Method and system for secure remote login of a mobile device

• US 9,294,918 B2
• Filed: 07/14/2010
• Issued: 03/22/2016
• Est. Priority Date: 07/23/2009
• Status: Active Grant

• Current Assignee: ESign, Inc.
• Original Assignee: ESign, Inc.
• Inventors: Shaikh, Mohammed Naser S.
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): TRUONG, THONG P
• Application Number:
  US12/804,098
• Publication Number:
  US 20110022838A1
• Time in Patent Office: 2,078 Days
• Field of Search: 713/168
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system to securely login a mobile device may include a storage means for storing an encrypted file, a certification system to receive the encrypted file from the storage means, and a customer transaction system in communication with the certification system. The system may also include the mobile device to transmit the encrypted file from the storage means to the certification system to allow the mobile device to securely log into the customer transaction system.

Claims

1. A secure storage system that can be accessed from a mobile device, comprising:

a secured processing system including an encryption data server to create an encrypted login information using a public key and private key for encryption and decryption associated with a digital certificate;

a certification server for receiving the encrypted login information from a mobile device;

a customer transaction system in communication with said certification server and the encryption data server, wherein said mobile device transmits said encrypted file to said certification server to securely log into said customer transaction system, and wherein said encrypted login information includes a first login information and wherein said customer transaction system includes an authentication system to authenticate said first login information to login said mobile device and wherein the customer transaction system includes a database system having a second login information and in communication with a authentication system using the certificate server where a certificate revocation list can be used to verify the second login information.

2. The secure storage system of claim 1, wherein said certification server transmits said encrypted login file to said customer transaction system to allow said mobile device to securely log into said customer transaction system.

3. The secure storage system of claim 1, wherein said customer transaction system includes said certification server.

4. The secure storage system of claim 1, wherein customer transaction system includes a customer account being accessible by said mobile device.

5. The secure storage system of claim 1, wherein said secure storage system is located within said mobile device.

6. The secure storage system of claim 1, wherein said secure storage system is located outside the said mobile device.

7. The secure storage system of claim 1, wherein every certificate issued and revoked is included in a certificate revocation list.

8. The secure storage system of claim 7, wherein a revoked certificate is included in the certificate revocation list.

9. The secure storage system of claim 7, wherein a canceled certificate is included in the certification revocation list.

10. The secure storage system of claim 1, wherein said secure storage system is a computer-readable medium.

11. A method for login adapted to a mobile device, comprising the steps of:

storing an encrypted file on an encryption data server in a storage system;

transmitting said encrypted file from the encryption data server on said storage system to a certification system on a certification server; and

logging in said mobile device into the certification server of a customer transaction system, and wherein said encrypted file includes a first login information and wherein said customer transaction system includes an authentication system to authenticate said first login information to login said mobile device and wherein the customer transaction system includes a database system having a second login information and in communication with a authentication system using the digital certificate server where a certificate revocation list can be used to verify the second login information.

12. The method of claim 11, wherein the transmitting step includes transmitting said encrypted file from said storage system to said certification system via said mobile device.

13. The method of claim 11, further including a step of creating said encrypted file having login information.

14. The method of claim 11, further including a step of storing said login information in a database.

15. The method of claim 11, further including a step of transmitting said login information from said certification system.

16. The method of claim 11, further including a step of authenticating said certificate associated with said encrypted file.

17. The method of claim 11, further including a step of issuing a digital certificate from said certification system to said mobile device.