Source: http://www.google.com/patents/US8220039?dq=6,957,233
Timestamp: 2014-11-22 10:49:37
Document Index: 691462865

Matched Legal Cases: ['Application No. 06', 'application No. 05855366', 'application No. 10006757', 'application No. 06786402', 'Application No. 06814655', 'application No. 10006757', 'Application No. 2008', 'art 1', 'art 2', 'Application No. 2008', 'Application No. 200680032990', 'Application No. 188631', 'Application No. 2006800089822', 'Application No. 200680008989', 'Application No. 200680009222', 'Application No. 200680032990', 'art 1', 'Application No. 06786402']

Patent US8220039 - Mass storage device with automated credentials loading - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Sign inAdvanced Patent SearchPatentsA portable mass storage device for use in two factor authentication systems and methods. A secure portable mass storage device protects content from being freely copied with security mechanisms and firmware. The security functionality also protects confidential user credentials and passwords, as well...http://www.google.com/patents/US8220039?utm_source=gb-gplus-sharePatent US8220039 - Mass storage device with automated credentials loadingAdvanced Patent SearchPublication numberUS8220039 B2Publication typeGrantApplication numberUS 12/714,228Publication dateJul 10, 2012Filing dateFeb 26, 2010Priority dateJul 8, 2005Also published asUS7743409, US7748031, US20070011724, US20070016941, US20100162377Publication number12714228, 714228, US 8220039 B2, US 8220039B2, US-B2-8220039, US8220039 B2, US8220039B2InventorsCarlos J. Gonzalez, Joerg Ferchau, Fabrice Jogand-CoulombOriginal AssigneeSandisk Technologies Inc.Export CitationBiBTeX, EndNote, RefManPatent Citations (108), Non-Patent Citations (238), Referenced by (7), Classifications (34), Legal Events (1) External Links: USPTO, USPTO Assignment, EspacenetMass storage device with automated credentials loadingUS 8220039 B2Abstract A portable mass storage device for use in two factor authentication systems and methods. A secure portable mass storage device protects content from being freely copied with security mechanisms and firmware. The security functionality also protects confidential user credentials and passwords, as well as algorithms and seeds needed for two factor authentication or asymmetric authentication methods. A client application residing in the mass storage device acts as both a password manager and an authentication manager that seamlessly performs the authentication procedures in the background while signing a user into various institutions of his choosing. A very high level of security is integrated into a mass storage device the user has for purposes other than two factor authentication, and the convenience of highly secure password management also comes in a convenient pocket sized package easy for the user to transport. This facilitates the acceptance of two factor authentication, and increases security for a wide variety of online transactions.
Patent CitationsCited PatentFiling datePublication dateApplicantTitleUS4549896Aug 27, 1984Oct 29, 1985Owens-Corning Fiberglas CorporationApparatus and method for removing gaseous inclusions from molten materialUS4590552Jun 30, 1982May 20, 1986Texas Instruments IncorporatedSecurity bit for designating the security status of information stored in a nonvolatile memoryUS4697072Aug 27, 1985Sep 29, 1987Casio Computer Co., Ltd.Identification card and authentication system thereforUS4713753Feb 21, 1985Dec 15, 1987Honeywell Inc.Secure data processing system architecture with format controlUS4780905Nov 26, 1984Oct 25, 1988Nightwatch, Inc.Computer data encryption systemUS4797853Nov 15, 1985Jan 10, 1989Unisys CorporationDirect memory access controller for improved system security, memory to memory transfers, and interrupt processingUS4907268Mar 15, 1989Mar 6, 1990Enigma Logic, Inc.Methods and apparatus for controlling access to information processed a multi-user-accessible digital computerUS5006823Oct 23, 1989Apr 9, 1991Thomson-CsfMicrowave phase shifter with 0 or π phase shiftUS5052040May 25, 1990Sep 24, 1991Micronyx, Inc.Multiple user stored data cryptographic labeling system and methodUS5065429Oct 14, 1990Nov 12, 1991Lang Gerald SMethod and apparatus for protecting material on storage mediaUS5129074Sep 20, 1989Jul 7, 1992Hitachi Vlsi Engineering CorporationData string storage device and method of storing and retrieving data stringsUS5235641Mar 12, 1991Aug 10, 1993Hitachi, Ltd.File encryption method and file cryptographic systemUS5237609Mar 26, 1990Aug 17, 1993Mitsubishi Denki Kabushiki KaishaPortable secure semiconductor memory deviceUS5268870Aug 6, 1990Dec 7, 1993Eliyahou HarariFlash EEPROM system and intelligent programming and erasing methods thereforUS5293424Oct 14, 1992Mar 8, 1994Bull Hn Information Systems Inc.Secure memory cardUS5311595Jun 7, 1990May 10, 1994Kommunedata I/SMethod of transferring data, between computer systems using electronic cardsUS5319765Nov 27, 1991Jun 7, 1994Mitsubishi Denki Kabushiki KaishaSemiconductor memory unit utilizing a security code generator for selectively inhibiting memory accessUS5327563Nov 13, 1992Jul 5, 1994Hewlett-PackardMethod for locking software files to a specific storage deviceUS5404485Mar 8, 1993Apr 4, 1995M-Systems Flash Disk Pioneers Ltd.Flash file systemUS5412717May 15, 1992May 2, 1995Fischer; Addison M.Computer system security method and apparatus having program authorization information data structuresUS5438575Nov 16, 1992Aug 1, 1995Ampex CorporationData storage system with stale data detector and method of operationUS5442704Jan 14, 1994Aug 15, 1995Bull Nh Information Systems Inc.Secure memory card with programmed controlled security access controlUS5455862Dec 2, 1993Oct 3, 1995Crest Industries, Inc.Apparatus and method for encrypting communications without exchanging an encryption keyUS5473692Sep 7, 1994Dec 5, 1995Intel CorporationRoving software license for a hardware agentUS5477039Dec 14, 1993Dec 19, 1995Gemplus Card InternationalMethod and device to increase the protection of a chip cardUS5509120Nov 30, 1993Apr 16, 1996International Business Machines CorporationMethod and system for detecting computer viruses during power on self testUS5530862Nov 18, 1992Jun 25, 1996Canon Kabushiki KaishaIn an interactive network board, method and apparatus for loading independently executable modules in promUS5596738Apr 12, 1995Jan 21, 1997Teac CorporationPeripheral device control system using changeable firmware in a single flash memoryUS5604801Feb 3, 1995Feb 18, 1997International Business Machines CorporationPublic key data communications system under control of a portable security deviceUS5606660Oct 21, 1994Feb 25, 1997Lexar Microsystems, Inc.Method and apparatus for combining controller firmware storage and controller logic in a mass storage systemUS5629513Mar 3, 1995May 13, 1997Gemplus Card InternationalMethod for the functioning of a chip card, and chip card in accordance therewithUS5684742Jun 12, 1996Nov 4, 1997International Business Machines CorporationDevice and method for the simplified generation of tools for the initialization and personalization of and communication with a chip cardUS5687235Oct 26, 1995Nov 11, 1997Novell, Inc.Certificate revocation performance optimizationUS5710639Jan 25, 1996Jan 20, 1998Kuznicki; William JosephScan line compressed facsimile communication systemUS5742616Jun 7, 1995Apr 21, 1998International Business Machines CorporationSystem and method testing computer memoriesUS5825880Jun 4, 1997Oct 20, 1998Sudia; Frank W.Multi-step digital signature method and systemUS5825882Nov 19, 1993Oct 20, 1998Gemplus Card InternationalEncryption and authentication method and circuit for synchronous smart cardUS5841871Nov 18, 1996Nov 24, 1998Bull S.A.Method for authenticating a user working in a distributed environment in the client/server modeUS5857020Dec 4, 1995Jan 5, 1999Northern Telecom Ltd.Method of controlling access by a userUS5860082Mar 28, 1996Jan 12, 1999Datalight, Inc.Method and apparatus for allocating storage in a flash memoryUS5886926Jan 20, 1998Mar 23, 1999Motorola Inc.Circuit and method of measuring the negative threshold voltage of a non-volatile memory cellUS5896398Oct 15, 1997Apr 20, 1999Advantest Corp.Flash memory test systemUS5903651May 14, 1996May 11, 1999Valicert, Inc.Apparatus and method for demonstrating and confirming the status of a digital certificates and other dataUS5917909Dec 22, 1993Jun 29, 1999Gao Gesellschaft Fur Automation Und Organisation MbhSystem for testing the authenticity of a data carrierUS5930167Jul 30, 1997Jul 27, 1999Sandisk CorporationMulti-state non-volatile flash memory capable of being its own two state write cacheUS5933854Oct 10, 1995Aug 3, 1999Mitsubishi Denki Kabushiki KaishaData security system for transmitting and receiving data between a memory card and a computer using a public key cryptosystemUS5937425Oct 16, 1997Aug 10, 1999M-Systems Flash Disk Pioneers Ltd.Flash file system optimized for page-mode flash technologiesUS5943423Dec 15, 1995Aug 24, 1999Entegrity Solutions CorporationSmart token system for secure electronic transactions and identificationUS5949877Jan 30, 1997Sep 7, 1999Intel CorporationContent protection for transmission systemsUS5956405Jan 17, 1997Sep 21, 1999Microsoft CorporationImplementation efficient encryption and message authenticationUS5987134Feb 24, 1997Nov 16, 1999Fuji Xerox Co., Ltd.Device and method for authenticating user's access rights to resourcesUS5995623Jan 27, 1997Nov 30, 1999Fuji Xerox Co., Ltd.Information processing apparatus with a software protecting functionUS5995965Nov 18, 1996Nov 30, 1999Humetrix, Inc.System and method for remotely accessing user data recordsUS6009026Jul 28, 1997Dec 28, 1999International Business Machines CorporationCompressed input/output test modeUS6026402Jan 7, 1998Feb 15, 2000Hewlett-Packard CompanyProcess restriction within file system hierarchiesUS6028933Apr 17, 1997Feb 22, 2000Lucent Technologies Inc.Encrypting method and apparatus enabling multiple access for multiple services and multiple transmission modes over a broadband communication networkUS6038551Mar 11, 1996Mar 14, 2000Microsoft CorporationSystem and method for configuring and managing resources on a multi-purpose integrated circuit card using a personal computerUS6067621Oct 6, 1997May 23, 2000Samsung Electronics Co., Ltd.User authentication system for authenticating an authorized user of an IC cardUS6073234Apr 27, 1998Jun 6, 2000Fuji Xerox Co., Ltd.Device for authenticating user's access rights to resources and methodUS6073242Mar 19, 1998Jun 6, 2000Agorics, Inc.Electronic authority serverUS6094724Nov 26, 1997Jul 25, 2000Atmel CorporationSecure memory having anti-wire tappingUS6101588Sep 25, 1997Aug 8, 2000Emc CorporationDevice level busy arrangement for mass storage subsystem including a plurality of devicesUS6134550Mar 18, 1998Oct 17, 2000Entrust Technologies LimitedMethod and apparatus for use in determining validity of a certificate in a communication system employing trusted pathsUS6148354Apr 5, 1999Nov 14, 2000M-Systems Flash Disk Pioneers Ltd.Architecture for a universal serial bus-based PC flash diskUS6154544Jun 11, 1997Nov 28, 2000The Chamberlain Group, Inc.Rolling code security systemUS6158004Nov 25, 1997Dec 5, 2000Mitsubishi Denki Kabushiki KaishaInformation storage medium and security method thereofUS6181252Aug 22, 1997Jan 30, 2001Denso CorporationRemote control system and method having a system-specific codeUS6182229Nov 30, 1999Jan 30, 2001Sun Microsystems, Inc.Password helper using a client-side master password which automatically presents the appropriate server-side password in a particular remote serverUS6189097Mar 24, 1997Feb 13, 2001Preview Systems, Inc.Digital CertificateUS6209099Jul 14, 1997Mar 27, 2001Ncr CorporationSecure data processing method and systemUS6223271Jul 15, 1998Apr 24, 2001Compaq Computer Corp.System and method for detecting system memory size using ROM based paging tablesUS6230223Jun 1, 1998May 8, 2001Compaq Computer CorporationDual purpose apparatus method and system for accelerated graphics or second memory interfaceUS6230233Sep 13, 1991May 8, 2001Sandisk CorporationWear leveling techniques for flash EEPROM systemsUS6236280Sep 20, 1999May 22, 2001Advanced Micro Devices Inc.Low-noise voltage controlled oscillatorUS6243816Apr 30, 1998Jun 5, 2001International Business Machines CorporationSingle sign-on (SSO) mechanism personal key managerUS6253328Feb 12, 1998Jun 26, 2001A. James Smith, Jr.Method and apparatus for securing passwords and personal identification numbersUS6343291Feb 26, 1999Jan 29, 2002Hewlett-Packard CompanyMethod and apparatus for using an information model to create a location tree in a hierarchy of informationUS6351813Aug 7, 1998Feb 26, 2002Digital Privacy, Inc.Access control/crypto systemUS6353888Jul 6, 1998Mar 5, 2002Fuji Xerox Co., Ltd.Access rights authentication apparatusUS6356941Feb 22, 1999Mar 12, 2002Cyber-Ark Software Ltd.Network vaultsUS6370251Jun 8, 1998Apr 9, 2002General Dynamics Decision Systems, Inc.Traffic key access method and terminal for secure communication without key escrow facilityUS6371377Jun 16, 1998Apr 16, 2002Fujitsu LimitedCard type recording medium and access control method for card type recording medium and computer-readable recording medium having access control program for card type recording medium recordedUS6385729May 26, 1998May 7, 2002Sun Microsystems, Inc.Secure token device access to services provided by an internet service provider (ISP)US6389542May 3, 2000May 14, 2002Terence T. FlyntzMulti-level secure computer with token-based access controlUS6393565Aug 3, 1998May 21, 2002Entrust Technologies LimitedData management system and method for a limited capacity cryptographic storage unitUS6422460Jan 29, 1999Jul 23, 2002Verisign, Inc.Authorization system using an authorizing deviceUS6434700Dec 22, 1998Aug 13, 2002Cisco Technology, Inc.Authentication and authorization mechanisms for Fortezza passwordsUS6445794Jun 24, 1998Sep 3, 2002Benyamin RonSystem and method for synchronizing one time pad encryption keys for secure communication and access controlUS6456528Sep 17, 2001Sep 24, 2002Sandisk CorporationSelective operation of a multi-state non-volatile memory system in a binary modeUS6457126Jul 20, 2000Sep 24, 2002Tokyo Electron Device LimitedStorage device, an encrypting/decrypting device and method of accessing a non-volatile memoryUS6481632Oct 26, 1999Nov 19, 2002Visa International Service AssociationDelegated management of smart card applicationsUS6490680Dec 4, 1998Dec 3, 2002Tecsec IncorporatedAccess control and authorization systemUS6510501May 11, 1999Jan 21, 2003National Semiconductor CorporationNon-volatile memory read/write security protection feature selection through non-volatile memory bitsUS6513116Sep 29, 1998Jan 28, 2003Liberate TechnologiesSecurity information acquisitionUS6515904Jun 29, 2001Feb 4, 2003Matrix Semiconductor, Inc.Method and system for increasing programming bandwidth in a non-volatile memory deviceUS6522655May 11, 1999Feb 18, 2003Telefonaktiebolaget Lm Ericsson (Publ)Method and apparatus in a telecommunications systemUS6564314Jun 7, 1995May 13, 2003Sgs-Thomson Microelectronics LimitedComputer instruction compressionUS6571335Apr 1, 1999May 27, 2003Intel CorporationSystem and method for authentication of off-chip processor firmware codeUS7849323 *Nov 3, 2006Dec 7, 2010Emc CorporationPassword presentation for multimedia devicesUS20090249076 *Apr 1, 2009Oct 1, 2009Allone Health Group, Inc.Information server and mobile delivery system and methodUS20090307767 *Jun 2, 2009Dec 10, 2009Fujitsu LimitedAuthentication system and methodUS20100299220 *Dec 14, 2009Nov 25, 2010Boku, Inc.Systems and Methods to Confirm Transactions via Mobile DevicesUS20110143711 *Dec 7, 2010Jun 16, 2011Boku, Inc.Systems and methods to secure transactions via mobile devicesUS20110185406 *Jan 24, 2011Jul 28, 2011Boku, Inc.Systems and Methods to Authenticate UsersUS20110213671 *Jan 24, 2011Sep 1, 2011Boku, Inc.Systems and Methods to Process PaymentsUS20110217994 *May 3, 2010Sep 8, 2011Boku, Inc.Systems and Methods to Automate Transactions via Mobile DevicesUS20110276478 *Nov 5, 2010Nov 10, 2011Boku, Inc.Systems and Methods to Manage InformationUSRE36181Nov 8, 1996Apr 6, 1999United Technologies Automotive, Inc.Pseudorandom number generation and crytographic authentication* Cited by examinerNon-Patent CitationsReference1Akagi, A., "SD Format Verification," Matsushita Technical Journal, vol. 49, No. 2, pp. 11-14 ISSN: 1343-9529 (Apr. 2002).2Allard, J.J., "Dynamic Memory Array Card Bun in and High Speed Functional Card Testing," International Test Conference, Testing in the 1980's pp. 244-248, (1981).3Barsness et al., "ECC Memory Card with Built in Diagnostic Aids and Multiple Usage," IBM Technical Disclosure Bulletin, vol. 24, No. 11B pp. 6173-6174, (Apr. 1982).4Black, John, "Comments to NIST Concerning AES Modes of Operations: A Suggestion for Handling Arbitrary-Length Messages with the CBC MAC," University of Nevada, Reno, Phillip Rogaway, University of California at Davis http://csrc.nist.gov/Crypto Toolkit/modes/proposedmodes/xcbc-mac/xcbc-mac-spec.pdf, 3 pages (Publication Date Unknown).5Buhse, "Implications of Digital Rights Management for Online Music�A Business Perspective," T. Sander (Ed.), Security and Privacy in Digital Rights Management, ACM CCS-8 Workshop DRM, LNCS 2320, pp. 201-212, (2001).6CardWerk, "ISO 7816-4: Inter-Industry Commands for Interchange, Section 3: Definitions," http:www.cardwerk.com/smartcards/smartcard-standard-ISO7816-4-3-definitions.aspx (Retrieved from the Internet on Apr. 19, 2011).7CardWerk, "ISO 7816-4: Inter-Industry Commands for Interchange, Section 3: Definitions," http:www.cardwerk.com/smartcards/smartcard�standard�ISO7816-4�3�definitions.aspx (Retrieved from the Internet on Apr. 19, 2011).8Communication pursuant to Article 94(3) EPC corresponding to European Patent Application No. 06 786 405.2 (Jul. 30, 2008).9Communication pursuant to Article 94(3) EPC for European application No. 05855366.0 (Aug. 17, 2011).10Communication pursuant to Article 94(3) EPC for European application No. 10006757.8 (May 2, 2011).11Communication Regarding the Expiry of the Time Limit within which Notice of Opposition may be Filed for European Patent No. 1 920 380 (Dec. 23, 2011).12Communication Relating to the Results of the Partial International Search for International Application No. PCT/US2006/026241, 2 pages (Dec. 18, 2006).13Communication under Rule 71(3) EPC for European application No. 06786402.5 (Aug. 23, 2010).14Deepakumara et al., "Performance Comparison of Message Authentication Code (MAC) Algorithms for the Internet Protocol Security (IPSEC) Electrical and Computer Engineering," Memorial University of Newfoundland, St. John's, NL, Canada, A1B3S7 http://www.engr.mun.ca/�howard/PAPERS/necec�2003b.pdf, 7 pages (Publication Date Unknown).15Dialog OneSearch, 5 pages, http://www.dialog.com/dwpi/ (Jun. 26, 2006).16Dialog OneSearch, 50 pages, http://www.dialog.com/dwpi/ (Jun. 2006).17Dialog OneSearch, 55 pages, http://www.dialog.com/dwpi/ (Sep. 15, 2006).18Dialog OneSearch, 56 pages, http://www.dialog.com/dwpi/ (Sep. 12, 2006).19Dialog Search, Oct. 3, 2005 (31 pages).20Dialog Search, Oct. 6, 2004 (15 pages).21Discretx Technologies Ltd. "Secure Flash� System Specification", Version 1.05, Netanya, Israel, 36 pages (Jul. 5, 2004).22Donnan, R.A., "Transmission Synchronizing Method," IBM Technical Disclosure Bulletin, vol. 11, No. 11, pp. 1570, (Apr. 1969).23Engelbrecht et al., "ByMedCard-An Electronic Patient Record with Chip Card Functionality," Health Cards '97 Fourth International Congress pp. 313-317, (Publication Date Unknown).24European Examination Report for European Patent Application Serial No. 05 855 098.9 (Apr. 15, 2010).25European Examination Report for European Patent Application Serial No. 05 855 274.6 (Jun. 14, 2010).26European Examination Report for European Patent Application Serial No. 10 002 604.6 (May 4, 2010).27European Examination Report in Application No. 06814655.4, (Feb. 9, 2009).28European Search Report for European application No. 10006757.8 (Aug. 20, 2010).29Federal Information Processing Standards Publications 180-2, "Secure Hash Standard", pp. 1-75, http://csrc.nist.gov/publications/fips/fips180-2/fips180-2.pdf, (Aug. 1, 2002).30Final Office Action for U.S. Appl. No. 11/314,052 (Nov. 18, 2010).31Final Official Action for U.S. Appl. No. 11/053,273 (Jul. 12, 2011).32Final Official Action for U.S. Appl. No. 11/053,273 (Nov. 9, 2009).33Final Official Action for U.S. Appl. No. 11/285,600 (Jul. 30, 2010).34Final Official Action for U.S. Appl. No. 11/313,536 (Apr. 14, 2008).35Final Official Action for U.S. Appl. No. 11/313,538 (Apr. 9, 2008).36Final Official Action for U.S. Appl. No. 11/313,538 (Jun. 8, 2009).37Final Official Action for U.S. Appl. No. 11/313,538 (May 24, 2010).38Final Official Action for U.S. Appl. No. 11/313,870 (Apr. 1, 2008).39Final Official Action for U.S. Appl. No. 11/314,052 (Feb. 18, 2010).40Final Official Action for U.S. Appl. No. 11/314,052 (Nov. 18, 2010).41Final Official Action for U.S. Appl. No. 11/314,055 (Apr. 1, 2008).42Final Official Action for U.S. Appl. No. 11/314,411 (Jul. 29, 2011).43Final Official Action for U.S. Appl. No. 11/317,341 (Nov. 28, 2008).44Final Official Action for U.S. Appl. No. 11/317,862 (Aug. 30, 2010).45Final Official Action for U.S. Appl. No. 11/317,862 (Jul. 6, 2009).46Final Official Action for U.S. Appl. No. 11/319,835 (Jan. 7, 2010).47Final Official Action for U.S. Appl. No. 11/342,168 (Nov. 19, 2009).48Final Official Action for U.S. Appl. No. 11/557,028 (Aug. 12, 2011).49Final Official Action for U.S. Appl. No. 11/557,028 (Aug. 15, 2011).50Final Official Action for U.S. Appl. No. 11/557,028 (May 24, 2010).51Final Official Action for U.S. Appl. No. 11/557,041 (Aug. 25, 2011).52Final Official Action for U.S. Appl. No. 11/557,041 (Jun. 9, 2010).53Final Official Action for U.S. Appl. No. 11/557,049 (Jul. 7, 2010).54Final Official Action for U.S. Appl. No. 11/557,052 (Mar. 9, 2010).55First Office Action for Japanese Patent Application No. 2008-520371 (Jan. 10, 2012).56Frankel, Sheila, "RFC 3566�The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec," NIST-National Institute of Standards and Technology, 820 West Diamond Ave., Room 677, Gaithersburg, MD 20899, http://www.faqs.org/rfcs/rfc3566.html, 10 pages, (Publication Date Unknown).57Gemplus, Employee Smart Badge, One Integrated and Secure Smart Badge to Manage All Access, 2 pages, (Publication Date Unknown).58Gonzalez et al., U.S. Appl. No. 11/319,835, "Mass Storage Device with Automated Credentials Loading", filed Dec. 27, 2005.59Guibert et al, "Optical Memory Card Applicability for Implementing A Portable Medical Records," Medical Informatics, vol. 18, No. 3 pp. 271-278 ISSN: 0307-7640, (Jul.-Sep. 1993).60Haller et al., "A One-Time Password System," IETF Standard-Working-Draft, Internet Engineering Task Force, IETF, No. 1, XP015024796, pp. 1-8, (Mar. 24, 1997).61Hinarejos et al, "Revocation Scheme for PMI Based Upon the Tracing of Certificates Chains," Computational Science and its Applications�ICCSA 2006, International Conference, Proceedings (Lecture Notes in Computer Science, vol. 3983), pp. 1098-1106, (Publication Date Unkown).62Holtzman et al., U.S. Appl. No. 11/053,273, "Secure Memory Card With Life Cycle Phases", filed Feb. 7, 2005.63Holtzman et al., U.S. Appl. No. 11/284,623, "Method for Hardware Driver Integrity Check of Memory Card Controller Firmware", filed Nov. 21, 2005.64Holtzman et al., U.S. Appl. No. 11/285,600, "Hardware Driver Integrity Check of Memory Card Controller Firmware", filed Nov. 21, 2005.65Holtzman et al., U.S. Appl. No. 11/317,339, "Secure yet Flexible System Architecture for Secure Devices With Flash Mass Storage Memory", filed Dec. 22, 2005.66Holtzman et al., U.S. Appl. No. 11/317,341, "Methods Used in a Secure yet Flexible System Architecture for Secure Devices With Flash Mass Storage Memory", filed Dec. 22, 2005.67Holtzman et al., U.S. Appl. No. 11/317,390, "Methods Used in a Secure Memory Card With Life Cycle Phases", filed Dec. 22, 2005.68Holtzman et al., U.S. Appl. No. 11/317,862, "Secure Memory Card with Life Cycle Phases", filed Dec. 22, 2005.69Holtzman, et al., U.S. Appl. No. 60/717,164, "Secure yet Flexible System Architecture for Secure Devices with Flash Mass Storage Memory," filed Sep. 14, 2005.70Holtzman, et al., U.S. Appl. No. 60/717,347, "Hardware Driver Integrity Check of Memory Card Controller Firmware," filed Sep. 14, 2005.71Hoornaert, "Vasco Data Security Enables Secure Communications Over the Internet," IS Audit & Control Journal, vol. IV, 3 pages, (1999).72Housley et al., "Internet X.509 Public Key Infrastructure Certificate and CRL Profile," Network Working Group, RFC 2459, The Internet Society, 137 pages, (Jan. 1999).73Identification Cards�Contactless Integrated Circuit(s) Cards�Proximity Cards�Part 1: Physical Characteristics, ISO�IEC�14443-1�2000�PDF, 10 pages (Publication Date Unknown).74Identification Cards�Contactless Integrated Circuit(s) Cards�Proximity Cards�Part 2: Radio Frequency Power and Signal Interface, ISO�IEC�14443-2�2001�PDF, 18 pages, (Publication Date Unknown).75iKey 1000, Workstation Security and Secure Remote Access, SafeNet, 2 pages, (2004).76iKey 2032, Personal USB Authentication and Encryption Token, SafeNet, 2 pages (2005).77International Search Report and Written Opinion for PCT/US2007/015301 (Jan. 10, 2008).78International Search Report and Written Opinion for PCT/US2007/015304 (Mar. 25, 2008).79International Search Report and Written Opinion for PCT/US2007/015431, 14 pages, (Apr. 16, 2008).80International Search Report and Written Opinion for PCT/US2007/015432 (Jan. 17, 2008).81International Search Report and Written Opinion form PCT Application U.S. Appl. No. PCT/US2007/015430 (Jan. 17, 2008).82International Search Report for International Application No. PCT/US2010/057425 (Mar. 17, 2011).83International Telecommunication Union, "Series X: Data Networks, Open System Communications and Security (Information Technology-Open Systems Itnerconnection-The Directory: Public-Key and Attribute Certificate Frameworks)," ITU-T, X.509, pp. 1-170, (Aug. 2005).84Interview Summary for U.S. Appl. No. 11/313,538 (Feb. 26, 2010).85Interview Summary for U.S. Appl. No. 11/313,538 (Jul. 1, 2011).86Interview Summary for U.S. Appl. No. 11/313,538 (Oct. 23, 2009).87Interview Summary for U.S. Appl. No. 11/314,052 (Oct. 27, 2009).88Interview Summary for U.S. Appl. No. 11/314,411 (Nov. 3, 2009).89Interview Summary for U.S. Appl. No. 11/317,341 (Jan. 20, 2010).90Interview Summary for U.S. Appl. No. 11/557,028 (Feb. 24, 2010).91Interview Summary for U.S. Appl. No. 11/557,041 (Feb. 22, 2010).92Interview Summary for U.S. Appl. No. 11/557,049 (Mar. 30, 2010).93Interview Summary for U.S. Appl. No. 11/557,049 (Mar. 9, 2010).94Interview Summary for U.S. Appl. No. 11/557,052 (Nov. 18, 2009).95Invitation to Pay Additional Fees for International Application No. PCT/US2005/046478, (Jul. 11, 2006).96Invitation to Pay Additional Fees in corresponding Int'l. App. No. PCT/US2006/03589, (Jan. 26, 2007).97Invitation to Pay Additional Fees, for Interntational Application No. PCT/US2005/046689, (Jul. 11, 2006).98Jogand-Coulomb et al., U.S. Appl. No. 11/313,536, "Control Structure for Versatile Content Contril", filed Dec. 20, 2005.99Johnson, D., "Bus Emulation Drives Production Testing," Test & Measurement World, vol. 15, No. 2, pp. 41-42, 44, 46, 48 ISSN: 0744-1657, (Feb. 1995).100Kikuchi et al., "Performance Evaluation of Public-Key Certificate Revocation System with Balanced Hash Tree," Parallel Processing, 1999 International Workshop on Aizu-Wakamatsu, pp. 204-209, (1999).101Kocher, "On Certificate Revocation and Validation," Lecture Notes in Computer Science, Financial Cryptography (1998).102Korean Office Action for Korean Patent Application No. 2008-7002120 (Jan. 22, 2010).103Lee et al., Modified Token-Update Scheme for Site Authentication, School of Computer Science and Engineering, Inha University, Incheon, 402-751, Korea, 6 pages (Publication Date Unknown).104Lloyd et al., "Understanding Certification Path Construction," PKI Forum, pp. 1-14, (Sep. 2002).105Micky Holtzman , U.S. Appl. No. 60/717,163, "Secure yet Flexible System Architecture for Secure Devices with Flash Mass Storage Memory," filed Sep. 14, 2005.106Notice of Abandonment for U.S. Appl. No. 11/313,536 (Jan. 2, 2009).107Notice of Abandonment for U.S. Appl. No. 11/313,870 (Oct. 14, 2008).108Notice of Abandonment for U.S. Appl. No. 11/314,053 (Apr. 8, 2009).109Notice of Abandonment for U.S. Appl. No. 11/314,055 (Nov. 10, 2008).110Notice of Abandonment for U.S. Appl. No. 11/317,339 (Feb. 10, 2009).111Notice of Abandonment for U.S. Appl. No. 11/342,168 (Jun. 25, 2010).112Notice of Abandonment for U.S. Appl. No. 11/557,039 (Jun. 18, 2010).113Notice of Abandonment for U.S. Appl. No. 11/557,051 (Apr. 21, 2010).114Notice of Abandonment for U.S. Appl. No. 11/557,056 (Oct. 28, 2009).115Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/284,623 (Jan. 15, 2009).116Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/284,623 (Sep. 23, 2008).117Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/313,538 (Aug. 17, 2011).118Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/317,341 (Dec. 17, 2010).119Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/317,341 (Mar. 22, 2010).120Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/317,390 (May 3, 2011).121Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/317;390 (May 3, 2011).122Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/319,259 (Feb. 12, 2010).123Notice of Allowance and Fee(s) Due for U.S. Appl. No. 11/319,835 (Feb. 17, 2010).124Notice of Allowance and Fee(s) Due for U.S. Appl. No. 12/112,412 (Sep. 16, 2011).125Notice of Panel Decision from Pre-Appeal Brief Review for U.S. Appl. No. 11/285,600 (Dec. 10, 2010).126Notice of Panel Decision from Pre-Appeal Brief Review for U.S. Appl. No. 11/313,538 (Aug. 27, 2010).127Notice of Panel Decision from Pre-Appeal Brief Review for U.S. Appl. No. 11/314,411 (Nov. 1, 2010).128Notice of Panel Decision from Pre-Appeal Brief Review for U.S. Appl. No. 11/557,028 (Sep. 30, 2010).129Notice of Panel Decision from Pre-Appeal Brief Review for U.S. Appl. No. 11/557,052 (Sep. 17, 2010).130Notification of Grant of Patent Right for Chinese Patent Application No. 200680032990.0 (Jan. 30, 2011).131Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration for International Application No. PCT/US2005/046478, (Sep. 5, 006).132Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration for International Application No. PCT/US2005/046689, (Sep. 006).133Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration for Interntational Application No. PCT/US2005/046793, (Jun. 7, 2006).134Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration for Interntational Application No. PCT/US2005/046795, (Jun. 7, 2006).135Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration in corresponding Int'l. App. No. PCT/US2006/003876, (W&S File # 250543-38301) (Aug. 17, 2007).136Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration in corresponding Int'l. App. No. PCT/US2006/026241, (W&S File # 250543-45901) (Feb. 8, 2007).137Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration in Corresponding Int'l. App. No. PCT/US2006/035839, (W&S File # 250543-47001) (May 25, 2007).138Notification of Transmittal of the International Search Report and the Written Opinion of the International Searching Authority, or the Declaration in corresponding Int'l. App. No. PCT/US2006/035840, (W&S File # 250543-40801) (Mar. 29, 2007).139Nystrom RSA Security M: "The Protected One-Time Password Protocol(EAP-POTP)," IETF Standard-Working-Draft, Internet Engineering Task Force, IETF, CH No. 2, XP015040287, (Jun. 30, 2005).140O.J. Horak, "Means and Measures for Data Security," Armed Forces Data Processing Agency, Stifgasse 2a, A-1070 Wien, Austria, IFAC SAFECOMP '89, Vienna, Austria, 9 pages, (1989).141Oasis, "Web Services Security X.509 Certificate Token Profile," OASIS Standard 500401, 16 pages, (Mar. 5, 004).142Office Action for Israel Patent Application No. 188631 (Aug. 22, 2011).143Office Action for U.S. Appl. No. 11/313,538 (Oct. 29, 2007).144Office Action for U.S. Appl. No. 11/313,870 (Oct. 29, 2007).145Office Action for U.S. Appl. No. 11/314,052 (May 12, 2009).146Office Action for U.S. Appl. No. 11/314,053 (Nov. 9, 2007).147Office Action for U.S. Appl. No. 11/314,055 (Oct. 29, 2007).148Office Action for U.S. Appl. No. 11/314,410 (May 13, 2009).149Office Action for U.S. Appl. No. 11/314,411 (Jun. 23, 2009).150Office Action for U.S. Appl. No. 11/557,056 (Mar. 16, 2009).151Official Action for Chinese Application No. 2006800089822.0 (Aug. 5, 2009).152Official Action for Chinese Application No. 200680008989.4 (Apr. 24, 2009).153Official Action for Chinese Application No. 200680009222.3 (Jul. 22, 2009).154Official Action for Chinese Application No. 200680032990.0 (Jul. 30, 2009).155Official Action for U.S. Appl. No. 11/053,273 (Dec. 17, 2010).156Official Action for U.S. Appl. No. 11/053,273 (Jul. 7, 2010).157Official Action for U.S. Appl. No. 11/053,273 (Nov. 19, 2008).158Official Action for U.S. Appl. No. 11/284,623 (Apr. 30, 2008).159Official Action for U.S. Appl. No. 11/285,600 (Mar. 1, 2010).160Official Action for U.S. Appl. No. 11/285,600 (Mar. 24, 2009).161Official Action for U.S. Appl. No. 11/313,536 (Oct. 17, 2007).162Official Action for U.S. Appl. No. 11/313,538 (Feb. 10, 2011).163Official Action for U.S. Appl. No. 11/313,538 (Jan. 13, 2010).164Official Action for U.S. Appl. No. 11/313,538 (Nov. 20, 2008).165Official Action for U.S. Appl. No. 11/314,052 (Jun. 10, 2010).166Official Action for U.S. Appl. No. 11/314,052 (Jun. 8, 2010).167Official Action for U.S. Appl. No. 11/314,053 (Feb. 7, 2008).168Official Action for U.S. Appl. No. 11/314,410 (Mar. 5, 2010).169Official Action for U.S. Appl. No. 11/314,411 (Feb. 25, 2010).170Official Action for U.S. Appl. No. 11/314,411 (Jan. 4, 2011).171Official Action for U.S. Appl. No. 11/317,339 (Aug. 1, 2008).172Official Action for U.S. Appl. No. 11/317,341 (Feb. 21, 2008).173Official Action for U.S. Appl. No. 11/317,341 (Jun. 18, 2009).174Official Action for U.S. Appl. No. 11/317,390 (Apr. 30, 2009).175Official Action for U.S. Appl. No. 11/317,390 (Aug. 16, 2010).176Official Action for U.S. Appl. No. 11/317,390 (Mar. 17, 2010).177Official Action for U.S. Appl. No. 11/317,862 (Feb. 4, 2010).178Official Action for U.S. Appl. No. 11/317,862 (Mar. 16, 2011).179Official Action for U.S. Appl. No. 11/317,862 (Nov. 19, 2008).180Official Action for U.S. Appl. No. 11/319,259 (May 12, 2009).181Official Action for U.S. Appl. No. 11/319,835 (May 12, 2009).182Official Action for U.S. Appl. No. 11/557,006 (Feb. 15, 2011).183Official Action for U.S. Appl. No. 11/557,006 (Jun. 25, 2010).184Official Action for U.S. Appl. No. 11/557,010 (Feb. 16, 2010).185Official Action for U.S. Appl. No. 11/557,028 (Feb. 22, 2011).186Official Action for U.S. Appl. No. 11/557,028 (Nov. 10, 2009).187Official Action for U.S. Appl. No. 11/557,039 (Oct. 13, 2009).188Official Action for U.S. Appl. No. 11/557,041 (Feb. 4, 2011).189Official Action for U.S. Appl. No. 11/557,041 (Oct. 13, 2009).190Official Action for U.S. Appl. No. 11/557,049 (Dec. 17, 2009).191Official Action for U.S. Appl. No. 11/557,051 (Sep. 29, 2009).192Official Action for U.S. Appl. No. 11/557,052 (Apr. 27, 2011).193Official Action for U.S. Appl. No. 11/557,052 (Sep. 29, 2009).194Official Action for U.S. Appl. No. 12/338,738 (May 13, 2011).195Official Action for U.S. Appl. No. 12/624,036 (Apr. 1, 2011).196Open Specifications Integrate One-Time Passwords with Enterprise Applications, RSA Security, 10 pages, (Feb. 2005).197Oritz, "An Introduction to Java Card Technology�Part 1," 17 pages. http://developers.sun.com/techtopics/mobility/javacard/articles/javacard1/, (May 29, 2003).198Orlowski, Andrew, "Everything You Ever Wanted to Know About CPRM, But ZDNet Wouldn't Tell You . . . ," The Register.co.UK, 6 pages, (Jan. 10, 2001).199Pinkas, Benny, "Efficient State Updates for Key Management," STAR Lab, Intertrust Technologies, Princeton, NJ, DRM 2001, LNCS 2320 pp. 40-56, (2002).200PNY Technologies Attache Flash Product, http://www.pny.com/products/flash/attache.asp (Copyright 2003).201Posey, "Understanding MS Windows File Associations," Microsoft Technet., TechRepublic (Sep. 1999).202Random Number Generator, Seed. InWebster's New World� Computer Dictrionary, Wiley Publishing, Inc. (2003).203Renesas, X-Mobile Card, Digital Rights Management, Authentication and Secure Storage for Mobile Devices, Providing Remote Access and Secure Storage Solutions for IT, Advanced Solutions Group, 4 pages, (2005).204Restriction Requirement for U.S. Appl. No. 11/053,273 (Jun. 8, 2009).205Restriction Requirement for U.S. Appl. No. 11/314,053 (Jul. 1, 2008).206Restriction Requirement for U.S. Appl. No. 11/317,339 (Dec. 14, 2007).207Restriction Requirement for U.S. Appl. No. 12/112,412 (Jun. 21, 2011).208RSA Laboratories, "PKCS#1: RSA Encryption Standard," An RSA Laboratories Technical Note, Version 1.5, 17 pages, Revised Nov. 1, 1993.209RSA Security Inc.: "A CryptoAPI Profile for One-Time Password Tokens V1.0 Draft2" One-Time Password Specifications (OTPX), XP002416270, (Jun. 27, 2005).210RSA Security Inc.: "OTP-WSS-Token: Web Services Security One-Time-Password (OTP) Token Profile, Version 1-0d3", One-Time Password Specifications (OTPS), XP002416269, (Jul. 6, 2005).211RSA Security Inc.: "PKCS#11 Mechanisms for One-Time Password Tokens V1.0 5th Draft", One-Time Password Specifications, XP002415773, (Jun. 27, 2005).212RSA Security, "Open Specifications Integrate One-Time Passwords with Enterprise Applications," Technology White Paper, pp. 1-10 (May 16, 2005).213RSA Security, Federated Identity Management and Return on Investment, White Paper, 12 pages, (2004-2005).214RSA Security, Federated Identity Manager, A Technical Overview, Technology BackgrouNder, 16 pages, (2005).215RSA Specification, Cryptographic Token Key Initatialization Protocol, V1.0 Draft 3, RSA Security, 29 pages, (Jun. 14, 2005).216Rubin, "Independent One-Time Passwords," USENIX, A Quarterly Dedicated to the Analysis and Understanding of Advanced Computing Systems, vol. 9, No. 1, 15 pages, (Winter 1996).217Rubin, Independent One-Time Passwords, USENIX Association, Proceedings of the Fifth USENIX UNIX Security Symposium, 13 pages, (Jun. 5-7, 1995).218SafeNet AXIS, Strong Authentication and Single Sign-On, AXIS Instant Logical & Physical Access Security, 2 ages (2005).219Sandhu et al., "Access Control: Principles and Practice," IEEE Communications Magazine, IEEE Service Center, New York, NY, vol. 32, No. 9, pp. 40-48 (2-5) (Sep. 1, 1994).220SanDisk Corporation "BE2 Architecture", Revision 1.1, 21 pages (Jun. 9, 2003).221SanDisk Corporation I, "CryptoFlash Integration in BE2", Revision 1.21, 34 pages (Oct. 19, 2004).222SanDisk Israel Discloser #SDK0570 "Flash Memory Card with In Stream data Encryption/Decryption", 4 pages (Publication Date Unknow).223Secure Business-to-Business Single Sign-On (B2B SSO) Based on Federated Identity Management, RSA Security, 6 pages (2004-2005).224Seitz et al., Key Management for Encrypted Data Storage in Distributed Systems, Proceedings of the Second IEEE International Security in Storage Workshop (SISW'03), 11 pages (Publication Date Unknown).225ST Microelectronics: "Trusted Platform Module (TPM)"; XP-002345888; 5 pages (May 2004).226Summons to attend oral proceedings pursuant to Rule 115(1) EPC for European Application No. 06786402.5 (May 3, 2010).227Supplemental Notice of Allowability and Interview Summary for U.S. Appl. No. 11/284,623 (Oct. 31, 2008).228Thomas, T., "A Mandatory Access Control Mechanism for the Unix� File System," Proceedings of the Aerospace Computer Security Applications Conference, Orlando, Dec. 12-16, 1988, Washington, IEEE Comp. Soc. Press, US, pp. 173-177, (Dec. 12, 1988).229Tsuchida, S., "Test and Repair of Non-Volatile Commodity and Embedded Memories," Proceedings International Test Conference (Cat. No. 02CH37382) p. 1223 ISBN: 0 7803 7542 4 (2002).230Van Moffaert et al., "Digital Rights Management: DRM is a Key Enabler for the Future Growth of the Broadband Access Market, and the Telecom/Networking Marking in General," Alcatel Telecommunications Review, Alcatel, Paris Cedex, FR, 8 pages (Apr. 2003).231VeriSign, Extending Managed PKI Services to Smart Cards for Greater Convenience and Security, 14 pages, (2001).232VeriSign, Trusted Federated Identity Solution Architecture, 16 pages, (2004).233Weippl, Edgard, "An Approach to Role-Based Access Control for Digital Content," Software Competence Center Hagenberg Hauptstr. 99 A4232 Hagenberg, Austria, 5 pages, (2001).234Written Opinion of the International Searching Authority in corresponding Int'l. App. No. PCT/US2006/026241, (W&S File # 250543-45901) (Feb. 8, 2007).235Written Opinion of the International Searching Authority in corresponding Int'l. App. No. PCT/US2006/035839, (W&S File # 250543-47001) (Sep. 13, 2006).236Written Opinion of the International Searching Authority in corresponding Int'l. App. No. PCT/US2006/035840, (W&S File # 250543-40801) (Mar. 29, 2007).237Wu et al., "A Universal Self-Test Design for Chip, Card and System," Proceedings 1992 IEEE International Workshop on Defect and Afult Tolerance in VLSI Systems (Cat No. 92TH0481-2) pp. 305-314 ISBN: 0 8186 2837 5 (Publication Date Unknown).238Yang et al., CD-Rom Versus Web-Access to External Databases-Experiences and Insights, Rider University Libraries, pp. 193-200 (Publication Date Unknown).Referenced byCiting PatentFiling datePublication dateApplicantTitleUS8613065 *Feb 4, 2011Dec 17, 2013Ca, Inc.Method and system for multiple passcode generationUS8646054 *Mar 23, 2012Feb 4, 2014Western Digital Technologies, Inc.Mechanism to manage access to user data area with bridged direct-attached storage devicesUS8832807 *Aug 2, 2011Sep 9, 2014Christine E. KuoMethod and apparatus for asynchronous dynamic passwordUS20110202984 *Feb 4, 2011Aug 18, 2011Arcot Systems, Inc.Method and system for multiple passcode generationUS20120204248 *Feb 9, 2011Aug 9, 2012Verizon Patent And Licensing Inc.Provisioner for single sign-on and non-single sign-on sites, applications, systems, and sessionsUS20120204249 *Feb 9, 2011Aug 9, 2012Verizon Patent And Licensing Inc.Toolbar for single sign-on and non-single sign-on sites, applications, systems, and sessionsUS20140282985 *Mar 15, 2013Sep 18, 2014Google Inc.Remote Access Authentication* Cited by examinerClassifications U.S. Classification726/9, 713/184, 713/185, 726/20International ClassificationG06F7/04, G06F21/20, G06F15/16, H04L9/32Cooperative ClassificationH04L2209/56, H04L2209/805, H04L9/3263, H04L9/3226, H04L63/0815, H04L9/3271, G11C7/24, G06K19/07732, G06F21/79, G06K19/07, G06F21/34, G06F21/31, G06F2221/2115, H04L63/0853, H04L63/0838European ClassificationH04L63/08E, G06F21/79, G06K19/07, G06K19/077E7, H04L63/08D1, G06F21/31, H04L9/32, H04L9/32T, H04L9/32R, G06F21/34, G11C7/24Legal EventsDateCodeEventDescriptionJun 1, 2011ASAssignmentOwner name: SANDISK TECHNOLOGIES INC., TEXASFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SANDISK CORPORATION;REEL/FRAME:026370/0543Effective date: 20110404RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google