US 5,784,464 AGranted

System for and method of authenticating a client

AssigneeFujitsu Limited

InventorsRyota Akiyama, Akio Munakata, Yuzuru Koga, Masayuki Ishizaki

Life of this patent

Estimating the term…

Loading patent…

Abstract

A key management unit of a service provider system generates an individual key corresponding to a portable module connected to a service client making an access request and informs an authenticating unit of this individual key. The individual key is stored beforehand also in the portable module. A random-number generator generates a random number, transmits this random number to the portable module and informs the authenticating unit of it. The portable module encrypts the random number with the individual key and sends it back to the service provider system. An encrypting portion of the authenticating unit encrypts the random number with the individual key. A comparator of the authenticating unit compares data encrypted by the encrypting portion with encrypted data transmitted from the portable module and, if the two items of data are coincident with each other, confirms an access request from the portable module.

Claims8

Dependent claims

A system for authenticating a client in a data distributing system having a data supplying apparatus for holding data and a client receiving the data distributed via a communication interface from said data supplying apparatus, said data supplying apparatus comprising:

a key outputting unit for outputting a first key generated by processing identification data intrinsic to each said client;
random-number generating means for generating a random number in response to an access request from said client;
first encrypting means for encrypting the random number and the identification data with said first key and thereby outputting a first authenticator;
first transmitting means for transmitting the random number to said client;
first receiving means for receiving a second authenticator from said client;
and
comparing means for comparing the first and second authenticators with each other and, if the two authenticators are coincident with each other, authenticating the access request from said client;
said client comprising:
identification data holding means for holding an identification data intrinsic to said client;
access requesting means for making an access request to said data supplying apparatus with said identification data;
second receiving means for receiving the random number transmitted from said data supplying apparatus;
key holding means for holding a second key identical with said first key;
second encrypting means for encrypting the random number and said identification data with the second key and thereby outputting the second authenticator;
and
second transmitting means for transmitting the second authenticator to said data supplying apparatus.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 08/594,895Filed 31 Jan 1996
Priority: JP 7-1084082 May 1995
Granted: 21 Jul 1998
Term ends: Not estimatedThe source records don’t support an estimate.

Classification27 codes

H04L 9/3271
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
G06F 21/10
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting distributed…
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
H04H 60/15
Arrangements for conditional access to broadcast information or to broadcast-related services: on receiving information