Patent ID: 9590978
Date: 2017-03-07
CPC Classifications: G06F,H04L

Claim:
1. A method of verifying a password, entered via a keyboard, for a computing device prior to permitting access, comprising the steps of: providing a password device, in communication with the keyboard and the computing device, to receive one or more messages, receive keystroke information comprising a manifestation of the pressing of keys on the keyboard, create one or more messages and transmit the one or more message created; receiving in the password device a command message comprising a command for the password device to operate in a special mode and challenge-data having one or more corresponding challenge-responses; receiving keystroke information in the password device during the special mode; receiving in the password device a command to stop operating in the special mode; creating in the password device a message based on data comprising keystroke information and one of the challenge-responses to the challenge-data in the command message; transmitting the created message to the computing device; retrieving secret data from a stored secret data location within the password device; creating in the password device a message based on information comprising keystroke information, one of the challenge-responses to the challenge-data in the command message and the secret data retrieved from storage in the password device; receiving in the password device a message containing a public key; creating in the password device random data; encrypting in the password device the random data using the public key; transmitting from the password device the encrypted random data; manipulating in the password device the random data to produce a cryptographic key; and storing the cryptographic key in secret-data storage.