초록 ▼

The invention provides a method and system for simultaneously authenticating a user using two or more factors, such as both a password and a physical token or both a password and biometric information. The user presents a physical token including a storage device to a processor and attempts to log i

The invention provides a method and system for simultaneously authenticating a user using two or more factors, such as both a password and a physical token or both a password and biometric information. The user presents a physical token including a storage device to a processor and attempts to log in using a first password; the processor includes a login service which receives the first password, accesses the storage device to transform the first password into a second password, and authenticates the second password using an operating system for the processor. The storage device includes encrypted information regarding the second password which can be relatively easily determined in response to the first password, but which cannot be relatively easily determined without the first password. The system or the storage device may also store information for biometric authentication of the user.

대표청구항 ▼

[ We claim:] [1.] A method for operating a processor to simultaneously authentic a user using a plurality of factors, said method including the steps ofexecuting an operating system on said processor;generating an authentication number N;generating a data block for a physical token;writing said data

[ We claim:] [1.] A method for operating a processor to simultaneously authentic a user using a plurality of factors, said method including the steps ofexecuting an operating system on said processor;generating an authentication number N;generating a data block for a physical token;writing said data block onto said physical token;generating an authentication fingerprint F responsive to said new data block;storing said authentication number N and said authentication fingerprint F in an authentication database;receiving a user name and associated first password Q, said first password Q being other than a password P associated with said user name by said operating system;receiving said physical token having said data block, said data block including encoded therein said password P and said authentication number N;determining in response to said data block, said authentication fingerprint F;authenticating said authentication fingerprint F;first recovering from said data block, in response to said first password Q, said authentication number N;second recovering from said data block, in response to said first password Q and said authentication number N, said password P; andauthentication said password P with said operating system.