Granted Patent B2

US 8,875,282 · App. 12/413,837 · Granted Oct 28, 2014

Abstract

Claims (41)

1. A method of controlling access to a processing device comprising:

providing an access token with a machine readable identity embedded in a key;

reading the identity of the access token by the processing device;

when the identity is a valid identity, determining by the processing device an access level and a permission level including an authorized task associated with the identity and license dates providing an indication of an authorized access period;

obtaining an encrypted stored password from a key fob;

acquiring a password entered from a user; and

allowing the access level to the processing device according to the permission level by the processing device when a decrypted version of the encrypted stored password obtained from the key fob matches the password entered from the user, wherein there are two levels of permission, basic, which allows access to a sub-set of protected service software functionality and master, which allows access to all protected service software functionality defined at the time that a specific version of the service software is released.

2. A method according to claim 1 , wherein the permission level is held in the access token and read by the processing device.

3. A method according to claim 1 in which the permission level is stored in a remote location and accessed via a secure network.

4. A method according to claim 1 , which further comprises determining an authorized access time period for the access token and allowing access to the processing device only if the current time is within the authorized access period.

5. A method according to claim 1 , in which an attempt to access the processing device is an attempt to access the service software of the device.

6. A system for validating an attempt to access a processing device comprising:

a plurality of access tokens having a machine readable identity, the access tokens embedded in a key fob;

the at least one processing device comprising an access token reader arranged to read an identity of an access token,

wherein the processing device is arranged to read the machine readable identity from an access token, to validate the identity and obtain an encrypted stored password for a user from the key fob, and when the identity is a valid identity, to determine an access level and a permission level, including an authorized task, associated with the access level and license dates providing an indication of an authorized access period, and to allow the access level to the processing device according to the permission level when an entered password from the user matches a decrypted version of the encrypted stored password obtained from the key fob, wherein there are two levels of permission, basic, which allows access to a sub-set of protected service software functionality and master, which allows access to all protected service software functionality defined at the time that a specific version of the service software is released.

7. A system according to claim 6 , wherein the permission level is held in the access token and read by the processing device.

8. A system according to claim 6 in which the permission level is stored in a remote location and accessed via a secure network.

9. A system according to claim 6 which comprises a plurality of processing devices, which are geographically distributed.

10. A system according to claim 6 in which the access tokens are portable access tokens.

11. A system according to claim 6 in which the access tokens comprise an interface device arranged to allow the user to interact with the processing device.

12. A system according to claim 6 in which the processing device is a high-security device.

13. A system according to claim 6 which comprises a password validation means and requires a password to be entered to validate access.

14. A system according to claim 6 which comprises an authorized access time period validation means arranged to validate that the access token is within an authorized access time period.

15. A processing device arranged to validate attempts to access the processing device for maintenance by a user, the processing device comprising:

an access token reader arranged to read an identity from an access token, the access token embedded in a Universal Serial Bus (USB) device; and

an access level control means arranged to allow an access level to the processing device according to a permission level, including an authorized maintenance task to be performed by the user and license dates providing an indication of an authorized access period, associated with an identity;

wherein the access level control means is arranged to read the machine readable identity from an access token, send a request to a database for information associated with the identity and to receive the information from the database, and the access control means arranged to obtain an encrypted stored password for the user from the USB device and to decrypt the encrypted stored password, the access level control means further arranged to obtain an entered password from the user and when the entered password matches the decrypted password to determine the access level and the permission level associated with the identity, and to allow the access level to the processing device according to the permission level, wherein there are two levels of permission, basic, which allows access to a sub-set of protected service software functionality and master, which allows access to all protected service software functionality defined at the time that a specific version of the service software is released.

16. A processing device according to claim 15 , wherein the permission level is held in the access token and read by the processing device once the access token has been validated.

17. A processing device according to claim 15 in which the permission level is stored in a remote location and accessed via a secure network.

18. A processing device according to claim 15 which is a high-security device.

19. A processing device according to claim 18 which is an Automated Teller Machine.

20. A method of controlling maintenance access to a processing device comprising:

reading an identity within an access token by the processing device, the access token acquired from a Universal Serial Bus (USB) key fob;

sending a request for information associated with the identity to a database remote from the processing device via a secure network by the processing device, the information including a stored password, a license period and a permission level including an authorized software service maintenance task to be performed by a user and license dates providing an indication of an authorized access period;

receiving the information from the database by the processing device, including an encryption of the stored password;

obtaining an encrypted stored password for the user from the USB device;

decrypting the encrypted stored password to obtain a decrypted the password;

recording entry of entered password supplied by the user;

comparing the entered password to the decrypted password by the processing device;

determining whether a current date is within the license period by the processing device; and

allowing user access by the processing device to service software of the processing device according to the permission level when the entered password matches the decrypted password and the current date is within the license period, wherein there are two levels of permission, basic, which allows access to a sub-set of protected service software functionality and master which allows access to all protected service software functionality defined at the time that a specific version of the service software is released.

Assignments (9)