Interfacing with a system that includes a passcode authenticator

• US 7,702,911 B2
• Filed: 04/13/2005
• Issued: 04/20/2010
• Est. Priority Date: 11/18/2004
• Status: Active Grant

• Current Assignee: Biogy, Inc.
• Original Assignee: Biogy, Inc.
• Inventors: Fiske, Michael S.
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US11/106,183
• Publication Number:
  US 20100011222A1
• Time in Patent Office: 1,833 Days
• Field of Search: 726 2- 4, 380/44, 713182-186, 382115-118, 382/124
• US Class Current: 713/182
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords

Abstract

Protecting the security of an entity by using passcodes is disclosed. A passcode device generates a passcode. In an embodiment, the passcode is generated in response to receipt of user information. The passcode is received by another system, which authenticates the passcode by at least generating a passcode from a passcode generator, and comparing the generated passcode with the received passcode. The passcode is temporary. At a later use a different passcode is generated from a different passcode generator.

Claims

1. A method comprising:

receiving at least a registration code at an Application Program Interface (API) associated with an administrator system having a processor system having one or more processors;

the processor system transmitting the registration code to a process of an administrator implemented by the administrator system;

in response,

if the registration code is determined to be invalid, receiving at the API a message from the administrator system an indication that the registration code is invalid,

if the registration code is determined to be valid,

receiving at the API a message from the administrator system an indication that the registration code is valid,

receiving at the API a passcode generator from the administrator system, wherein the passcode generator is based on user information, and

storing the passcode generator in a database residing in a memory system associated with the administrator system;

wherein

the registration code is a value derived from the user information, and

the registration code is a value from which deriving the user information is expected to be intractable; and

wherein

the passcode generator is a value derived from the user information, and

the passcode generator is a value from which deriving the user information is expected to be intractable.

2. The method of claim 1, wherein the user information is biometric.

3. The method of claim 1, wherein finding the user information by trial and error is unlikely.

4. The method of claim 1, wherein the user information is derived from fingerprints.

5. The method of claim 1, wherein the passcode generator is derived from the user information by at least

deriving the registration code from the user information, and

deriving the passcode generator from the registration code.

6. The method of claim 5, wherein the passcode generator is a value from which deriving the registration code is expected to be intractable.

7. A computer readable medium storing one or more machine instructions, which when invoked causes the method of claim 6 to be implemented.

8. A computer readable medium storing one or more machine instructions, which when invoked causes the method of claim 5 to be implemented.

9. A computer readable medium storing one or more machine instructions, which when invoked causes the method of claim 1 to be implemented.

13. A system comprising:

the administrator system of claim 1;

the memory system having the database; and

a readable medium storing the API and one or more machine instructions, which when invoked causes the method to be implemented.

14. A system comprising:

the administrator system of claim 5;

the memory system having the database; and

a readable medium storing the API and one or more machine instructions, which when invoked causes the method to be implemented.

15. A system comprising:

the administrator system of claim 6;

the memory system having the database; and

a readable medium storing the API and one or more machine instructions, which when invoked causes the method to be implemented.

10. A method comprising:

receiving at an Application Program Interface (API) of a host system a passcode from a device associated with a user, the host system having a processor system having one or more processors;

receiving at the API a user identifier from the device, the identifier being associated with the passcode;

sending, by the processor system, from the API the user identifier to a database of a memory system associated with the host system;

receiving at the API a passcode generator corresponding to the user identifier from the database;

sending, by the processor system, the passcode generator and the passcode to a process of the administrator;

if the passcode and the passcode generator do not match,

sending, by the processor system, a message indicating that the passcode is invalid and denying access to a secure entity; and

if the passcode and the passcode generator match,

sending, by the processor system, a message indicating that the passcode is valid and granting access to a secure entity.

11. A method comprising:

receiving at an Application Program Interface (API) of a host system a passcode from a device associated with a user, the host system having a processor system having one or more processors;

receiving at the API a user identifier from the device, the identifier being associated with the passcode;

sending, by the processor system, from the API the user identifier to a database of a memory system associated with the host system;

receiving at the API a passcode generator corresponding to the user identifier from the database;

sending, by the processor system, the passcode generator and the passcode to a process of the administrator;

if the passcode and the passcode generator do not match,

sending, by the processor system, a message indicating that the passcode is invalid and denying access to a secure entity; and

if the passcode and the passcode generator match, granting access to a secure entity.

12. A computer readable medium storing one or more machine instructions, which when invoked causes the method of claim 11 to be implemented.

16. A system comprising:

the host system of claim 11;

the memory system having the database; and

a readable medium storing the API and one or more machine instructions, which when invoked causes the method to be implemented.