Secure and dynamic biometrics-based token generation for access control and authentication

• US 6,636,973 B1
• Filed: 09/08/1998
• Issued: 10/21/2003
• Est. Priority Date: 09/08/1998
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Crisan, Adrian, Novoa, Manuel
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/149,400
• Time in Patent Office: 1,869 Days
• Field of Search: 713/200-202, 713/182-186, 340/5-2-, 340/5.74, 340/5--, 382/115-119, 382/124
• US Class Current: 726/20
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints

Abstract

A computer network includes at least one client computer coupled to a server computer that dynamically changes a user'"'"'s password each time the user logs on to the computer network. By changing the password during the log on process, network security is increased. The server computer includes a users databases that contains a password, a username (if desired) and a biometrics template value associated with each user registered to access the computer network. A biometrics sensing device, such as a fingerprint sensor, is connected to each client computer. The user attempts to log on the server by entering a username which is optional and activating the biometrics sensing device. Appropriate software and/or hardware in the client and server computers capture a sample from the biometrics sensing device and create a template value from the captured sample. The template value thus is representative of a bodily characteristic of the user who activated the biometrics sensing device in an attempt to log on to the server computer. The client computer then transmits the template value to the server which compares the template value received from the client computer with template values previously stored in the users database. If a match is found, the log on process completes. At some point during or after the log on process, the biometrics account manager changes the current password associated with the user to a new password and overwrites the previous password with the new password.

Claims

1. A method for dynamically changing a user'"'"'s password in a computer network, comprising:

(a) capturing a biometrics sample associated with a bodily characteristic of a user;

(b) generating a template value using said captured biometrics sample;

(c) comparing said template value to a template value associated with a current user password stored in a database;

(d) automatically changing said current user password to a new password if a match is found in step (c), and

(e) storing the new password in a user database.

2. The method of claim 1 wherein step (d) includes changing said current user password by generating a random number.

3. The method of claim 2 wherein generating a random number includes using a seed value to generate the random number.

4. The method of claim 3 wherein the seed value includes the current user password.

5. The method of claim 1 further including logging on to the computer network using the new password from step (d).

6. The method of claim 1 further including logging on to the computer network using the current user password before step (d).

7. A method for dynamically changing a user'"'"'s password in a computer network, comprising:

(a) capturing a biometrics sample associated with a bodily characteristic of a user;

(b) generating a template value using said captured biometrics sample;

(c) comparing said template value to a template value associated with a current user password stored in a database;

(d) changing said current user password to a new password if a match is found in step (c); and

(e) storing the new password in a user database,

wherein step (d) includes changing said current user password by generating a random number,

wherein generating a random number includes using a seed value to generate the random number, and

wherein the seed value includes said template value.

8. A server computer system, comprising:

a users database containing for each registered user a password and a biometrics template representative of bodily characteristic of the registered user; and

a biometrics account manager that changes the password in the users database associated with a particular registered user after each time that user logs on to the server computer system,

wherein said biometrics account manager determines a random number and uses the random number to change the password associated with the particular registered user to a new password, and wherein the biometrics account manager stores the new password in the users database.

9. The server computer system of claim 8, wherein the biometrics account manager is further configured to periodically change all the passwords in the users database.

10. A server computer system, including:

a users database containing for each registered user a password and a biometrics template representative of bodily characteristic of the registered user;

a means for dynamically changing a password stored in said users database associated with a user who attempts to log on to the server computer system; and

a means for automatically changing a set of passwords using a random or pseudo-random process.