System and method for using internet based caller ID for controlling access to an object stored in a computer

Abstract

A system and method for controlling access to an object. The system stores an object and a processor identifier. The system includes a verification agent that can access information embedded in a processor and then calculate from that embedded information a value that may be compared with the stored processor identifier. A comparison agent is used to compare that value with the processor identifier to determine whether the processor corresponds to the processor identifier. If the value that the verification agent returns matches the processor identifier, then the computer grants the user access to the object.

What is claimed is:  
     
         1 . A system for controlling access to an object comprising: 
 an accessible object;    a processor identifier associated with the object;    a verification agent for accessing information embedded in a processor and calculating from that embedded information a value that may be compared with the processor identifier; and    a comparison agent for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.    
     
     
         2 . The system of  claim 1  further comprising a server that includes: 
 a session identifier generator for generating a session identifier;  
 a plurality of verification agents, each including a different secret key and a calculator for calculating a return value that is a function of the embedded information, the secret key and a session identifier;  
 a selection agent for selecting a verification agent; and  
 a transmitter for transmitting a selected verification agent from the server to a client computer that contains the processor.  
 
     
     
         3 . The system of  claim 2  wherein the server is a web server that stores the object in a web site, and the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.  
     
     
         4 . The system of  claim 3  wherein the calculator is a hash engine for calculating a return value comprising a hash value calculated from the combination of the embedded information, the server identifier, a secret key and a session identifier.  
     
     
         5 . The system of  claim 4  wherein the comparison agent compares the return value to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.  
     
     
         6 . The system of  claim 5  wherein the web server further includes a timer for disconnecting the web server from a client computer when the verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.  
     
     
         7 . The system of  claim 2  wherein the server includes a processor number generator for generating a processor number from the return value, the secret key and the session identifier.  
     
     
         8 . A machine readable storage medium having stored therein programming instructions which, when executed by a central processing unit, permit access to information embedded in a processor and subsequently calculate from that embedded information a value that may be compared with a processor identifier stored in a server.  
     
     
         9 . The machine readable storage medium of  claim 8  wherein the programming instructions include instructions for: 
 selecting a verification agent from a plurality of verification agents; and  
 transmitting a selected verification agent from the server to a client computer.  
 
     
     
         10 . The machine readable storage medium of  claim 9  wherein each verification agent includes programming instructions for calculating a hash value.  
     
     
         11 . The machine readable storage medium of  claim 10  wherein the programming instructions further include instructions for comparing a hash value calculated from the combination of the embedded information, a server identifier, a secret key, and a session identifier, to a hash value calculated from the combination of the processor identifier, the secret key and the session identifier.  
     
     
         12 . The machine readable storage medium of  claim 11  wherein the programming instructions further include instructions for disconnecting a server from a client computer when the verification agent does not return to the server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, the secret key and the session identifier.  
     
     
         13 . A system for controlling access to an object comprising: 
 means for storing the object;    means for storing a processor identifier;    means for accessing information embedded in a processor;    means for calculating from that embedded information a value that may be compared with the processor identifier; and    means for comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.    
     
     
         14 . The system of  claim 13  wherein: 
 the means for storing the object is a web server that stores the object on a web site; and  
 the processor identifier comprises a hash value calculated from the combination of a processor number and a server identifier.  
 
     
     
         15 . The system of  claim 14  wherein the web server includes: 
 means for generating a session identifier;  
 a plurality of verification agents, each containing a different secret key and means for calculating a hash value from the combination of the embedded information, the server identifier, the secret key and a session identifier;  
 means for selecting a verification agent; and  
 means for transmitting a selected verification agent from the web server to a client computer.  
 
     
     
         16 . The system of  claim 15  wherein the web server further includes means for disconnecting the web server from the client computer when the selected verification agent does not return to the web server within a prescribed amount of time a hash value that matches the hash value calculated from the combination of the processor identifier, a secret key and a session identifier.  
     
     
         17 . A method for controlling access to an object comprising the steps of: 
 storing the object in a computer;    storing a processor identifier in the computer;    accessing information embedded in a processor;    calculating from that embedded information a value that may be compared with the processor identifier; and    comparing the value with the processor identifier to determine whether the processor corresponds to the processor identifier.    
     
     
         18 . The method of  claim 17  wherein: 
 the computer is a web server that stores the object on a web site; and  
 the processor identifier is stored in the web server and comprises a hash value calculated from the combination of a processor number and a server identifier.  
 
     
     
         19 . The method of  claim 18  further including the steps of: 
 generating a session identifier; and  
 calculating a hash value from the combination of the embedded information, the server identifier, a secret key and a session identifier.  
 
     
     
         20 . A method for enabling a platform to access via the Internet an object stored on a web server comprising: 
 storing a platform identifier on the web server;    receiving a request from a platform for access to the object;    initiating a dynamic call-back process for dynamically accessing a hardware based platform identifier associated with the platform;    comparing the platform identifier associated with the platform to the platform identifier stored on the web server; and    granting access to the object if the platform identifier associated with the platform matches the platform identifier stored on the web server.    
     
     
         21 . A method for connecting a platform to a conference, comprising: 
 receiving a request to access a conference from a platform having a platform identifier;    checking the platform identifier against a set of platform identifiers that are authorized to participate in the conference; and    allowing the platform to join the conference if its platform identifier matches one included in the set of platform identifiers.    
     
     
         22 . The method of  claim 21  wherein the platform identifier is a processor number.  
     
     
         23 . The method of  claim 21  wherein the platform identifier is a hash of a value comprising a processor number.  
     
     
         24 . A method for restricting access to a web site, comprising: 
 receiving a request to access the web site from a platform having a platform identifier;    checking the platform identifier against a set of platform identifiers that are authorized to access the web site; and    allowing the platform to access the web site if its platform identifier matches one included in the set of platform identifiers.    
     
     
         25 . The method of  claim 24  wherein the platform identifier is a processor number.  
     
     
         26 . The method of  claim 24  wherein the platform identifier is a hash of a value comprising a processor number.  
     
     
         27 . The method of  claim 24  further comprising the step of preventing access to the web site if the platform identifier matches a list of those to be denied access to the web site.  
     
     
         28 . The method of  claim 24  wherein the set of platform identifiers that are authorized to access the web site are restricted to those platform identifiers that correspond to platforms authorized to modify the web site's content.  
     
     
         29 . A method for permitting access to a web site, comprising: 
 receiving a request to access the web site from a user having a user identification and a password, and using a platform having a hardware based platform identifier;    checking the user's identification and password for authorization to access the web site;    checking the platform identifier; and    allowing the user to access the web site.    
     
     
         30 . The method of  claim 29  wherein the platform identifier is a processor number.  
     
     
         31 . The method of  claim 29  wherein the platform identifier is a hash of a value comprising a processor number.  
     
     
         32 . A method for tracking a platform's web surfing activity, comprising: 
 recording a platform's hardware based platform identifier when the platform accesses a web site.    
     
     
         33 . A method of  claim 32  wherein the platform identifier is a processor number.  
     
     
         34 . The method of  claim 32  wherein the platform identifier is a hash of a value comprising a processor number.  
     
     
         35 . The method of  claim 32  wherein the web site is a commercial web site.  
     
     
         36 . The method of  claim 32  wherein the web site is an on-line voting web site.  
     
     
         37 . The method of  claim 32  wherein the web site is a web site for an on-line survey.  
     
     
         38 . A method for permitting access to a server through a virtual private network, comprising: 
 receiving a request to access the server from a remote user having a certificate for verifying the user's identity and public key, and using a platform having a hardware based platform identifier;    decrypting the certificate using a certificate authority's public key;    checking the platform identifier; and    allowing the user to access the server.    
     
     
         39 . A method of  claim 38  wherein the platform identifier is a processor number.  
     
     
         40 . The method of  claim 38  wherein the platform identifier is a hash of a value comprising a processor number.  
     
     
         41 . The system of  claim 6  wherein the same verification agent is used to access information embedded in a processor until the timer disconnects the web server from the client computer.