US 7,681,033 B2Granted

Device authentication system

AssigneeSony Corporation

InventorsTakayuki Miura, Tsuyoshi Ono, Naoshi Suzuki, Kouji Miyata

Life of this patent

Estimating the term…

Loading patent…

Abstract

A device authentication module and an encryption module can be connected via a dynamic link in a CE device. A random number is generated in an authentication server (5). The device authentication module (7) combines a pass-phrase and this random number to generate a digest, and transmits this and a device ID to the encryption module (8). The encryption module encrypts a communication pathway and transmits these items of information to the authentication server (5). The authentication server (5) searches for the pass-phrase based on the device ID and combines this and the generated random number to generate a digest. This digest is compared with the digest received from the encryption module (8) for device authentication. The encryption module (8) receives from the device authentication module (7) not the pass-phrase but a digest, and therefore can be connected via a dynamic link instead of a static link.

Claims16

Dependent claims

A device authentication system comprising a terminal device including confidential information for device authentication and an authentication server for granting device authentication to the terminal device using the confidential information, wherein

the terminal device acquires a random number and random number identification information identifying the random number, and generates a conversion value by converting a set of the acquired random number and the confidential information using a one-way function;
the authentication server acquires (i) the random number acquired by the terminal device, using the random number identification information acquired by the terminal device, (ii) the confidential information of the terminal device, and (iii) the conversion value generated by the terminal device;
a conversion value is generated by the authentication server by converting the set of the acquired random number and the confidential information acquired by the authentication server using the same one-way function as that used by the terminal device;
and
the conversion value generated by the terminal device is compared with the conversion value generated by the authentication server.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/518,973Filed 21 Apr 2004
Priority: JP 2003-11575521 Apr 2003
Published: US 2006/0117175 A11 Jun 2006
Granted: 16 Mar 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

H04L 63/0435
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…
G06F 21/445
Program or device authentication: by mutual authentication, e.g. between devices or programs
H04L 9/321
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…
H04L 9/3228
Using a predetermined code, e.g. password, passphrase or PIN: one-time or temporary data, i.e. information which is sent for every authentication…