Intelligent remote device

• US 8,200,195 B2
• Filed: 01/28/2011
• Issued: 06/12/2012
• Est. Priority Date: 12/22/2003
• Status: Expired due to Term

• Current Assignee: Assa Abloy AB
• Original Assignee: Activcard Ireland, Limited (Assa Abloy AB)
• Inventors: Le Saint, Eric F., Fedronic, Dominique Louis Joseph
• Primary Examiner(s): Nguyen, Tu X
• Application Number:
  US12/931,351
• Publication Number:
  US 20110252466A1
• Time in Patent Office: 501 Days
• Field of Search: 455/410, 455/411, 713/155, 713/156, 713/185, 713/150, 713/172
• US Class Current: 455/411
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

An intelligent remote device equipped with a security token operatively coupled thereto is processing communications with a security token enabled computer system over a wireless private network. The intelligent remote device is adapted to emulate a local security device peripheral connected to the computer system. Multiple computer systems may be authenticated to using the intelligent remote device. Additionally, various secure communications connections mechanisms are described which are intended to augment existing security protocols available using wireless network equipment. Authentication of a user supplied critical security parameter is performed by the security token. The critical security parameter may be provided locally via the intelligent remote device or received from the wireless network and routed to the security token. Aural, visual or vibratory feedback may be provided to the user to signal a successful authentication transaction.

Claims

1. A method for accessing a security token enabled computer system, comprising:

establishing communications connection between an intelligent remote device and the security computer system;

executing a remote authentication application installed in the intelligent remote device to emulate a local security device peripheral connected to the security token enabled computer system;

prompting a user to provide a critical security parameter;

sending the critical security parameter from the intelligent remote device to a security token operatively coupled to the intelligent remote device;

authenticating the critical security parameter using the security token to authenticate the user to the security token;

allowing the user access to at least one secure resource associated with the security token enabled computer system; and

providing aural or visual feedback to the user following successful authenticating to the security token enabled computer system, wherein the critical security parameter is provided from an other computer system and sent to the security token over another communication connection established between the intelligent remote device and the other computer system.

2. The method according to claim 1, further comprising:

sending an access request message from the intelligent remote device to said security token enabled computer system to initiate establishment of the communications connection.

3. The method according to claim 2, wherein the access request message includes at least one of:

a first identifier associated with the intelligent remote device, a second identifier associated with the security token, and a wireless network address associated with the intelligent remote device.

4. The method according to claim 1, wherein establishing the communications connection includes authenticating the security token to the security token enabled computer system.

5. The method according to claim 1, wherein the communications connection includes at least one secure communications protocol having at least one of:

a secure socket layer, a transport layer security, private communications technology, internet protocol security, and a secure messaging session.

6. The method according to claim 5, wherein the communications connection further includes an APDU communications pipe.

7. The method according to claim 1, wherein the intelligent remote device is one of:

a personal data assistant, a cellular telephone, a network appliance and a personal security device.

8. The method according to claim 1, wherein the communications connection is at least one of:

an optical wireless connection, a radio frequency wireless connection, and an electrical connection.

9. A system for accessing a security token enabled computer system, comprising:

an intelligent remote device that communicates with the security token enabled computer system using a communications connection, operatively couples a security token to the intelligent remote device, receives a critical security parameter provided by a user, and sends the critical security parameter to a security token, wherein the intelligent remote device triggers an access request to the security token enabled computer system to emulate a security token peripheral device locally connected to the security token enabled computers s m

a security token that receives the critical security parameter associated with the user from the intelligent remote device and authenticates said critical security parameter and

a security token enabled computer that uses the intelligent remote device as the security token peripheral device and allows the user access to at least one secure resource following successful authentication of the critical security parameter, wherein at least one of the intelligent remote device and the security token enabled computer system provides aural or visual feedback to the user upon successful completion of the authentication transaction, wherein the security token enabled computer system provides the critical security parameter to the security token over the communications connection.

10. The system according to claim 9, wherein the intelligent remote device is one of:

a personal data assistant, a cellular telephone, a network appliance and a personal security device.

11. The system according to claim 9, wherein the computer system sends an access request message to the security token enabled computer system.

12. The system according to claim 11, wherein the access request message includes at least one of:

a first identifier associated with the intelligent remote device, a second identifier associated with the security token and a wireless network address associated with the intelligent remote device.

13. The system according to claim 9, wherein the communications connection includes at least one secure communications protocol having at least one of:

a secure socket layer, a transport layer security, private communications technology, internet protocol security, and a secure messaging session.

14. A system for accessing a security token enabled computer system, comprising:

an intelligent remote device that communicates with the security token enabled computer system using a communications connection, operatively couples a security token to the intelligent remote device receives a critical security parameter provided by a user and sends the critical security parameter to a security token, wherein the intelligent remote device triggers an access request to the security token enabled computer system to emulate a security token peripheral device locally connected to the security token enabled computer system,

a security token that receives the critical security parameter associated with the user from the intelligent remote device and authenticates said critical security parameter; and

a security token enabled computer that uses the intelligent remote device as the security token peripheral device and allows the user access to at least one secure resource following successful authentication of the critical security parameter, wherein at least one of the intelligent remote device and the security token enabled computer system provides aural or visual feedback to the user upon successful completion of the authentication transaction, wherein the critical security parameter is provided from another computer system and sent to the security token over another wireless connection established between the intelligent remote device and another computer system.

15. The system according to claim 14, wherein the intelligent remote device is one of:

a personal data assistant, a cellular telephone, a network appliance and a personal security device.

16. The system according to claim 14, wherein the computer system sends an access request message to the security token enabled computer system.

17. The system according to claim 16, wherein the access request message includes at least one of:

a first identifier associated with the intelligent remote device, a second identifier associated with the security token and a wireless network address associated with the intelligent remote device.

18. The system according to claim 14, wherein the communications connection includes at least one secure communications protocol having at least one of:

a secure socket layer, a transport layer security, private communications technology, internet protocol security, and a secure messaging session.