a warning time period.

5. The method of claim 1, wherein combining the data packet with a key and a date stamp comprises combining the data packet with a key, a date stamp, and a unit identifier.

6. The method of claim 1, wherein the password grants time-limited access to the vehicle.

7. The method of claim 1, wherein the key is dynamically generated.

8. The method of claim 1, wherein the date stamp comprises a time stamp.

9. The method of claim 1, wherein combining the checksum with the data packet comprises:

performing an addition operation on the checksum and the data packet to generate a value; and

appending the checksum to the generated value.

10. The method of claim 1, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

11. A method of authenticating a user-entered vehicle access password including an encoded validity period, comprising:

receiving the password for vehicle access, the password comprising an encoded representation of the validity period;

extracting a checksum and a data packet from the password, the password not being identical to the data packet;

parsing the data packet to obtain the representation of the validity period for the password;

combining the data packet with a key and a date stamp, to generate a string;

applying a hash function to the generated string, to generate a verification checksum;

comparing the verification checksum with the extracted checksum to determine whether the password is authentic;

responsive to the comparison indicating that the password is authentic, and responsive to the validity period indicating that the password is valid, configuring vehicle circuitry to enable use of the vehicle;

responsive to the comparison indicating that the password is not authentic, configuring vehicle circuitry to disable the vehicle; and

responsive to the validity period indicating that the password is not valid, configuring vehicle circuitry to disable the vehicle.

12. The method of claim 11, further comprising:

responsive to the comparison indicating that the password is not authentic;

repeating the combining, applying, and comparing steps for a plurality of date stamps falling within a tolerance range of the date stamp.

13. The method of claim 11, wherein the representation of a validity period for the password comprises an expiry date, the method further comprising:

determining whether the expiry date has passed.

14. The method of claim 13, further comprising:

responsive to the expiry date having passed, configuring vehicle circuitry to disable the vehicle.

15. The method of claim 11, wherein the representation of a validity period for the password comprises an amount of time, the method further comprising:

determining whether the amount of time has expired.

16. The method of claim 15, further comprising:

responsive to the amount of time having expired, configuring vehicle circuitry to disable the vehicle.

17. The method of claim 11, further comprising:

parsing the data packet to obtain a representation of a warning time period;

determining whether the warning time period is in effect; and

responsive to the warning time period being in effect, issuing a warning.

18. The method of claim 11, further comprising:

parsing the data packet to obtain a unit identifier; and

wherein combining the data packet with a key and a date stamp comprises combining the data packet with the key, the date stamp, and the unit identifier.

19. The method of claim 11, wherein the key is dynamically generated.

20. The method of claim 11, wherein the date stamp comprises a time stamp.

21. The method of claim 11, wherein extracting the checksum and the data packet from the password comprises:

splitting the password into a checksum and a second component; and

subtracting the checksum from the second component, to obtain the data packet.

22. The method of claim 11, further comprising, prior to extracting the checksum and the data packet:

receiving the password via an infrared transmission from a remote device.

23. The method of claim 11, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

24. A computer program product configured to encode a validity period in a vehicle access password for entry by a user, comprising:

a computer-readable medium; and

computer program code, encoded on the medium, programmatically configured to perform the steps of;

forming a data packet comprising a representation of a validity period for the password, the validity period specifying a time period during which the password permits access to a vehicle;

combining the data packet with a key and a date stamp, to generate a string;

applying a hash function to the generated string, to generate a checksum;

combining the checksum with the data packet, to generate the password comprising an encoded representation of the validity period, the password not being identical to the data packet; and

transmitting the generated password to a user via an electronic communications medium.

25. The computer program product of claim 24, wherein the representation of a validity period for a password comprises a password expiry date.

26. The computer program product of claim 24, wherein the representation of a validity period for a password comprises a representation of an amount of time.

27. The computer program product of claim 24, wherein the data packet comprises a representation of a warning time period.

28. The computer program product of claim 24, wherein the computer program code programmatically configured to perform the step of combining the data packet with a key and a date stamp comprises computer program code programmatically configured to perform the step of combining the data packet with a key, a date stamp, and a unit identifier.

29. The computer program product of claim 24, wherein the password grants time-limited access to the vehicle.

30. The computer program product of claim 24, wherein the key is dynamically generated.

31. The computer program product of claim 24, wherein the date stamp comprises a time stamp.

32. The computer program product of claim 24, wherein the computer program code programmatically configured to perform the step of combining the checksum with the data packet comprises computer program code programmatically configured to perform the steps of:

performing an addition operation on the checksum and the data packet to generate a value; and

appending the checksum to the generated value.

33. The computer program product of claim 24, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

34. A computer program product configured to authenticate a password including an encoded validity period, comprising:

a computer-readable medium; and

computer program code, encoded on the medium, programmatically configured to perform the steps of;

receiving the password for vehicle access, the password comprising an encoded representation of the validity period;

extracting a checksum and a data packet from the password, the password not being identical to the data packet;

parsing the data packet to obtain the representation of the validity period for the password;

comparing the verification checksum with the extracted checksum to determine whether the password is authentic;

responsive to the comparison indicating that the password is authentic, and responsive to the validity period indicating that the password is valid, configuring vehicle circuitry to enable use of the vehicle;

responsive to the comparison indicating that the password is not authentic, configuring vehicle circuitry to disable the vehicle; and

responsive to the validity period indicating that the password is not valid, configuring vehicle circuitry to disable the vehicle.

35. The computer program product of claim 34, further comprising computer program code programmatically configured to perform the step of:

responsive to the comparison indicating that the password is not authentic;

repeating the combining, applying, and comparing steps for a plurality of date stamps falling within a tolerance range of the date stamp.

36. The computer program product of claim 34, wherein the representation of a validity period for the password comprises an expiry date, the computer program product further comprising computer program code programmatically configured to perform the step of:

determining whether the expiry date has passed.

37. The computer program product of claim 36, further comprising computer program code programmatically configured to perform the step of:

responsive to the expiry date having passed, configuring vehicle circuitry to disable the vehicle.

38. The computer program product of claim 34, wherein the representation of a validity period for the password comprises an amount of time, the computer program product further comprising computer program code programmatically configured to perform the step of:

determining whether the amount of time has expired.

39. The computer program product of claim 38, further comprising computer program code programmatically configured to perform the step of:

responsive to the time period having expired, configuring vehicle circuitry to disable the vehicle.

40. The computer program product of claim 34, further comprising computer program code programmatically configured to perform the steps of:

parsing the data packet to obtain a representation of a warning time period;

determining whether the warning time period is in effect; and

responsive to the warning time period being in effect, issuing a warning.

41. The computer program product of claim 34, further comprising computer program code programmatically configured to perform the step of parsing the data packet to obtain a unit identifier,

and wherein the computer program code programmatically configured to perform the step of combining the data packet with a key and a date stamp comprises computer program code programmatically configured to perform the step of combining the data packet with the key, the date stamp, and the unit identifier.

42. The computer program product of claim 34, wherein the key is dynamically generated.

43. The computer program product of claim 34, wherein the date stamp comprises a time stamp.

44. The computer program product of claim 34, wherein the computer program code programmatically configured to perform the step of extracting the checksum and the data packet from the password comprises computer program code programmatically configured to perform the steps of:

splitting the password into a checksum and a second component; and

subtracting the checksum from the second component, to obtain the data packet.

45. The computer program product of claim 34, further comprising computer program code programmatically configured to perform the step of, prior to extracting the checksum and the data packet:

receiving the password via an infrared transmission from a remote device.

46. The computer program product of claim 34, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

47. A system of encoding a validity period in a vehicle access password for entry by a user, comprising:

a data packet formation module, configured to form a data packet comprising a representation of a validity period for the password, the validity period specifying a time period during which the password permits access to a vehicle;

a string generator, coupled to the data packet formation module, configured to combine the data packet with a key and a date stamp, to generate a string;

a hash function module, coupled to the string generator, configured to apply a hash function to the generated string, to generate a checksum;

a checksum application module, coupled to the hash function module, configured to combine the checksum with the data packet, to generate the password comprising an encoded representation of the validity period, the password not being identical to the data packet; and

a password transmission device, for transmitting the generated password to a user via an electronic communications medium.

48. The system of claim 47, wherein the representation of a validity period for a password comprises a password expiry date.

49. The system of claim 47, wherein the representation of a validity period for a password comprises a representation of an amount of time.

50. The system of claim 47, wherein the data packet comprises a representation of a warning time period.

51. The system of claim 47, wherein the string generator combines the data packet with a key, a date stamp, and a unit identifier.

52. The system of claim 47, wherein the password grants time-limited access to the vehicle.

53. The system of claim 47, wherein the key is dynamically generated.

54. The system of claim 47, wherein the date stamp comprises a time stamp.

55. The system of claim 47, wherein the checksum application module:

performs an addition operation on the checksum and the data packet to generate a value; and

appends the checksum to the generated value.

56. The system of claim 47, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

57. A system of authenticating a user-entered vehicle access password including an encoded validity period, comprising:

a password input device, configured to receive the password for vehicle access, the password comprising an encoded representation of the validity period;

an extraction module, coupled to the password input device, configured to extract a checksum and a data packet from the password, the password not being identical to the data packet;

a parser, coupled to the extraction module, configured to parse the data packet to obtain the representation of the validity period for the password;

a string generator, coupled to the extraction module, configured to combine the data packet with a key and a date stamp, to generate a string;

a hash function module, coupled to the string generator, configured to apply a hash function to the generated string, to generate a verification checksum;

a comparator, coupled to hash function module, configured to compare the verification checksum with the extracted checksum to determine whether the password is authentic;

a resource access controller, coupled to the comparator, configured to;

responsive to the validity period indicating that the password is valid, configure vehicle circuitry to enable use of the vehicle;

responsive to the comparison indicating that the password is not authentic, configure vehicle circuitry to disable the vehicle; and

responsive to the validity period indicating that the password is not valid, configure vehicle circuitry to disable the vehicle.

58. The system of claim 57, wherein the resource access controller is further configured to, responsive to the comparison indicating that the password is not authentic:

cause the string generator, hash function module, checksum application module, and comparator to repeat the combining, applying, and comparing steps for a plurality of date stamps falling within a tolerance range of the date stamp.

59. The system of claim 57, wherein the representation of a validity period for the password comprises an expiry date, the system further comprising:

an expiry date comparator, coupled to the comparator, configured to determine whether the expiry date has passed.

60. The system of claim 59, wherein the resource access controller is further configured to, responsive to the expiry date having passed, configure vehicle circuitry to disable the vehicle.

61. The system of claim 57, wherein the representation of a validity period for the password comprises an amount of time, the system further comprising:

an expiry comparator, coupled to the comparator, configured to determine whether the amount of time has expired.

62. The system of claim 61 wherein the resource access controller is further configured to, responsive to the time period having expired, configure vehicle circuitry to disable the vehicle.

63. The system of claim 57, wherein the parser parses the data packet to obtain a representation of a warning time period

and wherein the system further comprises:

a warning time period comparator, coupled to the comparator, configured to determine whether the warning time period is in effect; and

a warning signal device, coupled to the warning time period comparator, configured to, responsive to the warning time period being in effect, issue a warning.

64. The system of claim 57, wherein the parser parses the data packet to obtain a unit identifier, and wherein the string generator combines the data packet with the key, the date stamp, and the unit identifier.

65. The system of claim 57, wherein the key is dynamically generated.

66. The system of claim 57, wherein the date stamp comprises a time stamp.

67. The system of claim 57, wherein the extraction module:

splits the password into a checksum and a second component; and

subtracts the checksum from the second component, to obtain the data packet.

68. The system of claim 57, wherein the password input device comprises an infrared receiver, coupled to the extraction module, configured to, prior to extracting the checksum and the data packet:

receive the password via an infrared transmission from a remote device.

69. The system of claim 57, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.

70. A system of controlling access to a vehicle, comprising:

a password input device, configured to receive a password for vehicle access, the password comprising an encoded representation of a validity period;

a data extractor, configured to extract, from the received password, the representation of the validity period for the password;

a password authentication device, configured to authenticate the received password; and

a resource access controller, configured to;

responsive to the validity period indicating that the password is valid, configure vehicle circuitry to enable use of the vehicle;

responsive to the comparison indicating that the password is not authentic, configure vehicle circuitry to disable the vehicle; and

responsive to the validity period indicating that the password is not valid, configure vehicle circuitry to disable the vehicle.

71. The system of claim 70, further comprising:

a password generator, configured to generate a password including a representation of a validity period for the password; and

a password output device, configured to output the generated password.

72. The system of claim 71, wherein the password input device is located remotely with respect to the password output device.

73. The system of claim 71, wherein the password input device comprises an infrared receiver.

74. The system of claim 71, wherein the password input device comprises a keypad.

75. The system of claim 70, wherein the data extractor, the password authentication device, and the resource access controller are mounted on the vehicle.

76. The system of claim 70, wherein the representation of a validity period for the password comprises at least one selected from the group consisting of:

a date; and

a time.