초록 ▼

Smart token technology, using a smart card, PCMCIA card or any other medium containing storage or processing capability is used to facilitate a variety of secure business transactions, including those which might occur over an unsecured network such as the Internet. Application programs can obtain a

Smart token technology, using a smart card, PCMCIA card or any other medium containing storage or processing capability is used to facilitate a variety of secure business transactions, including those which might occur over an unsecured network such as the Internet. Application programs can obtain a variety of smart token services using a common application programming interface. Applications of the smart token technology to electronic cash, banking, credit, computer and network access, software distribution, medical handling and issuance of credentials are presented.

대표청구항 ▼

[ What is claimed is:] [1.] A method of obtaining access to computer or network resources using a smart token, comprising:a. opening an application domain of a smart token used for access to a computer or a network;b. encrypting a password read from the application domain, so as to obtain an electro

[ What is claimed is:] [1.] A method of obtaining access to computer or network resources using a smart token, comprising:a. opening an application domain of a smart token used for access to a computer or a network;b. encrypting a password read from the application domain, so as to obtain an electronic password;c. sending a logon identification and the encrypted password to the computer or network for which access is desired; andd. verifying and validating as to whether the logon identification and the encrypted password are such that the access to the computer or network is permitted,wherein the step of sending a logon identification to the computer or network for which access is desired comprises:a. sending a user public key certificate stored on the smart token together with a user identification and a user random number to the computer or network;b. receiving from the computer or network the identity of the computer or network, a public key certificate of a target resource, a signed copy of the user random number and a second random number generated by the computer or network;c. verifying the signed copy of the user random number; andd. signing the second random number using the public key of the computer or network obtained from a certificate and returning the second random number with signature to the computer or network.