Patent ID: 7010691
Filing Date: 2006-03-07
Classification: H04L

Abstract:
1. A system for authenticating a requesting entity for access to a controlled resource, comprising: (a) a device of the requesting entity, the device maintaining securely therein a private key of a public-private key pair and adapted to generate digital signatures of a message using the private key, the message comprising a unique identifier and a request by the requesting entity for access to the controlled resource; (b) an access authentication component having authority to allow or deny the request for access to the controlled resource, the access authentication component separate from the device but in electronic communication over a communications medium with the device for receipt of the digitally-signed message; and (c) at least one database containing information linked together, the information including: wherein, in response to receipt of the digitally-signed message, the access authentication component verifies that the message was digitally-signed using the private key maintained within the device by decrypting the digital signature using the public key obtained from the database, and if the digitally-signed message verifies, the access authentication component authenticates the requesting entity for access to the controlled resource as a function of (i) the security strength of the device and (ii) the predetermined authorization rights of the requesting entity.