USRE48324E1 - Method and system for authenticating a user - Google Patents
Method and system for authenticating a user Download PDFInfo
- Publication number
- USRE48324E1 USRE48324E1 US15/951,460 US200815951460A USRE48324E US RE48324 E1 USRE48324 E1 US RE48324E1 US 200815951460 A US200815951460 A US 200815951460A US RE48324 E USRE48324 E US RE48324E
- Authority
- US
- United States
- Prior art keywords
- data
- removable storage
- user
- processing system
- storage medium
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active, expires
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/33—User authentication using certificates
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3821—Electronic credentials
Definitions
- the invention relates to a method and a system for authenticating a user in a data processing system.
- the invention serves to authenticate a user at a money transaction device.
- data processing systems in particular in data processing systems that are part of a money transaction device, a large number of safety aspects have to be taken into account to ensure that these data processing systems cannot be manipulated by unauthorized persons.
- a large number of safety aspects have to be taken into account to ensure that these data processing systems cannot be manipulated by unauthorized persons.
- Especially the transfer of data, in particular of program data, from a removable storage medium to the data processing system as well as of data from the data processing system to a removable storage medium connected to this data processing system should be reliably prevented in the case of unauthorized users.
- money transaction devices such a data transfer is to be prevented for unauthorized users if only for safety reasons in order to meet data protection requirements and to prevent manipulations.
- Known money transaction devices can, in particular, be self-service systems that comprise a large number of electronic components.
- Such components are, for example, contained in a cash dispensing unit, a keyboard, a card reading and writing device as well as in further peripheral devices.
- These individual components are connected to the data processing system of the money transaction device via communication interfaces and data lines.
- Each of these components processes and generates data, in particular operating protocols, trace data and error information.
- these data are stored in a storage area of a non-volatile storage of the data processing system, in particular a hard disk storage unit of the data processing system.
- the removable storage medium thus does not have to have a controller for execution of an administration process which administers digital certificates, generates random numbers as well as pseudo-random numbers and encrypts random numbers and data.
- a simple cost-efficient removable storage medium without controller, such as a simple mass storage, with stored identification data and a stored certificate is thus sufficient for the invention.
- the user is identified and the identified user is authenticated, user rights being preset in the data processing system for the user and/or for a user group to which the user is assigned, which user rights are activated for this user by the authentication of the user.
- the identification of the user can likewise be determined with the aid of the identification code for the identification of the removable storage medium and/or with the aid of the digital certificate that is stored in the storage area of the removable storage medium.
- the certificate is a attribute certificate, the identification code and/or a password which can be entered via a user interface of the data processing system being used as attributes which are linked to a certificate by a certificate authority.
- the attribute certificate preferably refers to the attribute or, respectively, the attributes and to a further certificate.
- the manufacturer identification code and the serial number identification code are preferably attributes of the certificate.
- the certificate preferably has a predetermined validity, the certificate becoming void with expiration of this validity and being no longer accepted by the data processing system.
- the authenticity of the certificate as well as the validity of the certificate can be checked by the data processing system, the user being authenticated after a successful check. As a result thereof, in particular a permanent misuse of the removable storage medium for authenticating a user can be effectively prevented.
- a public key of an asymmetric key pair of the user can be certified, with the aid of which data are encrypted that can be decrypted with the private key of the key pair.
- data which are transferred from the data processing system to the removable storage medium are encrypted with the aid of the certified public key before transfer.
- the data processing system is part of a money transaction device, the money transaction device preferably being a cash deposit machine, a cash dispensing machine, a cash recycling machine, an automatic cash safe, an automatic cash system and/or a cash register system.
- the removable storage medium is preferably an external hard disk and/or an external flash memory, the removable storage medium being connectable to the data processing system via a data line and preferably via a standard interface.
- the standard interface is preferably a USB interface
- the flash memory is preferably a memory card and/or a pluggable USB memory.
- the transfer of data from the data processing system to the removable storage medium and/or the transfer of further data from the removable storage medium to the data processing system are only possible after a successful authentication of the user.
- the data transfer can be prevented if no authentication of the user that allows the respective data transfer has been performed.
- it is ensured both that safety-relevant data cannot be transferred from the data processing system to the removable storage medium by unauthorized operators as well as that undesired data, in particular harmful program codes, such as viruses, are not transferred from the removable storage medium to the data processing system.
- the certificate can be created in an initialization process and stored in a storage area of the removable storage medium.
- the certificate is created in accordance with a standard for digital certificates, in particular according to the X.509 standard. This X.509 standard is available in the version 3 at the application date.
- the identification code or, respectively, the identification codes of the removable storage medium are stored by the manufacturer preferably during the production process of the removable storage medium as read-only data in a storage area of the removable storage medium that cannot be changed later on.
- the certificate can likewise be stored in the form of read-only data in such a storage area that can no longer be changed or, alternatively, preferably be stored in a further rewritable storage area of the removable storage medium, which is rewritable and in which further data can be stored.
- the certificate in which the data of the certificate are stored in a further rewritable storage area of the removable storage medium, the certificate can be renewed in an easy manner in that the existing certificate is erased and replaced by a new certificate.
- the attribute certificate can authorize a user to execute at least one application program by the data processing system.
- the application program or another program module can check whether a corresponding authorization of the user by an inventive authentication of the user has been performed, and/or cause such an authentication of the user for authorization when the program is started.
- safety-relevant functions of an application software or safety-relevant application software can be activated and/or executed only after a positive check of the authorization of the operator or the logged on user.
- a method for authenticating a user can be developed in the same manner as specified for the system for authenticating a user, in particular by the features of the independent claims.
- FIG. 1 shows a block diagram with components for authenticating a user.
- FIG. 2 shows a sequence for requesting, creating and storing a certificate for a user on a USB memory stick.
- FIG. 3 shows a sequence for verifying a certificate stored on a USB memory stick.
- FIG. 1 a block diagram of a system for authenticating a user is illustrated, with the aid of which system a service technician can be authenticated by a data processing system as a user of the user group “Technicians” by means of a certificate 14 stored on a USB memory stick 12 .
- the USB memory stick 12 is connected via a data line 16 to a USB interface 20 of the data processing system 18 .
- the data processing system 18 provides a certificate server 22 according to the certificate standard X.509 with the aid of a program module.
- the certificate server 22 has access to a non-volatile memory area 24 , such as a hard-disk storage area, in which certificates 25 are stored.
- the non-volatile storage area 24 includes at least one certificate 25 to which the certificate 14 stored in the USB memory stick 12 refers.
- the service technician starts via a graphical user interface at least one service and operating application program 26 .
- This service and operating application program 26 passes a defined request in the form of a text field to a CSC-W32 API program module 28 which provides an application interface for the service and operating application program 26 and further programs.
- the CSC-W32 API program module 28 is a client which makes use of services of the X.509 certificate server 22 via at least one socket connection 30 .
- the CSC-W32 API program module 28 forwards the request of the service and operating application program 26 to the certificate server 22 as a request.
- the certificate server 22 checks whether the logged on current user can be authenticated as a user of the user group “Technicians” in that the certificate server 22 checks with the aid of the certificates 25 stored in the non-volatile storage area 24 whether the certificate 14 of the USB memory stick 12 connected to the USB interface 20 of the data processing system 18 is valid and actually authenticates the user as a valid user of the user group “Technicians”.
- the certificate server 22 communicates to the CSC-W32 API program module 28 that the authentication of the user was successful and the service and operating application program 26 can be further processed or, respectively, a safety-relevant function provided by this service and operating application program 26 can be activated.
- the certificate server 22 Given an invalid certificate 14 or, respectively, an unsuccessful authentication of the user, the certificate server 22 creates a corresponding response to the request of the CSC-W32 API program module 28 , as a result whereof a further processing of the service and operating application program 26 or, respectively, the provision of a safety-relevant function, which have respectively caused the check, is not activated.
- FIG. 2 a sequence for requesting, creating and storing a certificate 14 for a user for personalization and activation of the USB memory stick 12 is exemplarily illustrated. Identical elements are identified by identical reference signs.
- the certificate is used to authenticate a user by the data processing system 18 as well as by further data processing systems.
- the USB memory stick 12 is personalized with the aid of a client-server-application for a specific user, for example for the already-mentioned service technician.
- the registration at a registration authority has to be requested.
- the registration authority can, for example, be provided by the manufacturer of the money transaction device in which the data processing system 18 is contained.
- the request for registration is manually processed by the certificate authority by administrative action and can be compared with the activation of a new user in a network.
- the applicant is registered as a user in a database.
- the applicant files the request, for example, via e-mail or phone.
- the request can be automatically created by a program module when a service technician is employed and/or a service technician or another user is newly registered for whom an authorization for activation of service and operating application programs and/or other safety-relevant programs and/or functions is to be performed. Thereafter, this request for certification is checked. If necessary, a telephone call or a communication via e-mail takes place in order to guarantee that the request really comes from the respective service technician.
- the desired user rights can be granted to the applicant, i.e. the service technician.
- suitable user rights are automatically determined based on the position of the service technician within the company and his/her function, which user rights are then assigned to the service technician and confirmed by a certificate.
- the general user rights of the preset user group “Technicians” and, if necessary, further user rights are assigned to the service technician.
- a master data record is created in a database and a certification process required for the certification is enabled by a database entry. Both the master data record and the certification process can be used for creating further certificates for the respective service technician.
- FIG. 2 illustrates the communication sequence between a communication device 40 of the service technician, the call center of the certificate authority serving as a frontend 42 and a database 44 for the registration of users to be certified and certified users.
- identification information about preferably several technicians are forwarded to the database, which identification information comprises a list which is stored in a data file and contains this information assigned to the respective technician. With the aid of this identification information, those service technicians can be identified for whom a certificate 14 may be issued. This list can be stored for example in the form of a table made with the software program Microsoft Excel and be imported by the database 44 .
- a step S 1 the service technician makes a request with which he/she requests certification and applies for a desired user role or a user role preset with the aid of the identification data.
- the user role corresponds to the user rights assigned to a user group if the service technician is to become a member of the group. Generally, the user role corresponds to the user rights assigned to the respective user (service technician).
- the database 44 creates a separate data record for each list entry of the imported list, i.e. for each user to be registered.
- the frontend 42 makes a request to the database 44 , the data record for the service technician is requested and read out from the database.
- the authenticity of the service technician is, for example, determined by asking for an authentication code such as his/her date of birth, in a step S 1 . 1 . 1 . Further, the rights assigned to the service technician are activated in a step S 1 . 1 . 2 . Then, a verification code (vc) is created by the frontend 42 . This verification code is entered in the data record of the service technician in the database 44 .
- the verification code can, for example, be a cryptographic value which is formed on the basis of the data record of the service technician.
- the data record and/or the amended data of the data record are written into the database 44 . In a step S 1 .
- the verification code is forwarded to the service technician. This can be done, for example, via phone or via data transfer, in particular via e-mail. Alternatively, the verification code can also be sent by mail. This verification code is required at a later point in time for the further authentication of the user, in particular to request one or more certificates at a later point in time.
- the service technician notes down the verification code or, respectively, stores it for further disposal.
- a certification client application program 48 is, for example, executed on a desktop PC or a notebook computer, with the aid of which a certificate is requested at a certification server 46 .
- the client application program can, for example, be transferred via a network, such as an Intranet or the Internet, to the desktop computer or notebook computer, with the aid of which the certificate is requested.
- the client application program is executed on this computer. If necessary, the client application program is installed on the computer before execution and is appropriately registered with the required components of the operating system.
- such a client application program has the following functions:
- the client application program can also be a browser-based and/or platform-independent Java application.
- the certification server 46 is connected to the database 44 via a data connection.
- the certification server 46 and the database 44 can also be provided with the aid of one single data processing system by different software applications.
- a key pair for the service technician is generated by the client application program.
- the client application program 48 creates a certification request in a step A 2 .
- a removable storage medium preferably an USB memory stick 12 of the service technician is connected to the data processing system which executes the certification client application program 48 .
- the certification client application program 48 reads out the serial number and preferably the manufacturer ID of the removable storage medium and integrates the same into the certification request. Further, the service technician determines a password which is likewise integrated into the certification request.
- This certification request is transferred in a step A 3 from the certification client application program 48 to the certification server 46 which loads the data record for the technician for whom the certificate is to be created.
- a certificate 14 is created by the certification server in accordance with the authorization information stored in the database 44 for this service technician.
- the certification server 46 creates an attribute certificate, the serial number, the manufacturer ID code of the USB memory stick, the password and/or biometric data of the service technician serving as attributes for creating the attribute certificate.
- the created attribute certificate determines the user rights of the service technician on a data processing system, such as on the data processing system which executes the client certification program 48 or on the data processing system of the money transaction device. Further, by the user rights, the authorization for starting and executing certain application programs and/or safety-relevant functions can be determined, as already explained in detail in connection with FIG. 1 .
- the certification request also comprises the verification code which has previously been transmitted to the technician, as described in connection with FIG. 2 .
- this verification code can be transmitted in a separate communication between the certification client application program 48 and the certification server 46 .
- a note is made in the data record of the service technician in the database 44 that a corresponding certificate has been created.
- the entire data record of the service technician is newly written into the database 44 .
- a step A 3 . 3 the created certificate is transmitted from the certification server 46 to the certification client application program 48 .
- the certificate is written by the certification client application program 48 into a storage area of the USB memory stick 12 which is connected to a USB interface of the data processing system that executes the certification client application program 48 .
- the attribute certificate preferably has an expiration date which is included in the certificate created in the step A 3 . 1 . 1 .
- the server After creating the certificate, information on the applicant, i.e. the service technician, permitted user rights or user roles, the certificate itself, the serial number of the USB memory stick 12 and/or the current status of the certificate are stored in the database 44 .
- the status can, for example, be “requested”, “issued” or “withdrawn”.
- Both the certification client application 48 and the certification server application 46 can have graphical user interfaces.
- the server further has the following functions:
- At least the public key of the key pair generated in the step A 1 is transferred to the certification server 42 .
- the transferred key itself can be assigned to the user or can be stored in a key storage of the database 44 or in a storage area of the certification server 46 .
- the service and operating application program 26 of the data processing system 18 can provide functions which can only be executed when a user is authenticated to whom user rights required for this, i.e. a specific user role, is assigned.
- the removable storage medium can preferably also be used in order to fetch the log and trace data created by the data processing system 18 automatically as a so-called packet. As a result thereof, it can be guaranteed that all necessary log and trace data have been copied onto the removable storage medium for evaluation purposes.
- the authorization for copying and the copy operation itself can automatically be checked and initiated with the aid of the certificate stored on the removable storage medium as well as the identification information of the removable storage medium.
- write and read accesses to the removable storage medium are only allowed when a valid certificate is stored on the removable storage medium which certificate authenticates a user having such a write and read authorization.
- a valid certificate is stored on the removable storage medium which certificate authenticates a user having such a write and read authorization.
- another write and read possibility to and from the removable storage media cannot be allowed.
- program data of service and application programs can be stored on the removable storage medium, which data can preferably only be executed by the data processing system 18 when a valid certificate is stored on the removable storage medium, which together with the identification information of the removable storage medium confirms an authorization for these write and read accesses.
- data are to be stored on the removable storage medium, these are preferably compressed and/or stored in a protected data file.
- the data are stored in an encrypted form with the aid of a public key of an RSA key pair.
- a serial number of a money transaction device in which the data processing system 18 is located can be included.
- the data processing system 18 can in particular be a suitable personal computer and/or a suitable control unit.
- the database 44 is preferably an SQL database in which the name, address, company, department, phone number, e-mail address, serial number of the removable storage medium, assigned certificates, validity of the certificates, contact person, date and status are stored for each of the users to be certified and/or certified users.
- the history of individual data is likewise acquired so that changes can also be reconstructed at a later point in time.
- the database 44 and/or the certification server 46 generates a piece of information, in particular the database 44 and/or the certification server 46 automatically creates an e-mail:
Abstract
Description
-
- generation of an RSA key pair
- personalization of a removable storage medium
- a further function for post-personalization
- change of password
-
- administration of a key storage and at least one route certificate
- administration of users
- processing of certification requests
- logging of certification processes in the
database 44
-
- to the certificate authority on incoming requests;
- to the applicant after activation of the request inviting him/her to fetch the certificates;
- to the applicant prior to the expiration of individual certificates as a reference to request an extension and/or a new certificate, and
- to the applicant when new and/or extended certificates are available.
Claims (21)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/951,460 USRE48324E1 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
Applications Claiming Priority (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE102007019541A DE102007019541A1 (en) | 2007-04-25 | 2007-04-25 | Method and system for authenticating a user |
DE102007019541 | 2007-04-25 | ||
PCT/EP2008/054999 WO2008132129A1 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
US12/596,073 US9311470B2 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
US15/951,460 USRE48324E1 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
Publications (1)
Publication Number | Publication Date |
---|---|
USRE48324E1 true USRE48324E1 (en) | 2020-11-24 |
Family
ID=39645468
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/596,073 Ceased US9311470B2 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
US15/951,460 Active 2030-08-11 USRE48324E1 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US12/596,073 Ceased US9311470B2 (en) | 2007-04-25 | 2008-04-24 | Method and system for authenticating a user |
Country Status (5)
Country | Link |
---|---|
US (2) | US9311470B2 (en) |
EP (2) | EP2492839B1 (en) |
CN (1) | CN101669125A (en) |
DE (1) | DE102007019541A1 (en) |
WO (1) | WO2008132129A1 (en) |
Families Citing this family (23)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2007041834A1 (en) | 2005-10-07 | 2007-04-19 | Memory Experts International Inc. | Method and apparatus for secure credential entry without physical entry |
KR20090047917A (en) * | 2007-11-09 | 2009-05-13 | 삼성전자주식회사 | Terminal and method for accessing external memory |
US20100180207A1 (en) * | 2009-01-15 | 2010-07-15 | Macguire Sean Michael | System and method for managing and fulfilling celebrity memorabilia requests remotely |
WO2010083593A1 (en) * | 2009-01-21 | 2010-07-29 | Memory Experts International Inc. | Removable memory storage device with multiple authentication processes |
DE102009043091A1 (en) | 2009-09-25 | 2011-03-31 | Wincor Nixdorf International Gmbh | Device for handling notes of value |
DE102009043093A1 (en) | 2009-09-25 | 2011-03-31 | Wincor Nixdorf International Gmbh | Device for handling bank notes and cashbox for receiving banknotes |
DE102009043090A1 (en) | 2009-09-25 | 2011-03-31 | Wincor Nixdorf International Gmbh | Device for handling notes of value |
DE102010000482A1 (en) | 2010-02-19 | 2011-08-25 | WINCOR NIXDORF International GmbH, 33106 | Method and procedure for entering PINs with consistent software stack on ATMs |
CN101887608B (en) * | 2010-06-29 | 2014-12-10 | 中兴通讯股份有限公司 | Rechargeable card manufacturing method and device in demand of authentication of card manufacturing permissions |
CN103136454B (en) * | 2011-11-25 | 2016-01-20 | 北京泛华恒兴科技有限公司 | Encryption device and encryption method |
DE102011056191A1 (en) | 2011-12-08 | 2013-06-13 | Wincor Nixdorf International Gmbh | Device for protecting security tokens against malware |
CN102932762B (en) * | 2012-09-20 | 2015-03-25 | 无锡华御信息技术有限公司 | Remote centralized management control encryption system and method for mobile storage equipment based on global system for mobile communication (GSM) |
CN103106357B (en) * | 2012-11-12 | 2015-09-30 | 成都锦瑞投资有限公司 | Based on property system of real name authentication and authorization system and the method for CFCA Valuation Standard |
DE102013101834A1 (en) * | 2013-02-25 | 2014-08-28 | Bundesdruckerei Gmbh | Attribute network entity for providing personal attributes for the creation of digital attribute certificates |
US10489612B2 (en) * | 2013-04-29 | 2019-11-26 | Nxp Usa, Inc. | Memory controller to verify authenticity of data |
CN103747010B (en) * | 2014-01-22 | 2017-07-28 | 北京奇立软件技术有限公司 | A kind of method, system and device by mobile terminal control PC |
CN103761802A (en) * | 2014-01-24 | 2014-04-30 | 黄杰 | Mobile storage payment identification system |
CN104376263B (en) * | 2014-12-09 | 2018-02-16 | 北京奇虎科技有限公司 | The method and apparatus that application behavior intercepts |
CN105354478A (en) * | 2015-10-29 | 2016-02-24 | 北京海泰方圆科技股份有限公司 | Method for authorizing access to USBKey |
CN105426742B (en) * | 2015-11-30 | 2019-01-01 | 广东小天才科技有限公司 | Mobile terminal connects computer method and device |
US10642988B2 (en) * | 2016-08-04 | 2020-05-05 | Honeywell International Inc. | Removable media protected data transfer in a cyber-protected system |
EP3340095B1 (en) * | 2016-12-23 | 2020-07-08 | Löwenstein Medical Technology S.A. | Ventilation system and method |
US11323561B2 (en) * | 2020-09-25 | 2022-05-03 | Mitel Networks (International) Limited | Communication system for mitigating incoming spoofed callers using social media |
Citations (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20020053022A1 (en) * | 2000-10-30 | 2002-05-02 | Ivi Checkmate Corp. | Security arrangement for exchange of encrypted information |
US20020118099A1 (en) * | 2000-12-25 | 2002-08-29 | Hiroyuki Oda | Information processing apparatus and data communication method |
US20040044535A1 (en) * | 2002-09-03 | 2004-03-04 | Conner Erin L. | Systems and methods for a digital information automated teller machine |
US20040059916A1 (en) | 2002-09-11 | 2004-03-25 | Nagamasa Mizushima | Memory card |
US20040064708A1 (en) | 2002-09-30 | 2004-04-01 | Compaq Information Technologies Group, L.P. | Zero administrative interventions accounts |
US20050228998A1 (en) * | 2004-04-02 | 2005-10-13 | Microsoft Corporation | Public key infrastructure scalability certificate revocation status validation |
US6968459B1 (en) | 1999-12-15 | 2005-11-22 | Imation Corp. | Computing environment having secure storage device |
US20050268098A1 (en) * | 2004-05-31 | 2005-12-01 | Samsung Electronics Co., Ltd. | Method and apparatus for transmitting rights object information between device and portable storage |
US20060005011A1 (en) * | 2004-02-27 | 2006-01-05 | International Business Machines Corporation | System and method for authentication of a hardware token |
US20060234797A1 (en) | 2005-04-13 | 2006-10-19 | Microsoft Corporation | Hard drive authentication |
US20060282662A1 (en) * | 2005-06-13 | 2006-12-14 | Iamsecureonline, Inc. | Proxy authentication network |
US20070067620A1 (en) * | 2005-09-06 | 2007-03-22 | Ironkey, Inc. | Systems and methods for third-party authentication |
US20070150738A1 (en) * | 2005-12-28 | 2007-06-28 | Brother Kogyo Kabushiki Kaisha | Information processing apparatus |
US20070234044A1 (en) * | 2006-03-31 | 2007-10-04 | Brother Kogyo Kabushiki Kaisha | Program generating device and medium for the same |
US20070250918A1 (en) * | 2004-06-21 | 2007-10-25 | Ehsan Aboual Chamat | Authentication System and Security Device |
US20070266443A1 (en) * | 2006-05-12 | 2007-11-15 | Hitachi Global Storage Technologies Netherlands B.V. | Certified HDD with network validation |
US7861077B1 (en) * | 2005-10-07 | 2010-12-28 | Multiple Shift Key, Inc. | Secure authentication and transaction system and method |
US8052048B1 (en) * | 2002-12-26 | 2011-11-08 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Automated banking machine that operates responsive to data bearing records |
-
2007
- 2007-04-25 DE DE102007019541A patent/DE102007019541A1/en not_active Ceased
-
2008
- 2008-04-24 US US12/596,073 patent/US9311470B2/en not_active Ceased
- 2008-04-24 CN CN200880013691A patent/CN101669125A/en active Pending
- 2008-04-24 EP EP12164453.8A patent/EP2492839B1/en active Active
- 2008-04-24 WO PCT/EP2008/054999 patent/WO2008132129A1/en active Application Filing
- 2008-04-24 US US15/951,460 patent/USRE48324E1/en active Active
- 2008-04-24 EP EP08749706.1A patent/EP2140391B1/en active Active
Patent Citations (20)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6968459B1 (en) | 1999-12-15 | 2005-11-22 | Imation Corp. | Computing environment having secure storage device |
US20020053022A1 (en) * | 2000-10-30 | 2002-05-02 | Ivi Checkmate Corp. | Security arrangement for exchange of encrypted information |
US20020118099A1 (en) * | 2000-12-25 | 2002-08-29 | Hiroyuki Oda | Information processing apparatus and data communication method |
US20040044535A1 (en) * | 2002-09-03 | 2004-03-04 | Conner Erin L. | Systems and methods for a digital information automated teller machine |
US20040059916A1 (en) | 2002-09-11 | 2004-03-25 | Nagamasa Mizushima | Memory card |
US20040064708A1 (en) | 2002-09-30 | 2004-04-01 | Compaq Information Technologies Group, L.P. | Zero administrative interventions accounts |
US8052048B1 (en) * | 2002-12-26 | 2011-11-08 | Diebold Self-Service Systems Division Of Diebold, Incorporated | Automated banking machine that operates responsive to data bearing records |
US20060005011A1 (en) * | 2004-02-27 | 2006-01-05 | International Business Machines Corporation | System and method for authentication of a hardware token |
US20050228998A1 (en) * | 2004-04-02 | 2005-10-13 | Microsoft Corporation | Public key infrastructure scalability certificate revocation status validation |
US20050268098A1 (en) * | 2004-05-31 | 2005-12-01 | Samsung Electronics Co., Ltd. | Method and apparatus for transmitting rights object information between device and portable storage |
US20070250918A1 (en) * | 2004-06-21 | 2007-10-25 | Ehsan Aboual Chamat | Authentication System and Security Device |
US20060234797A1 (en) | 2005-04-13 | 2006-10-19 | Microsoft Corporation | Hard drive authentication |
US7758422B2 (en) * | 2005-04-13 | 2010-07-20 | Microsoft Corporation | Hard drive authentication |
US20060282662A1 (en) * | 2005-06-13 | 2006-12-14 | Iamsecureonline, Inc. | Proxy authentication network |
US20070067620A1 (en) * | 2005-09-06 | 2007-03-22 | Ironkey, Inc. | Systems and methods for third-party authentication |
US7861077B1 (en) * | 2005-10-07 | 2010-12-28 | Multiple Shift Key, Inc. | Secure authentication and transaction system and method |
US20070150738A1 (en) * | 2005-12-28 | 2007-06-28 | Brother Kogyo Kabushiki Kaisha | Information processing apparatus |
US8010785B2 (en) * | 2005-12-28 | 2011-08-30 | Brother Kogyo Kabushiki Kaisha | Information processing apparatus |
US20070234044A1 (en) * | 2006-03-31 | 2007-10-04 | Brother Kogyo Kabushiki Kaisha | Program generating device and medium for the same |
US20070266443A1 (en) * | 2006-05-12 | 2007-11-15 | Hitachi Global Storage Technologies Netherlands B.V. | Certified HDD with network validation |
Non-Patent Citations (8)
Title |
---|
"USB IMPLEMENTERS FORUM", 30 September 1999, XX, XX, article USB IMPLEMENTERS FORUM: "Universal Serial Bus Mass Storage Class", pages: 1 - 22, XP002489594 |
"Information technology—Open systems Interconnecton—The Directory: Public-key and attribute certificate frameworks; X.509 (Aug. 2005)", ITU-T Standard in Force (I), International Telecomunication Union, Geneva, CH, No. X.509 (Aug. 2005), Aug. 29, 2005, XP017405086, p. 62-p. 67. |
A. Rickey et al., "Universal Serial Bus Mass Storage Class", Bulk-Only Transport, USB Device Class Definition for Mass Storage Devices, USB Implementers Forum, 1998, pp. 1-22. |
Ball E et al: "Role-based access control with X.509 attribute certificates", IEEE Internet Computing, IEEE Service Center, New York, NY, US, vol. 7, No. 2, Mar. 1, 2003, pp. 62-69, XP011095972, ISSN: 1089-7801, p. 63-p. 66. |
BALL E., CHADWICK D.W., OTENKO A.: "Role-based access control with X.509 attribute certificates", IEEE INTERNET COMPUTING., INSTITUTE OF ELECTRICAL AND ELECTRONICS ENGINEERS, US, vol. 7, no. 2, 1 March 2003 (2003-03-01), US, pages 62 - 69, XP011095972, ISSN: 1089-7801, DOI: 10.1109/MIC.2003.1189190 |
D. Chadwick et al., "Role-Based Access Control With X.509 Attribute Certificates", University of Salford, IEEE Computer Society, Mar. 2003, pp. 62-69. |
International Telecommunication Union, "Series X: Data Networks, Open System Communications and Security", Information Technology—Open Systems Interconnection—The Directory: Public-key and Attribute Certificate Frameworks, Aug. 2005, pp. 1-80. |
USB Implementers Forum: "Universal Serial Bus Mass Storage Class", Sep. 30, 1999, Sep. 30, 1999 (Sep. 30, 1999), XP002489594, p. 9-p. 10. |
Also Published As
Publication number | Publication date |
---|---|
EP2492839A1 (en) | 2012-08-29 |
EP2140391B1 (en) | 2016-02-17 |
DE102007019541A1 (en) | 2008-10-30 |
WO2008132129A1 (en) | 2008-11-06 |
EP2492839B1 (en) | 2021-03-31 |
EP2140391A1 (en) | 2010-01-06 |
CN101669125A (en) | 2010-03-10 |
US9311470B2 (en) | 2016-04-12 |
US20100146264A1 (en) | 2010-06-10 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
USRE48324E1 (en) | Method and system for authenticating a user | |
JP4900392B2 (en) | Information processing apparatus and information management method | |
US7844832B2 (en) | System and method for data source authentication and protection system using biometrics for openly exchanged computer files | |
US20050177750A1 (en) | System and method for authentication of users and communications received from computer systems | |
EP1719283B1 (en) | Method and apparatus for authentication of users and communications received from computer systems | |
WO2010045236A1 (en) | Smartcards for secure transaction systems | |
WO2005071558A1 (en) | Remote access system, gateway, client device, program, and storage medium | |
TW200539644A (en) | A method, a hardware token, a computer and a program for authentication | |
WO2001041352A1 (en) | Method and apparatus for supporting authorities in a public key infrastructure | |
JP5360192B2 (en) | Personal authentication system and personal authentication method | |
MX2012000077A (en) | Method for remotely controlling and monitoring the data produced on desktop on desktop software. | |
TW200821992A (en) | Personal verifying system, method, procedure and host device thereof | |
EP1542135B1 (en) | A method which is able to centralize the administration of the user registered information across networks | |
CA2550566C (en) | Process for releasing the access to a computer system or to a program | |
JP2002312326A (en) | Multiple authentication method using electronic device with usb interface | |
JP2008123461A (en) | Identity verification device, identity verification system and identity verification method | |
JP2005346120A (en) | Network multi-access method and electronic device having biological information authentication function for network multi-access | |
JPH1165443A (en) | Management element system for individual authentication information | |
JP2007179214A (en) | Network service anonymous billing system | |
JP2000105747A (en) | Screen control method for single log-in system | |
KR20030091866A (en) | Authentication Method And Authentication System Using Information About Computer System's State | |
KR100646091B1 (en) | Method and system for issuing certified documents based on mobile communication and mobile terminal for the same | |
KR102048025B1 (en) | System and method for secure and convenient approval of document based on authentication protocol | |
JP6975621B2 (en) | Information processing equipment, information processing methods and programs | |
JP2006040076A (en) | Data management method |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
FEPP | Fee payment procedure |
Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
AS | Assignment |
Owner name: WINCOR NIXDORF INTERNATIONAL GMBH, GERMANY Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BLUME, MARCO;NOLTE, MICHAEL;SIGNING DATES FROM 20090703 TO 20090706;REEL/FRAME:045633/0367 |
|
AS | Assignment |
Owner name: GLAS AMERICAS LLC, AS COLLATERAL AGENT, NEW JERSEY Free format text: PATENT SECURITY AGREEMENT - 2026 NOTES;ASSIGNORS:WINCOR NIXDORF INTERNATIONAL GMBH;DIEBOLD NIXDORF SYSTEMS GMBH;REEL/FRAME:062511/0246 Effective date: 20230119 Owner name: GLAS AMERICAS LLC, AS COLLATERAL AGENT, NEW JERSEY Free format text: PATENT SECURITY AGREEMENT - TERM LOAN;ASSIGNORS:WINCOR NIXDORF INTERNATIONAL GMBH;DIEBOLD NIXDORF SYSTEMS GMBH;REEL/FRAME:062511/0172 Effective date: 20230119 Owner name: GLAS AMERICAS LLC, AS COLLATERAL AGENT, NEW JERSEY Free format text: PATENT SECURITY AGREEMENT - SUPERPRIORITY;ASSIGNORS:WINCOR NIXDORF INTERNATIONAL GMBH;DIEBOLD NIXDORF SYSTEMS GMBH;REEL/FRAME:062511/0095 Effective date: 20230119 |
|
AS | Assignment |
Owner name: JPMORGAN CHASE BANK, N.A.. AS COLLATERAL AGENT, ILLINOIS Free format text: SECURITY INTEREST;ASSIGNORS:WINCOR NIXDORF INTERNATIONAL GMBH;DIEBOLD NIXDORF SYSTEMS GMBH;REEL/FRAME:062525/0409 Effective date: 20230125 |
|
AS | Assignment |
Owner name: DIEBOLD NIXDORF SYSTEMS GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:063908/0001 Effective date: 20230605 Owner name: WINCOR NIXDORF INTERNATIONAL GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS;ASSIGNOR:JPMORGAN CHASE BANK, N.A.;REEL/FRAME:063908/0001 Effective date: 20230605 |
|
AS | Assignment |
Owner name: DIEBOLD NIXDORF SYSTEMS GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (R/F 062511/0095);ASSIGNOR:GLAS AMERICAS LLC;REEL/FRAME:063988/0296 Effective date: 20230605 Owner name: WINCOR NIXDORF INTERNATIONAL GMBH, OHIO Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (R/F 062511/0095);ASSIGNOR:GLAS AMERICAS LLC;REEL/FRAME:063988/0296 Effective date: 20230605 |
|
AS | Assignment |
Owner name: DIEBOLD NIXDORF SYSTEMS GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (2026 NOTES REEL/FRAME 062511/0246);ASSIGNOR:GLAS AMERICAS LLC, AS COLLATERAL AGENT;REEL/FRAME:064642/0462 Effective date: 20230811 Owner name: WINCOR NIXDORF INTERNATIONAL GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (2026 NOTES REEL/FRAME 062511/0246);ASSIGNOR:GLAS AMERICAS LLC, AS COLLATERAL AGENT;REEL/FRAME:064642/0462 Effective date: 20230811 Owner name: DIEBOLD NIXDORF SYSTEMS GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (NEW TERM LOAN REEL/FRAME 062511/0172);ASSIGNOR:GLAS AMERICAS LLC, AS COLLATERAL AGENT;REEL/FRAME:064642/0354 Effective date: 20230811 Owner name: WINCOR NIXDORF INTERNATIONAL GMBH, GERMANY Free format text: TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS (NEW TERM LOAN REEL/FRAME 062511/0172);ASSIGNOR:GLAS AMERICAS LLC, AS COLLATERAL AGENT;REEL/FRAME:064642/0354 Effective date: 20230811 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 8TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1552); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 8 |