US 2020/0007330 A1 · INFORMATION COMMUNICATION SYSTEM FOR ESTABLISHING PAIRING IN INFORMATION COMMUNICATION NETWORK

Abstract

A first apparatus performs a pairing providing process of displaying a provision string on the first apparatus and transmitting the provision string to a server apparatus, the provision string being of a given number of digits that changes every given amount of time in such a manner that, every given amount of time, the provision string is subjected to carrying and a new character is added to the rightmost digit of the provision string. A second apparatus transmits an acceptance string to the server apparatus, the acceptance string being input from the second apparatus based on the provision string displayed on the first apparatus. The server apparatus compares the provision string with the acceptance string, and determines that pairing is established between the first apparatus and the second apparatus when the provision string and the acceptance string match each other.

Claims10

Dependent claims

1-20. (canceled)

An information communication system, comprising:

a service apparatus configured to provide a specific service, and
an authentication apparatus configured to perform an authentication at a time of using the specific service and to communicate with the service apparatus via an information communication means,
wherein:
the information communication system is configured to perform the authentication for making the specific service available on a precondition that pairing is established between the service apparatus and the authentication apparatus,
the authentication apparatus comprises an authentication side controller comprising an authentication side registering unit configured to generate an authentication side private key to be used by the authentication apparatus, and an authentication side public key corresponding to the authentication side private key, to store the authentication side private key, and to transmit the authentication side public key to the service apparatus,
the service apparatus comprises a service side controller comprising a service side registering unit that, upon receiving the authentication side public key from the authentication apparatus, is configured to store the authentication side public key associating the authentication side public key with an internal user ID, which is an identification marker for the authentication apparatus corresponding to the specific service, and to transmit the internal user ID to the authentication apparatus,
the service side controller further comprises a service side encrypting unit that, upon receiving from the authentication apparatus an authentication request with the internal user ID specified, is configured to transmit service side encrypted data to the authentication side controller, the service side encrypted data being obtained by encrypting service side original data using the authentication side public key that corresponds to the internal user ID and is stored in the service side registering unit, the service side original data being any data prepared in the service apparatus,
the authentication side controller further comprises an authentication side decrypting unit configured to transmit to the service apparatus service side computed data obtained by performing predetermined computation on service side decrypted data, the service side decrypted data being obtained by decrypting the service side encrypted data received from the service side controller, using the authentication side private key that is stored in the authentication side registering unit, and
the service side controller further comprises an internal user ID genuineness determining unit configured to determine that the internal user ID is genuine when the service side computed data received from the authentication apparatus matches data obtained by performing the predetermined computation on the service side original data.

6 more elements

An information communication system, comprising:

a service apparatus configured to a specific service, and
an authentication apparatus configured to perform an authentication at a time of using the specific service and to communicate with the service apparatus via an information communication means,
wherein:
the information communication system is configured to perform the authentication for making the specific service available on a precondition that pairing is established between the service apparatus and the authentication apparatus, the service apparatus comprises a service side controller comprising a service side registering unit configured to generate a service side private key to be used by the service apparatus and a service side public key corresponding to the service side private key, to store the service side private key, and to transmit to the authentication apparatus the service side public key together with a service ID that is an identification marker for the service apparatus corresponding to the specific service,
the authentication apparatus comprises an authentication side controller comprising an authentication side registering unit that, upon receiving the service side public key from the service apparatus, is configured to store the service side public key associating the service side public key with the service ID,
the authentication side controller further comprises an authentication side encrypting unit that, upon receiving from the service apparatus an authentication request with the service ID specified, is configured to transmit authentication side encrypted data to the service apparatus, the authentication side encrypted data being obtained by encrypting authentication side original data using the service side public key that corresponds to the service ID and that is stored in the authentication side registering unit, the authentication side original data being any data prepared in the authentication apparatus,
the service side controller further comprises a service side decrypting unit configured to transmit to the authentication apparatus authentication side computed data obtained by performing predetermined computation on authentication side decrypted data, the authentication side decrypted data being obtained by decrypting the authentication side encrypted data received from the authentication apparatus, using the service side private key that is stored in the service side registering unit, and
the authentication side controller further comprises a service ID genuineness determining unit configured to determine that the service ID is genuine when the authentication side computed data received from the service apparatus matches data obtained by performing the predetermined computation on the authentication side original data.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

16/567,248Filed 11 Sep 2019

Priority

JP 2016-20643921 Oct 2016

Published

2 Jan 2020

Term ends

Not estimatedThe source records don’t support an estimate.

Classification17 codes

H04L 9/32
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: including means for…
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 9/0833
Involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]: involving conference or group key
H04L 9/0861
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: generation of secret information…

Information communication system for establishing pairing in information communication network

Life of this patent

Information communication system for establishing pairing in information communication network

Life of this patent

Abstract

Claims10