Method and apparatus for the secure identification of the owner of a portable device

• US 8,645,708 B2
• Filed: 11/30/2007
• Issued: 02/04/2014
• Est. Priority Date: 02/25/1999
• Status: Expired due to Fees

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Cidway Technologies, Ltd.
• Inventors: Labaton, Isaac J.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): KANAAN, SIMON P
• Application Number:
  US11/998,729
• Publication Number:
  US 20080077799A1
• Time in Patent Office: 2,258 Days
• Field of Search: 713/184
• US Class Current: 713/184
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

An authentication system is provided that includes a portable device and a decryption node. An individual uses the portable device, such as a portable device like a cell phone to compute a challenge and a response. The challenge and response is sent to a decryption node. In response, the decryption node computes a presumed response and compares the presumed response to the response of the portable device, in order to authenticate the individual associated with the portable device.

Claims

1. An authentication system for authenticating an individual comprising:

a portable device, wherein the portable device includes;

a first clock for generating a first time-dependent dynamic variable;

memory for storing a predetermined static variable; and

software for utilizing the first time-dependent dynamic variable and the predetermined static variable, wherein the software is configured to calculate a time-based challenge and a response in accordance with a first and second pre-determined algorithm, wherein the first pre-determined algorithm is used to compute the time-based challenge without utilizing a personal identification number (PIN) and the second pre-determined algorithm is used to compute the response; and

a decryption node, wherein the decryption node includes;

a second clock for generating a second time dependent dynamic variable;

wherein the decryption node is configured to perform the following steps;

receiving an identification of the portable device or an identification of an operator of the portable device;

receiving the challenge and the response displayed by the portable device during the selected time interval;

storing the predetermined static variable of the portable device;

retrieving the predetermined static variable using the received identification;

storing a last event first dynamic variable of the portable device;

retrieving the last event first dynamic variable corresponding to the portable device;

storing a last event receiver time of the portable device;

retrieving the last event receiver time corresponding to the portable device;

utilizing the second time dependent dynamic variable, the predetermined static variable, the last event first dynamic variable, the last event receiver time, and the challenge to calculate at the selected time interval an approximate value of the first time dependent dynamic variable and a presumed response in accordance with a third predetermined algorithm;

comparing the presumed response with the response;

storing the last event receiver time; and

storing the last event first dynamic variable.

2. The authentication system of claim 1, wherein the individual communicates the identification of the portable device, the challenge, and the response to the decryption node.

3. The authentication system of claim 1, wherein the authentication system is for authenticating a signor of a document, wherein the portable device is further configured to perform the step of adding, by the signor of the document, a time, a date and the challenge and the response to the document.

4. The authentication system of claim 3, wherein the decryption node is operated by an operator, wherein the operator receives the document.