METHOD AND APPARATUS FOR THE SECURE IDENTIFICATION OF THE OWNER OF A PORTABLE DEVICE

• US 20090217046A1
• Filed: 01/08/2009
• Published: 08/27/2009
• Est. Priority Date: 02/25/1999
• Status: Abandoned Application

• Current Assignee: Bouyant Holdings Limited
• Original Assignee: Cidway Technologies, Ltd.
• Inventors: Labaton, Isaac J.
• Application Number:
  US12/350,720
• Publication Number:
  US 20090217046A1
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G10L 15/02 Feature extraction for speech recognition; Selection of recognition unit
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

An authentication system is provided that includes a portable device and a decryption node. An individual uses the portable device, such as a portable device like a cell phone to compute a challenge and a response. The challenge and response is sent to a decryption node. In response, the decryption node computes a presumed response and compares the presumed response to the response of the portable device, in order to authenticate the individual associated with the portable device.

Claims

1. A method for identifying an entity, comprising the steps of:

computing, by a portable device, a dynamic identification message for the entity, wherein the dynamic identification message is entirely variable;

communicating the dynamic identification message to an identification station;

receiving, by the identification station, the dynamic identification message; and

interpreting, by the identification station, the dynamic identification message in order to identify the entity.

2. The method of claim 1, wherein the computing process of the dynamic identification message uses a constant string associated with the entity'"'"'s identity data and wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string.

3. The method of claim 2, wherein the step of interpreting by the identification station further comprises using the inverse of the reversible algorithm in order to retrieve the constant string from the dynamic identification message.

4. The method of claim 3, further comprising the step of querying, by the identification station, a data base using the retrieved constant string in order to retrieve data associated with the entity'"'"'s identity.

5. The method of claim 2, wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string and to an indicia of the time and date.

6. The method of claim 5, wherein the step of interpreting by the identification station further comprises using the inverse of the reversible algorithm in order to retrieve the constant string and the indicia of the time and date from the dynamic identification message.

7. The method of claim 6, further comprising the step of checking if the retrieved indicia of the time and date fall within a predetermined tolerance window.

8. The method of claim 6, further comprising the step of querying, by the identification station, a data base using the retrieved constant string in order to retrieve data associated with the entity'"'"'s identity.

9. A method for identifying one of a plurality of entities, comprising the steps of:

associating a constant string to at least one of the plurality of entities, wherein the associated constant string is unique to that entity;

computing, by a portable device, a dynamic identification message, wherein the computing process of the dynamic identification message uses the constant string associated to the entity;

communicating the dynamic identification message to an identification station;

receiving, by the identification station, the dynamic identification message; and

interpreting, by the identification station, the dynamic identification message in order to identify the entity.

10. The method of claim 9, wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string.

11. The method of claim 10, wherein the step of interpreting by the identification station further comprises using the inverse of the reversible algorithm in order to retrieve the constant string from the dynamic identification message.

12. The method of claim 9, wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string and to an indicia of the time and date.

13. The method of claim 12, wherein the step of interpreting by the identification station further comprises using the inverse of the reversible algorithm in order to retrieve the constant string and the indicia of the time and date from the dynamic identification message.

14. The method of claim 13, further comprising the step of checking if the retrieved indicia of the time and date fall within a predetermined tolerance window.

15. A method for identifying one of a plurality of entities, comprising the steps of:

associating a constant string to at least one of the plurality of entities, wherein the associated constant string is unique to that entity;

computing, by a portable device, a dynamic identification message, wherein the computing process of the dynamic identification message uses the constant string associated to the entity;

communicating the dynamic identification message to a third party;

receiving, by the third party, the dynamic identification message;

sending, by the third party, the dynamic identification message to an identification station; and

interpreting, by the identification station, the dynamic identification message in order to identify the entity.

16. The method of claim 15, wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string.

17. The method of claim 15, wherein the step of computing by the portable device further comprises applying a reversible algorithm to the constant string and to an indicia of the time and date.

18. The method of claim 15, wherein the step of interpreting by the identification station further comprises using the inverse of the reversible algorithm in order to retrieve the constant string and the indicia of the time and date from the dynamic identification message.

19. The method of claim 15, further comprising the step of checking if the retrieved indicia of the time and date fall within a predetermined tolerance window.