Device for authenticating user's access rights to resources and method

A device for authenticating user's access rights to resources by verifying legitimacy of proof data generated in order to prove said user's right, said device for authenticating user's access rights to resources comprising:

• first memory means for storing first authentication data;
• second memory means for storing unique identifying information of the user;
• third memory means for storing proof support information which are results obtained by the application of specified calculation to said the user unique identifying information and unique security characteristic information;
• fourth memory means for storing second authentication data;
• random number generation means;
• proof data generation means for generating proof data by the application of specified calculation to said first authentication data stored in said first memory means, said the user unique identifying information stored in said second memory means, and said proof support information stored in said third memory means;
• and
• verification means for verifying whether or not said proof data generated by said proof data generation means is generated based on said unique security characteristic information,
• said second authentication data is obtained by encrypting predetermined data by use of an encryption key corresponding to said decryption key,
• said random number generation means storing, in said first memory means, a set of a first authentication data C.sub.1 and a second authentication data C.sub.2 which are randomized by said random number,
• said verification means verifying the legitimacy of a value which is de-randomize proof data generated by said proof data generation means by verifying that the value is identical with decryption of the second authentication data C.sub.2 stored in said fourth memory means by decryption key which is said unique security characteristic information;
• provided that, in particular, said unique security characteristic information X is a decryption key in an asymmetric cryptosystem arranged in such a way as to satisfy a relationship expressed as Y=a.sup.x modp where p is a modulus and a is a positive integer.

A device for authenticating user's access rights to resources for authenticating a user's access rights by verifying whether or not proof data generated in order to prove a right of said user is valid, said device for authenticating user's access rights to resources comprising:

• first memory means for storing first authentication data;
• second memory means for storing user unique identifying information ;
• third memory means for storing proof support information which is an executed result which is obtained by executing a predetermined calculation on said user unique identifying information and unique security characteristic information;
• proof data generation means for generating proof data by executing predetermined calculations on authentication data stored in said first memory means, said user unique identifying information stored in said second memory means and said proof support information stored in said third memory mean;
• verification means for verifying whether or not proof data generated by said proof data generation means is generated based on said unique security characteristic information;
• and
• said unique security characteristic information being a decryption key in an asymmetric encryption key defined in a finite elliptic curve.

An access rights authentication method for authenticating the user's access rights by verifying the validity of proof data generated to prove user's right, said accesss rights authentication method comprising the steps of:

• a first memory step for storing first authentication data;
• a second memory step for storing user unique identifying information;
• a third memory step for storing proof support information which is obtained by effecting predetermined calculations on said user unique identifying information and unique security characteristic information;
• a proof data generating step for generating proof data by effecting predetermined calculations on said first authentication data stored at said first memory step, said user unique identifying information stored at said second memory step and said proof support information stored at said third memory step;
• and
• a proof data verifying step for verifying whether or not proof data generated at said proof data generating step is generated based on said unique security characteristic information,
• providing that, in particular, said unique security characteristic information X is a decryption key in an asymmetric cryptosystem arranged so as to satisfy a relationship of Y=a mod p in which p is a modulus and a is a positive integer, and Y is an encryption key corresponding to X,
• said proof data generating step generating a value which is obtained by exponentiation of said first authentication data stored at said first memory step with a value of said X under the modulus p,
• said proof data verifying step verifying, by use of proof data generated at said proof data generating step, whether or not data encrypted by said Y can be decrypted correctly.

An access rights authentication method for authenticating the user's access rights by verifying whether or not proof data generated to prove user's right is valid, said access rights authentication method comprising the steps of:

• a first memory step for storing first authentication data;
• a second memory step for storing user unique identifying information;
• a third memory step for storing proof support information which is obtained by effecting predetermined calculations on said user unique identifying information and unique security characteristic information;
• a fourth memory step for storing second authentication data;
• a random number generating step;
• a proof data generating step for generating proof data by effecting predetermined calculations on said first authentication data stored at said first memory step, said user unique identifying information stored at said second memory step, and said proof support information stored at said third memory step;
• and
• a proof data verifying step for verifying whether or not proof data generated at said proof data generating step is generated based on said unique security characteristic information,
• said second authentication data being data which is obtained by encrypting predetermined data by use of an encryption key corresponding to said decryption key,
• said random number generating step memorizes a set of a value which is obtained by randomizing first authentication data C.sub.1 and second authentication data C.sub.2 or a value which is obtained by randomizing second authentication data C.sub.2 by said first memory step,
• said proof data verifying step verifying legitimacy of the result which is obtained by de-randomizing proof data generated at said proof data generating step by verifying that the results is identical with decryption of said second authentication data C.sub.2 stored in said fourth memory step by said decryption key which is said unique security characteristic information,
• provided that, in particular, said unique security characteristic information X is a decryption key in an asymmetric cryptosystem arranged so as to satisfy a relationship of Y=a.sup.x modp in which p is a modulus and a is a positive integer, and Y is an encryption key corresponding to X.

An access rights authentication method for authenticating said user access rights by verifying the validity of proof data generated to prove user's right, said access rights authentication method comprising the steps of:

• a first memory step for storing first authentication data;
• a second memory step for storing user unique identifying information;
• a third memory step for storing proof support information which is obtained by effecting predetermined calculations on said user unique identifying information and unique security characteristic information;
• a proof data generating step for generating proof data by effecting predetermined calculations on said first authentication data stored at said first memory step, said user unique identifying information stored at said second memory step and said proof support information stored at said third memory step;
• and
• a proof data verifying step for verifying whether or not proof data generated at said proof data generating step is generated based on said unique security characteristic information,
• said unique security characteristic information being a decryption key of asymmetric key encryption defined in an elliptic curve on a finite field.