Verification server for use in authentication on networks

• US 5,987,232 A
• Filed: 09/09/1997
• Issued: 11/16/1999
• Est. Priority Date: 09/08/1995
• Status: Expired due to Term

• Current Assignee: Identity Verification Solutions LLC (Acacia Research Corporation)
• Original Assignee: CADIX, Inc.
• Inventors: Tabuki, Takaaki
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Baderman, Scott T.
• Application Number:
  US08/925,634
• Time in Patent Office: 798 Days
• Field of Search: 380/4, 380/23
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

The authentication of users on networks is performed more easily and efficiently, as follows:

Authentication data sent from the application client 20 is relayed to a verification server 30 by the application server 10. The verification server 30 maintains a database of valid authentication data, against which it verifies received authentication data. Verification results are sent to the application server 10, which then processes users on the basis of these results. As a result, the configuration of application servers 10 is simplified. Verification servers or servers 30 can be used by a plurality of application servers 10, allowing for the efficient use of resources on a network.

Claims

1. A verification server which verifies entered authentication data entered by network users through networks, comprising:

memory means for storing valid authentication data of authorized network users, wherein the valid authentication data includes biometric information unique to an authorized network user and the information is supplied by the authorized network user;

search means for retrieving the valid authentication data of the authorized network users from the memory means in response to verification requests from external sources;

verification means for comparing and verifying the entered authentication data against the valid authentication data retrieved by the search means in response to verification requests; and

sending means for sending the verification results via networks to an application program on the networks according to the content of said verification requests, wherein said application program asks the network user to enter the authentication data.

2. The verification server of claim 1, wherein the memory means comprises a table which includes identification data for the authorized network users, valid authentication data for the authorized network users, and other specified data concerning the authorized network users, and the search means retrieves the valid authentication data and at least one of the identification data or the other specified data from the memory means.

3. The verification server of claim 1, further comprising:

cache control means for reading the valid authentication data from the memory means and for storing the valid authentication data in a cache having an access speed faster than that of the memory means.

4. The verification server of claim 1, wherein the biometric information includes at least one of signature data, fingerprint data, retinal pattern data or palm print data.

5. The verification server of claim 2, wherein the other specified data includes at least one of user name data, telephone number data, birth date data or blood type data.