Solid state key for controlling access to computer software

• US 4,599,489 A
• Filed: 02/22/1984
• Issued: 07/08/1986
• Est. Priority Date: 02/22/1984
• Status: Expired due to Term

• Current Assignee: Thumbscan, Inc. (OneSpan, Inc.), Vasco Corp. (OneSpan, Inc.)
• Original Assignee: Gordian Systems Incorporated
• Inventors: Cargile, William P.
• Primary Examiner(s): Shaw, Gareth D.
• Assistant Examiner(s): Mills, John G.
• Application Number:
  US06/582,302
• Time in Patent Office: 867 Days
• Field of Search: 178/22.01, 178/22.06, 178/22.08, 178/22.09, 364/200 MS File, 364/900 MS File, 364/200, 364/900, 340/825.5, 235/382.5
• US Class Current: 705/52
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G07C 2009/00388 code verification carried out according to the challenge/response method
• CPC Class Codes: G07C 2009/00412 the transmitted data signal being encrypted
• CPC Class Codes: G07C 2009/005 whereby the code is a random code
• CPC Class Codes: G07C 2009/00769 with data transmission performed by wireless means
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/0069 actuated in a predetermined sequence
• CPC Class Codes: G07C 9/21 having a variable access code
• CPC Class Codes: G07C 9/215 the system having a variable access-code, e.g. varied as a function of time
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A semiconductor device that functions as a key to control access to a software program resident in a computer. The device includes a continuously running pulse generator that produces an output representative of real time, a shift register permanently storing a unique number and circuitry for executing an algorithm that combines real time and the permanently stored unique number to produce a password. The password is input to the computer. The computer is coded to execute an equivalent algorithm to produce a password within the computer. The two passwords are compared and access to the computer program is afforded only if they bear a prescribed relationship. The computer can be coded to produce on the video display thereof a time-space pattern on the computer video display, circuitry for deriving the stimulus number therefrom, and circuitry for processing the stimulus number so that the password displayed by the key is a function of the value of the stimulus number. The computer executes a similar procedure on the stimulus number so that access to the software program is afforded only if correspondence exists between the user input password and the password generated in the computer.

Claims

1. Apparatus for affording access by a user to a software program residing in a computer, comprising an access key capable of generating a password and of being transported independently of the computer and an access key verification means adapted to be resident in the computer, for verifying a passward generated by the access key and allowing access and use to the software program wherein:

said access key includes;

(a) pulse generating means for generating a signal that is dependent in the elapse of time;

(b) password generating means coupled to said pulse generating means for generating a password from the signal from said pulse generating means;

(c) displaying means communicating with the password generating means for displaying at least part of said password; and

said access key verification means includes;

(a) means for receiving at least initially a time input;

(b) means for receiving the password as generated by the access key and input by the user;

(c) means for processing the time input for producing an internal password;

(d) means for determining if the internal password bears a prescribed relationship to the password generated by said access key;

(e) means for affording access to the software program if the prescribed relationship exists.

2. The apparatus of claim 1 wherein:

said pulse generating means includes means for generating in accordance with a prescribed algorithm a password comprised of a character string; and

said displaying means includes means for displaying at least one character representative of said character string.

3. Apparatus in accordance with claim 1, wherein the computer has a video display, which can display another signal from the access key verification means, and wherein:

said access key verification means further includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the video display that is representative of said stimulus number; and

said access key further includes;

(a) at least one sensor accessible from the exterior of said access key so that juxtaposition of the access key and the display affords excitation of the sensor by the another signal;

(b) means coupled to said sensor for decoding the another signal to produce the stimulus number;

(c) said password generating means including a baseword generating means communicating with said pulse generating means for producing a baseword that is a function of the signal produced by said pulse generating means;

(d) said password generating means including a means for combining the stimulus number with the baseword to produce the password.

4. Apparatus in accordance with claim 3 wherein said access key includes:

means for counting each time said sensor is excited by the another signal on the video display; and

means for disabling said access key when the count on the counting means reaches a predetermined count.

5. Apparatus in accordance with claim 1, wherein the computer has a display, which can display another signal from the access key verification means, and wherein:

said access key verification means further includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the computer display that is representative of said stimulus number; and

said access key further includes;

(a) means for entering and decoding the another signal to produce the stimulus number;

(b) said password generating means including a baseword generating means communicating with said pulse generating means for producing a baseword that is a function of the signal produced by said pulse generating means;

(c) said password generating means including a means for combining the stimulus number with the baseword to produce the password.

6. Apparatus in accordance with claim 1 wherein said access key includes:

said signal from the pulse generating means providing a series of pulses;

a time limit counter means for counting pulses;

means for coupling said time limit counter means to said pulse generating means to count the number of pulses generated thereby; and

means for disabling said key when said time limit counter has counted a predetermined number of pulses from said pulse generating apparatus.

7. Apparatus according to claim 1,

wherein said password generating means of said access key comprises:

(a) a first registor initialized to a fixed state that uniquely identifies the access key;

(b) a second register for selectively retaining the signal from the pulse generating means;

(c) means for coupling said pulse generating means to said second register;

(d) means for gating outputs of said first and second registers to produce said password; and

said access key verification means includes;

(a) means for being initialized to a fixed state uniquely associated with the fixed state of said first register of said access key.

8. Apparatus according to claim 7 with the computer having a video display which can display another signal from the access key verification means, wherein:

said access key verification means includes;

(a) means for generating a stimulus number;

(b) means for generating another signal on the video display that is representative of said stimulus number;

said access key includes;

(a) at least one sensor accessible from the exterior of said access key so that juxtaposition of the access key and the display affords excitation of the sensor by the another signal;

(b) a third register for selectively retaining the another signal on the video display;

(c) means for communicating the sensor to said third register so that the another signal can alter the state of the third register in accordance with the stimulus number; and

(d) said gating means includes means for gating an output from said third register with the output from said first and second registers to produce said password.

9. Apparatus according to claim 7 wherein said access key includes:

a plurality of contacts means accessible from the exterior of said access key for initializing said access key;

means for coupling one of said contacts to said first register and another of said contacts to said second register; and

means for rendering the contacts immune to reinitialization.

10. Apparatus according to claim 9 wherein said rendering means includes means for insulating said contacts after initialization.

11. Apparatus in accordance with claim 9 wherein said access key includes:

a third contact;

means for communicating said third contact with said gating means;

wherein said gating means includes means for enabling said first and second registers responsive to an initialization signal being applied to said third contact.

12. Apparatus in accordance with claim 1, wherein the computer has a video display which can display another signal from the access key verification means, wherein:

said access key verification means includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the video display that is representative of said stimulus number; and

said access key includes;

(a) at least one sensor accessible from the exterior of said access key so that juxtaposition of the access key and the display affords excitation of the sensor by the another signal;

(b) means coupled to said sensor for decoding the another signal to produce the stimulus number;

(c) said password generating means including a means for combining the stimulus number with the signal from the pulse generator to produce the password.

13. Apparatus in accordance with claim 1, wherein the computer has a video display which can display another signal from the access key verification means, and wherein:

said access key verification means includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the computer display that is representative of said stimulus number; and

said access key includes;

(a) means for entering and decoding the another signal to produce the stimulus number;

(b) said password generating means including a means for combining the stimulus number with the signal from the pulse generator to produce the password.

14. Apparatus for affording access by a user to a software program residing in a computer, comprising an access key capable of generating a password and of being transported independently of the computer, and an access key verification means adapted to be resident in the computer, for verifying a password generated by the access key and allowing access and use of the software program wherein:

said access key includes;

(a) pulse generating means for generating a signal that is dependent on the elapse of time;

(b) password generating means coupled to said pulse generating means for encrypting the signal from said pulse generating means into a password;

(c) displaying means communicating with the password generating means for displaying at least part of said password; and

said access key verification means includes;

(a) means for receiving at least initially a time input;

(b) means for receiving the password as generated by the access key and input by the user;

(c) means for decrypting the password for producing a decrypted password;

(d) means for determining if the decrypted password bears a prescribed relationship to the time input;

(e) means for affording access to the software program if the prescribed relationship exists.

15. Apparatus in accordance with claim 14, wherein the computer has a video display which can display another signal from the access key verification means, and wherein:

said access key verification means includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the video display that is representative of said stimulus number; and

said access key includes;

(a) at least one sensor accessible from the exterior of said access key so that juxtaposition of the access key and the display affords excitation of the sensor by the another signal;

(b) means coupled to said sensor for decoding the another signal to produce the stimulus number;

(c) said password generating means including a means for encrypting the stimulus number with the signal from the pulse generating means to produce the password.

16. The apparatus of claim 15 including:

means for counting each time said sensor is excited by the video display of the computer;

means for disabling the access key when the counter reaches a predetermined count.

17. Apparatus in accordance with claim 14, wherein the computer has a display which can display another signal from the access key verification means, and wherein:

said access key verification means includes;

(a) a stimulus number generating means for generating a stimulus number;

(b) means for generating another signal on the computer display that is representative of said stimulus number; and

said access key includes;

(a) means for entering and decoding the another signal to produce the stimulus number;

(b) said password generating means including a means for encrypting the stimulus number with the signal from the pulse generating means to produce the password.

18. Apparatus for affording access by a user to a software program residing in a computer with a video display comprising access key verification means adapted to be resident in the computer, for verifying an encrypted password and allowing access and use of the software program, and an access key capable of generating an ecrypted password and of being transported independently of the computer, wherein:

said access key verification means includes;

(a) means for receiving at least initially a time input;

(b) a stimulus number generating means for generating a stimulus number;

(c) means for generating a signal on the video display that is representative of said stimulus number; and

said access key includes;

(a) pulse generating means for generating another signal that is dependent on the elapse of time;

(b) at least one sensor accessible from the exterior of said access key so that juxtaposition of the access key and the video display affords excitation of the sensor by the signal;

(c) means coupled to said sensor for decoding the signal to produce the stimulus number;

(d) password generating means for encrypting said another signal produced by said pulse generating means and said stimulus number for producing an encrypted password;

(e) displaying means communicating with the password generating means for displaying at least part of said encrypted password, so that the user can input the encrypted password into the computer;

wherein said access key verification means further includes;

(a) means for decrypting the encrypted password displayed on the access key;

(b) means for determining if the decrypted password has a prescribed relationship to at least one of the stimulus number and the input time;

(c) means for affording access to the software program if the prescribed relationship exists.

19. The access key of claim 18 including:

means for counting each time said sensor is excited by the video display of the computer;

means for disabling the access key when the counter reaches a predetermined count.

20. Apparatus for affording access by a user to a software program residing in a computer with a display comprising access key verification means adapted to be resident in the computer, for verifying an encrypted password and allowing access and use of the software program, and an access key capable of generating an encrypted password and of being transported independently of the computer, wherein:

said access key verification means includes;

(a) means for receiving at least initially a time input;

(b) a stimulus number generating means for generating a stimulus number;

(c) means for generating a signal on the computer display that is representative of said stimulus number; and

said access key includes;

(a) pulse generating means for generating another signal that is dependent on the elapse of time;

(b) means for entering and decoding the signal to produce the stimulus number;

(c) password generating means for encrypting said another signal produced by said pulse generating means and said stimulus number for producing an encrypted password;

(d) displaying means communicating with the password generating means for displaying at least part of said encrypted password, so that the user can input the encrypted password into the computer;

wherein said access key verification means further includes;

(a) means for decrypting the encrypted password displayed on the access key;

(b) means for determining if the decrypted password has a prescribed relationship to at least one of the stimulus number and the input time;

(c) means for affording access to the software program if the prescribed relationship exists.