초록 ▼

A client workstation provides a login address as an anonymous ftp (file transfer protocol) request, and a password as a user's e-mail address. A destination server compares the user's e-mail address provided as a password to a list of authorized users' addresses. If the user's e-mail address is loca

A client workstation provides a login address as an anonymous ftp (file transfer protocol) request, and a password as a user's e-mail address. A destination server compares the user's e-mail address provided as a password to a list of authorized users' addresses. If the user's e-mail address is located on the list of authorized users' addresses maintained by the destination server, the destination server generates a random number (X), and encrypts the random number in an ASCII representation using encryption techniques provided by the Internet Privacy Enhanced Mail (PEM) procedures. The encrypted random number is stored in a file as the user's anonymous directory. The server further establishes the encrypted random number as one-time password for the user. The client workstation initiates an ftp request to obtain the encrypted PEM random number as a file transfer (ftp) request from the destination server. The destination server then sends the PEM encrypted password random number, as an ftp file, over the Internet to the client workstation. The client workstation decrypts the PEM encrypted file utilizing the user's private RSA key, in accordance with established PEM decryption techniques. The client workstation then provides the destination server with the decrypted random number password, which is sent in the clear over the Internet, to login to the destination server. Upon receipt of the decrypted random number password, the destination server permits the user to login to the anonymous directory, thereby completing the user authentication procedure and accomplishing login.

대표청구항 ▼

[ I claim:] [1.] A method for authentication of a remote user of a computer system, comprising the steps of:receiving a user identification code of said remote user and determining if said user identification code is authorized;if said user identification code is authorized, generating a one time pa

[ I claim:] [1.] A method for authentication of a remote user of a computer system, comprising the steps of:receiving a user identification code of said remote user and determining if said user identification code is authorized;if said user identification code is authorized, generating a one time password, storing said one time password and encrypting said one time password to form an encrypted one time password;providing said encrypted one time password to said remote user;receiving from said remote user a decrypted one time password which is decrypted from said encrypted one time password, and comparing said decrypted one time password to said stored one time password, such that, if said received and stored one time passwords match, said remote user is authenticated.