Apparatus and method for security object enhancement and management
View Patent ↗An apparatus and method for security object enhancement and management are provided. The apparatus and method make use of security objects in which security object data is encapsulated with security object attributes and methods defining the way in which the security object may be used. Because the security object is an encapsulated object, the security object may operate on itself to perform security object management operations. Furthermore, because the security object need not be linked to the items requiring security object protection a priori, the security object may be defined in any manner deemed appropriate by the user. As a result, users of the security objects are given greater freedom in defining the security object, the security object content type, and the way in which the security object may be used.
1. A computer-implemented method of generating a security object for use in authenticating a user to access an item, comprising computer-implemented steps of:
receiving security object data;
setting one or more attributes associated with the security object data, wherein the one or more attributes include a user designation of a security object type; and
encapsulating, within the security object, the security object data and the one or more attributes with one or more methods, wherein the security object is used to authenticate the user by validating an identity of the user using at least one of the one or more methods encapsulated within the security object.
2. The computer-implemented method of claim 1 , further comprising obtaining the one or more methods from a security object class.
3. The computer-implemented method of claim 1 , wherein the one or more methods operate on the security object data and one or more attributes.
4. The computer-implemented method of claim 1 , wherein the one or more methods operate on the security object data and input data provided by the user and pa sued to the security object to authenticate the user to access the item.
5. The computer-implemented method of claim 1 , wherein the security object data is one of textual data, audio data, graphical data, and biometric data.
6. The computer-implemented method of claim 1 , wherein the security object type is one of a single use security object, a group security object, a timed security object, a concurrent multi-user security object, a security object throttle, a translated password security object, a security object augmented by a at least one of a CPU identifier, a CPU speed and a system configuration, a Wave file or MP3 security object, an image file security object, a security object augmented by a location of the user, a security object augmented by a current window and/or pointer position, a security object augmented by an IP address, a security object augmented by a screen background characteristic, a security object augmented by a personal identification number one of a speed of a card swipe and a number of times of a card swipe, a security object augmented by a mobile telephone ring or mobile telephone identification number, a security object augmented by a caller identification of the user, and a security object augmented by an environmental condition.
7. The computer-implemented method of claim 1 , further comprising:
providing the security object to a security system, wherein the security system is a hardware data processing system that stores the security object and associates the security object with a user identification so tat the security object may be retrieved when the user enters their identification in order to gain access to the item.
8. The computer-implemented method of claim 7 , wherein the security system invokes the security object in response to a request for access to the item by the user.
9. The computer-implemented method of claim 1 , storing the security object data on an electronic medium in a device with data transmission capability.
10. The computer-implemented method of claim 9 , wherein the device is a portable device.
11. The computer-implemented method of claim 9 , wherein the portable device is one of a keychain, a portable MP3 player, a mobile telephone, a pager, en electronic wrist watch, a remote control, a garage door transmitter, a keyless entry device for a vehicle, a smartcard, and a magnetic stripe card.
12. The computer-implemented method of claim 7 , wherein the security object contains a partial set of methods and wherein the security system contains a complementary sot of methods.
13. The computer-implemented method of claim 1 , wherein the security object requires hardware assistance for authentication of input data passed to the security object.
14. The computer-implemented method of claim 1 , wherein the security object data is received from a client apparatus.
15. The computer-implemented method of claim 1 , wherein the security object data is received from a user via a user interface.
16. The computer-implemented method of claim 15 , wherein the user interface is a security object foundry application resident on a computing device.
17. The computer-implemented method of claim 15 , wherein the user interface is an interface transmitted from a server apparatus to a client apparatus.
18. A computer program product in a computer readable medium for generating a security object for use in authenticating a user to access an item, comprising:
first instructions for receiving security object data;
second instructions for setting one or more attributes associated with the security object data, wherein the one or more attributes include a user designation of a security object type; and
third instructions for encapsulating, within the security object, the security object data and the one or more attributes with one or more methods, wherein the security object is used to authenticate the user by validating an identity of the user using at least one of the one or more methods encapsulated within the security object.
19. The computer program product of claim 18 , fourth instructions for obtaining the one or more methods from a security object class.
20. The computer program product of claim 18 , wherein the one or more methods operate on the security object data and one or more attributes.
21. The computer program product of claim 18 , wherein the one or more methods operate on the security object data and input data provided by the user and passed to the security object to authenticate the user to access the item.
22. The computer program product of claim 18 , wherein the security object data is one of textual data, audio data, graphical data, and biometric data.
23. The computer program product of claim 18 , wherein the security object type is one of a single use security object, a group security object a timed security object, a concurrent multi-user security object, a security object throttle, a translated password security object, a security object augmented by a at least one of a CPU identifier, a CPU speed and a system configuration, a Wave file or MP3 security object, an image file security object, a security object augmented by a location of the user, a security object augmented by a current window and/or pointer position, a security object augmented by an IP address, a security object augmented by a screen background characteristic, a security object augmented by a personal identification number and one of a speed of a card swipe and a number of times ate card swipe, a security object augmented by a mobile telephone ring or mobile telephone identification number, a security object augmented by a caller identification of the user, and a security object augmented by an environmental condition.
24. The computer program product of claim 18 , further comprising:
fourth instructions for providing the security object to a security system, wherein the security system is a hardware data processing system that stores the security object and associates the security object with a user identification so that the security object may be retrieved when the user enters their identification in order to gain access to the item.
25. The computer program product of claim 24 , wherein the security system invokes the security object in response to a request for access to the item by the user.
26. The computer program product of claim 18 , further comprising fourth instructions for storing the security object data on an electronic medium in a device with data transmission capability.
27. The computer program product of claim 18 , further comprising fourth instructions for staring the security object data in a portable device.
28. The computer program product of claim 27 , wherein the portable device is one of a keychain, a portable MP3 player, a mobile telephone, a pager, an electronic wrist watch, a remote control, a garage door transmitter, a keylees entry device for a vehicle, a smartcard, and a magnetic stripe card.
29. The computer program product of claim 24 , wherein the security object contains a partial set of methods and wherein the security system contains a complementary set of methods.
30. The computer program product of claim 18 , wherein the security object requires hardware assistance for authentication of input data passed to the security object.
31. The computer program product of claim 18 , wherein the security object data is received from a client apparatus.
32. The computer program product of claim 18 , wherein the security object data is received from a user via a user interface.
33. The computer program product of claim 32 , wherein the user interface is a security object foundry application resident on a computing device.
34. The computer program product of claim 32 , wherein the user interface is an interface transmitted from a server apparatus to a client apparatus.
35. The apparatus of claim 18 , further comprising means for storing the security object data on an electronic medium in a device, with data transmission capability.
36. The apparatus of claim 35 , wherein the device is a portable device.
37. The apparatus of claim 36 , wherein the portable device is one of a keychain, a portable MP3 player, a mobile telephone, a pager, an electronic wrist watch, a remote control, a garage door transmitter, a keyless entry device for a vehicle, a smartcard, and a magnetic stripe card.
38. An apparatus for generating a security object for use in authenticating a user to access an item, comprising:
means for receiving security object data;
means for setting one or more attributes associated with the security object data, wherein the one or more attributes include a user designation of a security object type; and
means for encapsulating, within the security object, the security object data and the one or more attributes with one or more methods, wherein the security object is used to authenticate the user by validating an identity of the user using at least one of the one or more methods encapsulated within the security object.
39. The apparatus of claim 38 , means for obtaining one or more methods from a security object class.
40. The apparatus of claim 38 , wherein the one or more methods operate on the security object data and one or more attributes.
41. The apparatus of claim 38 , wherein to one or more methods operate on the security object data and input data provided by the user and passed to the security object to authenticate the user to access the item.
42. The apparatus of claim 38 , wherein the security object data is one of textual data, audio data, graphical data, and biometric data.
43. The apparatus of claim 38 , wherein the security object type is one of a single use security object, a group security object, a timed security object, a concurrent multi-user security object a security object throttle, a translated password security object, a security object augmented by a at least one of a CPU identifier, a CPU speed and a system configuration, a Wave file or MP3 security object an image file security object, a security object augmented by a location of the user, a security object augmented by a current window and/or pointer position, a security object augmented by an IP address, a security object augmented by a screen background characteristic, a security object augmented by a personal identification number and one of a speed of card swipe and a number of times of a card swipe, a security object augmented by a mobile telephone ring or mobile telephone identification number, a security object augmented by a caller identification of the user, and a security object augmented by an environmental condition.
44. The apparatus of claim 38 , further comprising:
means for providing the security object to a security system, wherein the security system is a hardware data processing system tat stores the security object and associates the security object with a user identification so that the security object may be retrieved when the user enters their identification in order to gain access to the item.
45. The apparatus of claim 44 , wherein the security system invokes the security object in response to a request for access to the item by the user.
46. The apparatus of claim 44 , wherein the security object contains a partial set of methods end wherein the security system contains a complementary set of methods.
47. The apparatus of claim 38 , wherein the security object requires hardware assistance for authentication of input data passed to the security object.
48. The apparatus of claim 38 , wherein the security object data is received from a client apparatus.
49. The apparatus of claim 38 , wherein the security object data is received from a user via a user interface.
50. The apparatus of claim 49 , wherein the user interface is a security object foundry application resident on a computing device.
51. The apparatus of claim 49 , wherein the user interface is an interface transmitted from a server apparatus to a client apparatus.