Peer To Patent

Home > Archived Applications > 20070250920 > Prior Art > Detail

Pre-Grant Publication Number: 20070250920

Security systems for protecting an asset

Please help the USPTO examine the application by evaluating the relevance of the publicly submitted prior art to the patent application. Peer To Patent forwards the Top 10 most relevant prior art submissions and their annotations to the USPTO.

Review this prior art and click on the thumbs up (or down) to indicate whether this submission should be forwarded to the USPTO.
If you login then you can add an annotation by typing in the box at the bottom of the screen to comment on the relevance of the prior art to the claims of the patent application.

Prior Art Detail

Annotations(0)

#167Lotus/Domino 4.6

Applies to Claims 1,18,24,29

Submitted by: Kahscho __Last updated: about 4 years ago

0 thumbs up 0 thumbs down

Summary / Description

Summary / Description

Lotus is a client/server database application. Users traditionally accessed Notes database with a Notes ID (public key/private key encryption). Domino turns Notes databases into HTML so that they can be accessed through a web browser. By version 4.6 (released in 1997), the system stored Person documents for users with information on the Notes ID (for Notes access) and information on HTTP passwords (if the same user accessed the system through the Web.

Basic Information

Type of Prior Art	Print Publication

Publication Title *

Author

ISBN

Page Range

Medium	Book excerpt

Publication Date *	1997

URL

Notes / To Do

Notes

Excerpt

Excerpt

http://docs.rinet.ru/PozaNotes/ is a web site that provides documentation on how to use Notes/Domino 4.6

Relevance

Claims

A security system for controlling the access of a user to an asset, comprising a password-protected access interface and asset access means, the access interface comprising means for receiving user credentials comprising a password, wherein the access interface accepts user credentials in which the password is one of a recognized primary password and one or more recognized secondary passwords, the asset access means being operably associated with the access interface such that when the accepted user credentials comprise the primary password, the asset access means provides access to the asset, and when the accepted user credentials comprise one of the one or more secondary passwords, the asset access means provides relatively limited or feigned access to the asset, and when the user credentials do not comprise one of the primary password and the one or more secondary passwords, the asset access means denies access to the asset.

Relevance

The Notes/Domino server is the security system. The Notes ID public key corresponds to the primary password (used to provide access through the Notes interface) The Domino HTTP password corresponds to the secondary password (used to provide a lower level of access through the Web interface)

Claim Chart

All

A security management system for providing controlled access to a secure electronic account accessible via an electronic account access interface in communication with an account server, the security management system comprising an administrative interface for defining security rules for governing account access via the account access interface, the security rules being stored on the account server or on a machine readable medium in electronic communication with the account server, wherein the administrative interface allows an authorized user to customize the security rules to provide different levels of account access responsive to entry via the electronic account access interface of user credentials comprising a user ID and either a primary password or a secondary password selected from one more secondary passwords.

Relevance

See claim 1 above. The security rules are stored in the Name and Address Book (NAB).

Claim Chart

All

A password-based security system for restricting access to an asset, comprising an asset access interface for receiving a two-part password comprising a one-time password component and a second password component, a password synchronization device for generating a one-time password root, wherein the one-time password component is obtained via operation of an algorithm upon the one-time password root, such that entry of valid user credentials comprising the one-time password component and the second password component is required for full access to the asset, whereas entry of otherwise valid user credentials in which the one-time password root is used instead of the one-time password component results in limited or feigned access to the asset.

Relevance

See above. Notes uses one-time challenges for anyone trying to authenticate through the Notes ID. It is a public key/private key encryption authentication mechanism. The server sends a random string to the user, who then signs the string with the private key. See Chapter 38 http://docs.rinet.ru/PozaNotes/ch38/ch38.htm

Claim Chart

All

A computerized password security system for protecting access to an asset pertaining to a user, comprising:a) a database on a server comprising account information for the user, said account information comprising a user ID, a primary password, at least one secondary password, and a rules record specifying actions to be taken if one of the least one secondary passwords is entered, said actions comprising limiting the level of access to the asset to be granted relative to a higher level of access granted in response to entry of the primary password, the at least one secondary password being other than a guest password or default password;

b) input means for a user to enter the user ID and a password into the security system;

c) account access means wherein the entered user ID and entered password are compared to the information in the database to determine the level of account access granted to the user according to the rules record based on the entry of a primary password or the at least one secondary password, and

d) security system administration means which allows the user to customize the rules record, including the option to specify that in response to entry of the at least one secondary password, the account access means will provide the user's choice of either partial account access or feigned account access.

Relevance

The Notes/Domino server can be setup so that if the user accesses the system through the Web with the HTTP password, the user has only partial account access (compared to accessing the system through Notes with the Notes ID).

Claim Chart

All

0 days left