Computing apparatus and methods using secure authentication arrangements

• US 7,069,439 B1
• Filed: 03/03/2000
• Issued: 06/27/2006
• Est. Priority Date: 03/05/1999
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Chen, Liqun, Lo, Hoi-Kwong, Chan, David
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US09/936,132
• Time in Patent Office: 2,307 Days
• Field of Search: 713/165, 713/172, 713/185, 713/189, 380/210, 380/251
• US Class Current: 713/172
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2211/009 Trust
• CPC Class Codes: G06F 2221/2103 Challenge-response

Abstract

Computing apparatus comprises a memory means storing the instructions of a secure process and an authentication process; a processing means arranged to control the operation of the computing apparatus including by executing the secure process and the authentication process; a user interface means arranged to receive user input and return to the user input; and an interface means for receiving a removable primary token and communication with the token. The token comprises a body supporting a token interface for communicating with the interface means, a token processor; and a token memory adapted to store token data including information for identifying the token and auxiliary token information identifying one or more authorized auxiliary tokens. The processing means is arranged to receive the identity information and the auxiliary token information from the primary token, to authenticate the toke using the authentication process and, if the token is successfully authenticated, permit a user to interact with the secure process via the user interface means. The processing means is arranged to repeatedly authenticate the primary toke and cause the computing platform to suspend interaction between the secure process and the user if authentication is not possible as a result of the removal of the primary token unless the primary token is replaced by an authorized auxiliary token.

Claims

1. Computing apparatus comprising:

memory means storing the instructions of a secure process and an authentication process;

processing means arranged to control the operation of the computing apparatus including by executing the secure process and the authentication process;

user interface means arranged to receive user input and return to the user information generated by the processing means in response to the user input; and

interface means for receiving a removable primary token and communicating with the token, the token comprising a body supporting;

a token interface for communicating with the interface means;

a token processor; and

token memory storing token data including identity information for identifying the token and auxiliary token information identifying one or more authorised auxiliary tokens,

wherein the processing means is arranged to receive the identity information and the auxiliary token information from the primary token, authenticate the token using the authentication process and, if the token is successfully authenticated, permit a user to interact with the secure process via the user interface means,

and wherein the processing means is arranged to repeatedly authenticate the primary token and cause the computing platform to suspend interaction between the secure process and the user if authentication is not possible as a result of the removal of the primary token unless the primary token is replaced by an authorised auxiliary token identified by said auxiliary token information.

2. Computing apparatus according to claim 1, arranged to generate information representing the integrity of the computing apparatus and transmit the integrity information to the primary token, wherein the token processor is programmed to verify the integrity of the computing apparatus including by using the integrity information.

3. Computing apparatus according to claim 1, wherein the authorised token is a cash token and the secure process is arranged to credit or debit the token.

4. Computing apparatus according to claim 1, wherein the authorised token is a crypto token programmed to encrypt, decrypt or sign data, and the secure process is arranged to transmit data to the crypto token to be encrypted, decrypted or signed and receive encrypted, decrypted or signed data from the crypto token.

5. Computing apparatus according to claim 1, arranged, only if the different token is an authorised auxiliary token, to allow the user to interact with the secure process.

6. Computing apparatus according to claim 1, further comprising timer means programmed with a timeout period, wherein, in the event the different token is an authorised auxiliary token, the computing apparatus resets the timer and continues operation until the timeout period expires, after which time the computing apparatus suspends any interactions between the secure process and either or both the user and the authorised auxiliary token.

7. Computing apparatus according to claim 6, arranged to recommence said interactions in the event the authorised auxiliary token is replaced by the primary token and the computing apparatus is able to authenticate the primary token.

8. Computing apparatus according to claim 1, arranged to permit interaction between the secure process and only one authorised auxiliary token after removal of the primary token.

9. Computing apparatus according to claim 1, arranged to permit interaction between the secure process and more than one authorised auxiliary token after removal of the primary token.

10. Computing apparatus according to claim 1, wherein the processing means comprises a main processing unit and a secure processing unit and the memory means comprises main memory and secure memory.

11. Computing apparatus according to claim 10, comprising a trusted device incorporating the secure processing unit and the secure memory, wherein the trusted device is programmed to authenticate the primary token repeatedly.

12. Computing apparatus according to claim 11, wherein the trusted device is arranged to acquire an integrity metric of the computing apparatus, and the primary token is arranged to use the integrity metric on at least one occasion to verify the integrity of the computing apparatus.

13. Computing apparatus according to claim 1, wherein the primary token comprises a smart card, and the interface means is configured to receive a smart card.

14. Computing apparatus according to claim 1, wherein the auxiliary token information is stored in a user profile.

15. A method of controlling computing apparatus to authenticate a user, comprising the steps:

the computing apparatus receiving a primary token of the user, the primary token containing information suitable for authenticating the primary token and identification information relating to one or more authorised auxiliary tokens;

if the token is authentic, permitting the user to interact with one or more secure applications that may be executed by the computing platform;

at intervals, re-authenticating the primary token; and

if it is not possible to re-authenticate the primary token, suspending the interaction between the computing apparatus and the user unless the primary token has been replaced with an authorised auxiliary token identified by said auxiliary token identification information.

16. A method according to claim 15, further comprising the steps:

the computing apparatus providing integrity metric information to the primary token;

the primary token using the integrity metric information to verify the integrity of the computing apparatus; and

if the primary token is unable to verify the integrity of the computing apparatus, suspending interaction between the computing apparatus and the user.

17. A method according to claim 15, wherein the computing apparatus interaction with the authorised auxiliary token for a limited period of time.

18. A method according to claim 15, wherein the computing apparatus only permits interaction with one authorised auxiliary token after removal of the primary token.

19. A method according to claim 15, wherein the computing apparatus permits interaction with plural authorised auxiliary tokens after removal of the primary token.

20. Computing apparatus comprising:

one or more memories adapted to store the instructions of a secure process and an authentication process;

one or more processors arranged to control the operation of the computing apparatus including by executing the secure process and the authentication process;

a user interface arranged to receive user input and return to the user information generated by the one or more processors in response to the user input; and

a token reader interface for receiving and communicating with a removable token, the token having a token memory storing token data including identity information for identifying the token and auxiliary token information identifying one or more authorized auxiliary tokens,

wherein the one or more processors are arranged to receive the identity information and the auxiliary token information from a primary token received in the token reader interface, authenticate the primary token using the authentication process and, if the primary token is successfully authenticated, permit a user to interact with the secure process via the user interface, and wherein the one or more processors are arranged to repeatedly authenticate the primary token and cause the computing platform to suspend interaction between the secure process and the user if authentication is not possible as a result of the removal of the primary token unless the primary token is replaced by an authorized auxiliary token identified by said auxiliary token information.

21. Computing apparatus according to claim 20, wherein the primary token comprises a token processor and the one or more processors are arranged to generate information representing the integrity of the computing apparatus and transmit the integrity information to the primary token, wherein the token processor is programmed to verify the integrity of the computing apparatus including by using the integrity information.

22. Computing apparatus according to claim 20, further comprising a timer programmed with a timeout period, wherein, in the event the different token is an authorized auxiliary token, the computing apparatus resets the timer and continues operation until the timeout period expires, after which time the computing apparatus suspends any interactions between the secure process and either or both the user and the authorized auxiliary token.

23. Computing apparatus according to claim 22, arranged to recommence said interactions in the event the authorized auxiliary token is replaced by the primary token and the computing apparatus is able to authenticate the primary token.

24. Computing apparatus according to claim 20, wherein the one or more processors comprise a main processor and a secure processor and the one or more memories comprise a main memory and a secure memory.

25. Computing apparatus according to claim 24, wherein said computer apparatus comprises a trusted device incorporating the secure processor and the secure memory, wherein the trusted device is programmed to authenticate the primary token repeatedly.

26. Computing apparatus according to claim 25, wherein the trusted device is arranged to acquire an integrity metric of the computing apparatus, and the primary token is arranged to use the integrity metric on at least one occasion to verify the integrity of the computing apparatus.

27. Computing apparatus according to claim 20, wherein the primary token comprises a smart card, and the token reader interface is configured to receive a smart card.