# US 2022/0286296 A1 · Terminal registration system and terminal registration method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2022/0286296 A1
- Document ID: US20220286296A1
- Status: Published application
- Kind: A1
- Application number: 17/824,488
- Filed: 2022-05-25
- Published: 2022-09-08
- Earliest claimed: 2018-02-06
- Assignees: Nippon Telegraph and Telephone Corporation
- Applicants: Nippon Telegraph and Telephone Corporation
- Inventors: Hideo Nishimura; Takao Yamashita; Yasuhiko Yoshimura; Satoru Furukawa
- Web page: https://patentgrep.com/patent/US20220286296A1

## CPC

- H04L 9/3247: {involving digital signatures}
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/335: {for accessing specific resources, e.g. using Kerberos tickets}
- G06F 21/45: Structures or tools for the administration of authentication
- H04L 9/3271: {using challenge-response}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

[Problem] To provide a terminal registration system and a terminal registration method for improving user convenience in registration of a new terminal to a plurality of service sites. [Solution] The registered terminal 1 includes an Authenticator 10 including service site list information 110 that associates private keys and URLs for access to service sites with each other. A Registration Manager 100 acquires the service site list information 110 from the Authenticator 10 of the registered terminal 1. Then, the Registration Manager 100 performs FIDO authentication for a registration target service site using a private key of the registered terminal 1, on the basis of the acquired service site list information 110, and performs Registration of a newly generated cryptographic key at the new terminal 2.

## Claims

### Claim 1

A terminal registration system, comprising one or more computers, in which a plurality of terminals performing Fast IDentity Online (FIDO) authentication using private keys are communicatively connected to a service site utilized by the plurality of terminals, and a new terminal is registered on a plurality of service sites using a registered terminal, the registered terminal including service site list information that associates the private keys and uniform resource locators (URLs) for access to the plurality of service sites with each other in an Authenticator, the terminal registration system comprising a registration function unit configured to:
acquire the service site list information to perform FIDO authentication for a registration target service site using a private key of the registered terminal, based on the service site list information; and
perform Registration of a cryptographic key newly generated at the new terminal.

### Claim 2 (depends on 1)

The terminal registration system according to claim 1, wherein:
the registration function unit is located on the new terminal side,
the registration function unit acquires the service site list information from the Authenticator of the registered terminal to perform FIDO authentication to log in to each service site using the registered terminal as an external Authenticator by the CTAP, based on the service site list information, and
the new terminal performs Registration related to Authenticator of the new terminal in an established session.

### Claim 3 (depends on 1)

The terminal registration system according to claim 1, wherein:
the registration function unit notifies a user of a registration progress status for each service site.

### Claim 4 (depends on 1)

The terminal registration system according to claim 1, wherein:
the registration function unit performs retry control for performing a predetermined number of retries in a case where registration on each service site fails.

### Claim 5

A terminal registration method for a terminal registration system in which a plurality of terminals performing Fast IDentity Online (FIDO) authentication using private keys are communicatively connected to a service site utilized by the plurality of terminals, and a new terminal is registered on a plurality of service sites using a registered terminal, the registered terminal including service site list information that associates the private keys and uniform resource locators (URLs) for access to the plurality of service sites with each other in an Authenticator,
the terminal registration method comprising the steps of, performed by a registration function unit:
acquiring the service site list information to perform FIDO authentication for a registration target service site using a private key of the registered terminal, based on the service site list information; and
performing Registration of a cryptographic key newly generated at the new terminal.