US 2008/0168534 A1Published application

Authentication Apparatus and Entity Device

AssigneesKabushiki Kaisha Toshiba, Toshiba Solutions Corporation

InventorsHidehisa TAKAMIZAWA, Koji Okada, Tomoaki Morijiri, Tatsuro Ikeda, Minoru Nishizawa, Yoshihiro Fujii, Asahiko Yamada

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A configuration including, in authentication contexts, function unit identification information unique to the function unit that has executed an authentication subprocess in entity devices permits an authentication apparatus to specify the function unit that has executed the authentication subprocess in the entity devices. The verifier, therefore, can verify the legitimacy of the authentication subprocess from the authentication context even in the presence of a plurality of function units capable of executing the same authentication subprocess in the entity devices.

Claims5

Dependent claims

An authentication apparatus capable of communicating with a client apparatus capable of transmitting each authentication context received from a plurality of entity devices which generate, based on confidential information, a plurality of authentication contexts each including a processing result of a plurality of authentication subprocesses making up a biometric authentication process, the authentication apparatus comprising:

an authentication apparatus confidential information storage device configured to store confidential information identical with or corresponding to the aforementioned confidential information;
an authenticator verification device configured to verify an authenticator of each authentication context based on the confidential information in the authentication apparatus confidential information storage device upon receipt, from the client apparatus, of the authentication context configured of “an entity device certificate including execution device performance information and execution device identification information on a plurality of authentication subprocess execution devices of the entity device”, “the execution device identification information indicating the authentication subprocess execution device that has executed the authentication subprocess”, “the processing result of the authentication subprocess”, and “the authenticator generated based on the confidential information”;
a performance information extraction device configured to extract, for each authentication context received, the corresponding execution device performance information in the entity device certificate based on the execution device identification information used for generating the authenticator;
a performance criteria information storage device configured to store, in advance, performance criteria information indicating the performance to be satisfied by the authentication subprocess execution device;
and
a performance information verification device configured to verify, based on the performance criteria information, the execution device performance information extracted by the performance information extraction device.

3 more elements

an authentication apparatus confidential information storage device configured to store confidential information identical with or corresponding to the aforementioned confidential information;
an authenticator verification device configured to verify an authenticator of each authentication context based on the confidential information in the authentication apparatus confidential information storage device upon receipt, from the client apparatus, of the authentication context configured of “an entity device certificate including execution device performance information and input/output identification information on a plurality of authentication subprocess execution devices of the entity device”, “the input/output identification information indicating the authentication subprocess execution device that has executed the authentication subprocess”, “the processing result of the authentication subprocess”, And “the authenticator generated based on the confidential information”;
a performance information extraction device configured to extract, for each authentication context received, the corresponding execution device performance information in the entity device certificate based on the input/output identification information used for generating the authenticator;
a performance criteria information storage device configured to store, in advance, performance criteria information indicating the performance to be satisfied by the authentication subprocess execution device;
and
a performance information verification device configured to verify, based on the performance criteria information, the execution device performance information extracted by the performance information extraction device.

3 more elements

At least one entity device among a plurality of entity devices, used for an authentication system comprising an authentication apparatus capable of verifying a plurality of authentication contexts each including a processing result of a plurality of authentication subprocesses making up a biometric authentication process, a client apparatus capable of transmitting said each authentication context to the authentication apparatus, and a plurality of entity devices capable of individually generating and transmitting said each authentication context to the client apparatus, the entity device comprising:

a confidential information storage device configured to store confidential information for verification by the authentication apparatus;
a plurality of authentication subprocess execution devices having different performances and capable of generating a processing result by executing the same authentication subprocess;
an entity device certificate storage device configured to store an entity device certificate including execution device performance information and execution device identification information on said each authentication subprocess execution device;
an execution device identification information storage device configured to store the execution device identification information and a parameter related to each other for each authentication subprocess execution device;
an execution device switching device configured to execute, upon receipt of a processing request and a parameter from the client apparatus, the authentication subprocess by accessing the execution device identification information storage device and switching to the authentication subprocess execution device corresponding to the parameter;
an authenticator generating device configured to generate an authenticator based on the confidential information in the confidential information storage device from the entity device certificate, the processing result of the authentication subprocess and the execution device identification information indicating the authentication subprocess execution device that has executed the authentication subprocess;
an authentication context generating device configured to generate an authentication context including the authenticator, the execution device identification information used for generating the authenticator, the processing result and the entity device certificate;
and
an authentication context transmission device configured to transmit the authentication context to the client apparatus,
wherein the authentication context transmitted by the authentication context transmission device is such that the authentication apparatus is capable of verifying the authenticator based on the confidential information identical with or corresponding to the aforementioned confidential information, the corresponding execution device performance information in the entity device certificate is extracted based on the execution device identification information used for generating the authenticator, and the execution device performance information is capable of being verified based on predetermined performance criteria information.

7 more elements

a confidential information storage device configured to store confidential information for verification by the authentication apparatus;
a plurality of authentication subprocess execution devices having different performances and capable of generating a processing result by executing the same authentication subprocess;
an entity device certificate storage device configured to store an entity device certificate including execution device performance information and input/output identification information on said each authentication subprocess execution device;
an input/output identification information storage device configured to store the input/output identification information and a parameter related to each other for each authentication subprocess execution device;
an execution device switching device configured to execute, upon receipt of a processing request and a parameter from the client apparatus, the authentication subprocess by accessing the input/output identification information storage device and switching to the authentication subprocess execution device corresponding to the parameter;
an authenticator generating device configured to generate an authenticator based on the confidential information in the confidential information storage device from the entity device certificate, the processing result of the authentication subprocess and the input/output identification information indicating the authentication subprocess execution device that has executed the authentication subprocess;
an authentication context generating device configured to generate an authentication context including the authenticator, the input/output identification information used for generating the authenticator, the processing result and the entity device certificate;
and
an authentication context transmission device configured to transmit the authentication context to the client apparatus,
wherein the authentication context transmitted by the authentication context transmission device is such that the authentication apparatus is capable of verifying the authenticator based on the confidential information identical with or corresponding to the aforementioned confidential information, the corresponding execution device performance information in the entity device certificate is extracted based on the input/output identification information used for generating the authenticator, and the execution device performance information is capable of being verified based on predetermined performance criteria information.

7 more elements

a confidential information storage device configured to store confidential information for verification by the authentication apparatus;
a plurality of authentication subprocess execution devices having different performances and capable of generating a processing result by executing the same authentication subprocess;
a function information storage device configured to store “a function information certificate including the execution device performance information” and a parameter as related to each other, for each authentication subprocess execution device;
an execution device switching device configured to execute, upon receipt of a processing request and a parameter from the client apparatus, the authentication subprocess by accessing the execution device identification information storage device and switching to the authentication subprocess execution device corresponding to the parameter;
an authenticator generating device configured to generate an authenticator based on the confidential information in the confidential information storage device from the function information certificate corresponding to the authentication subprocess execution device that has executed the authentication subprocess and the processing result of the authentication subprocess;
an authentication context generating device configured to generate an authentication context including the authenticator, the function information certificate used for generating the authenticator and the processing result;
and
an authentication context transmission device configured to transmit the authentication context to the client apparatus,
wherein the authentication context transmitted by the authentication context transmission device is such that the authentication apparatus is capable of verifying the authenticator based on the confidential information identical with or corresponding to the aforementioned confidential information, the execution device performance information is extracted from the function information certificate used for generating the authenticator, and the execution device performance information is capable of being verified based on predetermined performance criteria information.

6 more elements

Dependencies are inferred from the claim text.