Importance

Loading Importance Indicators...

Abstract

A plurality of portable tokens are issued e.g. for authenticating instructions within an electronic banking network. Each token requires entry of a respective password in order to operate and becomes locked if a number of incorrect password entries are made. Each token also stores a respective cryptographic key and a random number generator. In order to unlock a locked token it outputs a random number and also encrypts that number under its respective key but does not output the result of the encryption. The random number is transmitted by the user to a central authority which stores the keys for all tokens. The authority encrypts that number under the respective key and returns the result of the encryption to the user of the token. The returned number is entered into the token and if it agrees with the result of the internal encryption the token is unlocked.

Loading the Abstract Image...

First Claim