Creating and using a specific user unique id for security login authentication

• US 8,954,729 B2
• Filed: 03/07/2013
• Issued: 02/10/2015
• Est. Priority Date: 09/07/2006
• Status: Expired due to Fees

• Current Assignee: Cw International, LLC
• Original Assignee: Cw International, LLC
• Inventors: Terry, Robert F.
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): Salehi, Helai
• Application Number:
  US13/789,248
• Publication Number:
  US 20140173273A1
• Time in Patent Office: 705 Days
• US Class Current: 713/155
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

A method of monitoring all network login activity, which includes a real-time analysis of intercepting all network login activity, analyzing network login activity, authenticating network login activity and closing (i.e., terminating) those network login connections that are not authenticated to proceed and access the network.

Claims

1. A method of providing a secure network user login procedure for a network, the method comprising:

retrieving configuration data on at least one hard drive in a computer connected to the network, including a serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a single, long character string of all of the media access code strings;

creating an unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string of the at least one serial number to the single, long character string of all of the media access code strings to create the unique ID for the computer;

encrypting the unique ID; and

storing the encrypted unique ID in a data file on the computer.

2. The method of claim 1 wherein the retrieving configuration data on at least one hard drive in a computer connected to the network, including the serial number for the at least one hard drive, and retrieving the media access codes occurs immediately after the computer is powered-on.

3. The method of claim 1 wherein the encrypting the unique ID comprises:

initiating an operating system crypto application programming interface to encrypt the unique ID.

4. The method of claim 1 further comprising:

retrieving and decrypting the unique ID and storing it in the memory of the computer;

retrieving configuration data on at least one hard drive in the computer, including the serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a new single, long character string of all of the media access code strings;

creating a new unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string for the serial number for the at least one hard drive to the new single, long character string of all of the media access code strings to create the new unique ID for the computer;

comparing the new unique ID to the unique ID and, if the new unique ID matches the unique ID, then grant access to the network, otherwise, terminate the login attempt and report an invalid login attempt.

5. The method of claim 3 wherein the unique ID is encrypted using a data encryption standard algorithm or an advanced encryption standard algorithm.

6. The method of claim 4 wherein the report invalid login attempt comprises:

reporting the invalid login attempt to the network;

recording the IP address of the invalid login attempt; and

sending an alert signal to a network administrator that the invalid login attempt occurred.

7. A non-transitory machine-readable medium having stored thereon a plurality of executable instructions for performing a method of providing a secure network user login procedure for a network, the method comprising:

retrieving configuration data on at least one hard drive in a computer connected to the network, including a serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a single, long character string of all of the media access code strings;

creating an unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string of the at least one serial number to the single, long character string of all of the media access code strings to create the unique ID for the computer;

encrypting the unique ID; and

storing the encrypted unique ID in a data file on the computer.

8. The machine-readable medium of claim 7 wherein the retrieving configuration data on at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive, and retrieving the media access codes occurs immediately after the computer is powered-on.

9. The machine-readable medium of claim 7 wherein the encrypting the unique ID comprises:

initiating an operating system crypto application programming interface to encrypt the unique ID.

10. The machine-readable medium of claim 7 wherein the method further comprises:

retrieving and decrypting the unique ID and storing it in the memory of the computer;

retrieving configuration data on at least one hard drive in the computer, including the serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a new single, long character string of all of the media access code strings;

creating a new unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string serial number for the at least one hard drive to the new single, long character string of all of the media access code strings to create the new unique ID for the computer;

comparing the new unique ID to the unique ID and, if the new unique ID matches the unique ID, then grant access to the network, otherwise, terminate the login attempt and report the invalid login attempt.

11. The machine-readable medium of claim 9 wherein the unique ID is encrypted using a data encryption standard algorithm or an advanced encryption standard algorithm.

12. The machine-readable medium of claim 10 wherein the report invalid login attempt comprises:

reporting the invalid login attempt to the network;

recording the IP address of the invalid login attempt; and

sending an alert signal to a network administrator that the invalid login attempt occurred.

13. A method of providing a secure network user login procedure for a network, the method comprising:

retrieving configuration data on at least one hard drive in a computer, including a serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a single, long character string of all of the media access code strings;

creating a unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string serial number for the at least one hard drive to the single, long character string of all of the media access code strings to create the unique ID for the computer;

comparing the unique ID to a previously created unique ID for the computer and, if the unique ID matches the previously created unique ID, then grant access to the network, otherwise, terminate the login attempt and report the invalid login attempt.

14. The method of claim 13 wherein the previously created unique ID was created by the method comprising:

retrieving configuration data on at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to initial character strings and appending all of the media access code initial character strings together to form an initial single, long character string of all of the media access code strings; and

creating the previously created unique ID for the computer by converting the serial number for the at least one hard drive to a character string, and appending the character string serial number for the at least one hard drive to the initial single, long character string of all of the media access code strings to create the initial unique ID for the computer.

15. The method of claim 13 wherein the report invalid login attempt comprises:

reporting the invalid attempt to the network;

recording the IP address of the invalid login attempt; and

sending an alert signal to a network administrator.

16. The method of claim 13 wherein the retrieving configuration data on the at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive, and retrieving the media access codes occurs immediately after the computer is powered-on.

17. The method of claim 13 wherein the previously created unique ID is retrieved and decrypted from an encrypted, previously created unique ID stored in a data file on the computer and the decrypted previously created unique ID is stored in the memory of the computer occurs immediately after the computer is powered-on.

19. The machine-readable medium of claim 13 wherein the previously created unique ID was created by the method comprising:

retrieving configuration data on the at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to initial character strings and appending all of the media access code initial character strings together to form an initial single, long character string of all of the media access code strings; and

creating the previously created unique ID for the computer by converting the serial number for the at least one hard drive to a character string, and appending the character string serial number for the at least one hard drive to the initial single, long character string of all of the media access code strings to create the initial unique ID for the computer.

18. A non-transitory machine-readable medium having stored thereon a plurality of executable instructions for performing a method of providing a secure network user login procedure for a network, the method comprising:

retrieving configuration data on at least one hard drive in a computer, including a serial number for the at least one hard drive;

retrieving all media access codes associated with the computer;

converting each of the media access codes to a character string and appending all of the media access code character strings together to form a single, long character string of all of the media access code strings;

creating a unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string serial number for the at least one hard drive to the single, long character string of all of the media access code strings to create the unique ID for the computer;

comparing the unique ID to a previously created unique ID for the computer and, if the unique ID matches the previously created unique ID, then grant access to the network, otherwise, terminate the login attempt and report the invalid login attempt.

20. The machine-readable medium of claim 18 wherein the report invalid login attempt comprises:

reporting the invalid attempt to the network;

recording the IP address of the invalid login attempt; and

sending an alert signal to a network administrator.

21. The machine-readable medium of claim 18 wherein the retrieving configuration data on the at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive, and retrieving the media access codes all occurs immediately after the computer is powered-on.

22. The machine-readable medium of claim 18 wherein the previously created unique ID is retrieved and decrypted from an encrypted, previously created unique ID stored in a data file on the computer and the decrypted previously created unique ID is stored in the memory of the computer occurs immediately after the computer is powered-on.

23. An apparatus for performing a method of providing a secure network user login procedure for a network, the apparatus comprising:

means for retrieving configuration data on at least one hard drive in a computer, including a serial number for the at least one hard drive;

the means for retrieving configuration data being stored on at least one hard drive;

means for retrieving all media access codes associated with the computer;

means for converting each of the media access codes to a character string and appending all of the media access code character strings together to form a single, long character string of all of the media access code strings;

means for creating a unique identification (ID) for the computer by converting the serial number for the at least one hard drive to a character string, and

appending the character string serial number for the at least one hard drive to the single, long character string of all of the media access code strings to create the unique ID for the computer;

means for comparing the unique ID to a previously created unique ID for the computer and, if the unique ID matches the previously created unique ID, then grant access to the network, otherwise, terminate the login attempt and report the invalid login attempt.

24. The apparatus of claim 23 wherein the previously created unique ID was created by an initial use of the apparatus.

25. The apparatus of claim 23 wherein the report invalid login attempt comprises:

reporting the invalid attempt to the network;

recording the IP address of the invalid login attempt; and

sending an alert signal to a network administrator.

26. The apparatus of claim 23 wherein the means for retrieving configuration data on the at least one hard drive in the computer connected to the network, including the serial number for the at least one hard drive, and retrieving the media access codes all operates immediately after the computer is powered-on.

27. The apparatus of claim 23 wherein the previously created unique ID is retrieved and decrypted from an encrypted, previously created unique ID stored in a data file on the computer and the decrypted previously created unique ID is stored in the memory of the computer occurs immediately after the computer is powered-on.