User authentication system and method without password

• US 20090319778A1
• Filed: 04/23/2009
• Published: 12/24/2009
• Est. Priority Date: 04/25/2008
• Status: Abandoned Application

• Current Assignee: Jurzyk Andrzej, Pawel Rzepecki, Rum M. Wojciech, Thomas Majcher
• Original Assignee: Jurzyk Andrzej, Pawel Rzepecki, Rum M. Wojciech, Thomas Majcher
• Inventors: Majcher, Thomas, Andrzej, Jurzyk, Wojciech, Rum M., Rzepecki, Pawel
• Application Number:
  US12/386,827
• Publication Number:
  US 20090319778A1
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme

Abstract

A Verified unit (VU) communicates with an Authenticating Unit (AU). The VU only provides the AU with the user'"'"'s public key via RSA technology known in the art. The AU sends a character string to the VU requiring the VU to generate a digital signature which is sent to an Authority server (AS) to authenticate the digital signature information provided to the AU by the VU. If the AS authenticates the information it informs the AU and the AU will provide the VU'"'"'s requested data to the VU.

Claims

1. A password free user authentication system, comprising:

a verified unit (VU) for communication between a user and an authenticating unit (AU), said verified unit communicating and requesting information from said AU by a user'"'"'s public key via RSA technology;

said AU generating a character string in response to said public key sent from said VU said character string requesting said VU to generate a digital signature; and

an authority server (AS) for authenticating the generated digital signature and informing said AU so that AU will provide the requested information to the VU.

2. The system according to claim 1 wherein said AU can be any end point.

3. A method for providing password free user authentication, the steps comprising:

a verified unit (VU) for communicating between a user from a verified unit (VU) and an authenticating unit (AU),

communicating and requesting information by said verified unit from said AU via a user'"'"'s public key via RSA technology; and

generating a character string by said AU in response to said public key sent from said VU, said character string requesting said VU to generate a digital signature; and

for authenticating the generated digital signature by an Authority server (AS) and then said AU informing as to the authenticity of the digital signature said AU so that AU will provide the requested information to the VU.

4. The method according to claim 3 wherein said AU can be any end point.