Microsoft Patent Victor Ric Richardson Working on No-Password Security Breakthrough

Ric Richardson , the inventor Byron Bay that went hand in hand with Microsoft in a patent battle massive and won , is raising funds for a security solution that he says could be " much larger " than the last.
Mr. Richardson was one of the major shareholders of the Uniloc Singapore when Microsoft would pay for about $ 300 million in 2012 to resolve claims that the software giant makes billions of infringing patents anti-piracy technology UNILOC. Microsoft was using technology as a basis for the activation of Office and Windows software.


The final solution has never been disclosed. However, a patent jury ordered Microsoft to pay U.S. $ 388 million before the software maker was able to appeal the decision. If he stayed, he would be one of the largest in U.S. history awarded patent.

Mr. Richardson said he was working closely with experts in intellectual property in the United States and a leading provider of investment capital in Australia to raise funds for the commercialization of security technology to eliminate the need for passwords for online transactions.

"My first patent expired and now it is time to go ahead and use the lessons learned," he said.Mr. Richardson said he had worked in the security system on and off for about two years, but has had a breakthrough, three months ago.

“When I spoke with on the right people - people I trust Sydney - he looked at me and asked, ' is that all?’ And I had to make a decision about whether it was close enough to be something that will make a difference , and it is proved that it is , so far, "he said.

"It became something that feels as big as the activation of the software when I started working on this in 1992.”The safety system uses a two-factor combination of proven technology encryption private key - public and local authentication in a way that eliminates the need for a server to store passwords or biometric information.

Users log on to the device using a PIN or biometric which is used to generate a private key. The key computing a public key that becomes the basis for communication with the server. The server accepts only the following public key provided by the device for the next session, he said.
"It's an exchange of secrets between machines that do not require a human to intervene when cars you know and recognize each other. "

The system also allowed “sharing session” - leaving a smartphone is used to authenticate to another computer, such as one in an internet cafe 'without the need to disclose sensitive information.
The beauty of the system is that it was not a way for hackers to steal private user information stored on a central server, said, pointing to the recent vulnerability in OpenSSL Heartbleed .

"The fact that people are imperfect and make mistakes is emphasized, and hackers can count on that. "
Ty Miller, founder of Intelligence Threat computer security consultancy said any system that has made it less vulnerable to theft of passwords can help overcome safety problems caused when people use the same password on multiple services.

However, he expressed concern that the system of Mr. Richardson could attract the attention of hackers to local devices.

" If the source of truth back to your car and do not store a private key, if it is compromised, then all accounts are converted at risk," Miller said.

Mr. Richardson was reluctant to name their business advisors, but said “we are certainly working to and obey all the rules that require that they be allowed to" work with them later.

I had some lingering concerns that the simplicity of the concept behind your system may not vulnerable to charges that justify patent lacked novelty - like patent activation software Uniloc had.

However, he does not want to stay with some remorse for not taking a punt the idea." I 'm not saying this is going to change the world. But I've had some experience with things that have changed the world, if I have a go at it, I am a cup ," he said .