System, method and program for off-line user authentication

An off-line user authentication method for use in an off-line user authentication system designed to arrange a plurality of pattern elements in a given pattern format so as to create a presentation pattern to be presented to a user subject to authentication, and apply a one-time-password derivation rule serving as an off-line password of said user to certain ones of the pattern elements included in said presentation pattern at specific positions so as to create a one-time password, said off-line user authentication system including an off-line authentication support server for managing respective user IDs and passwords of users of the system, and an off-line authentication client for authenticating the users in an off-line state of being not network-connected while being connectable to said off-line authentication support server via a network, said off-line user authentication method comprising:

• pre-storing respective user IDs and one-time-password derivation rules of the users in said off-line authentication support server in associated relation with each other on a user-by-user basis;
• allowing the user subject to authentication to enter his/her user ID into said off-line authentication client;
• transmitting said entered user ID from said off-line authentication client to said off-line authentication support server via the network,
• allowing said off-line authentication support server to generate, in accordance with a given generation rule, a plurality of pattern seed values each adapted to be combined with one of the user IDs so as to allow a presentation pattern to be uniquely determined;
• receiving said user ID transmitted from said off-line authentication client, at said off-line authentication support server via the network;
• allowing said off-line authentication support server to apply the one-time-password derivation rule associated with said received user ID to respective sets of pattern elements included in a plurality of presentation patterns formed from a plurality of pattern element sequences which are created based on said received user ID and said plurality of generated pattern seed values and in accordance with a given pattern-element-sequence creation rule, and subject the respective obtained results to a one-way function algorithm so as to create a plurality of verification codes;
• transmitting said plurality of generated pattern seed values from said off-line authentication support server to the off-line authentication client of said user subject to authentication, via the network;
• transmitting said plurality of generated verification codes from said off-line authentication support server to the off-line authentication client of said user subject to authentication, via the network;
• receiving said plurality of pattern seed values transmitted from said off-line authentication support server, at said off-line authentication client via the network;
• storing said plurality of received pattern seed values in said off-line authentication client;
• receiving said plurality of verification codes transmitted from said off-line authentication support server, at said off-line authentication client via the network;
• storing said plurality of received verification codes in said off-line authentication client;
• allowing said off-line authentication client to select one of the plurality of stored pattern seed values so as to allow said selected pattern seed value to be used in authenticating said user;
• allowing said off-line authentication client to determine one of said plurality of verification codes which corresponds to said selected pattern seed value;
• allowing said off-line authentication client to create a pattern element sequence based on said entered user ID and said selected pattern seed value and in accordance with said given pattern-element-sequence creation rule;
• allowing said off-line authentication client to arrange the pattern elements included in said created pattern element sequence, in said given pattern format so as to create a presentation pattern, and display said created presentation pattern on a screen;
• allowing said user to enter into said off-line authentication client a one-time password created as a result of applying said one-time-password derivation rule to the pattern elements included in said displayed presentation pattern;
• and
• allowing said off-line authentication client to compare a result of subjecting said entered one-time password to said one-way function algorithm with said determined verification code, and successfully authenticate said user off-line if they are identical to one another.

An off-line authentication client serving as a terminal for authenticating a user subject to authentication, off-line, in an off-line user authentication system designed to arrange a plurality of pattern elements in a given pattern format so as to create a presentation pattern to be presented to said user, and apply a one-time-password derivation rule serving as an off-line password of said user to certain ones of the pattern elements included in said presentation pattern at specific positions so as to create a one-time password, said off-line authentication client comprising:

• pattern-seed-value input section for pre-receiving therethrough a plurality of pattern seed values pre-generated in accordance with a given generation rule and each adapted to be combined with a user ID of said user so as to allow a presentation pattern to be uniquely determined;
• pattern-seed-value storage section for pre-storing said plurality of pre-received pattern seed values;
• verification-code input section for pre-receiving a plurality of verification codes pre-created by applying the one-time-password derivation rule serving as a password associated with said user subject to authentication to respective sets of pattern elements included in a plurality of presentation patterns formed from a plurality of pattern element sequences which are created based on said user ID of the user subject to authentication and said plurality of pre-generated pattern seed values and in accordance with a given pattern-element-sequence creation rule, and subjecting the respective obtained results to a one-way function algorithm;
• verification-code storage section for pre-storing said plurality of pre-received verification codes;
• user-ID input section for allowing the user subject to authentication to enter his/her user ID therefrom;
• pattern-seed-value selector for selecting one of the plurality of pattern seed values pre-stored in said pattern-seed-value storage section, to allow said selected pattern seed value to be used in authenticating said user;
• verification-code determination section for determining one of said plurality of verification-codes which corresponds to said selected pattern element sequence;
• pattern-element-sequence creation section for creating a pattern element sequence based on said entered user ID and said selected pattern seed value and in accordance with said given pattern-element-sequence creation rule;
• pattern display section for arranging the pattern elements included in said created pattern element sequence, in said given pattern format, to create a presentation pattern, and displaying said created presentation pattern on a screen;
• one-time-password input section for allowing said user to enter therefrom a one-time password created as a result of applying said one-time-password derivation rule to the pattern elements included in said displayed presentation pattern;
• and
• user authentication section for comparing a result of subjecting said entered one-time password to said one-way function algorithm with said determined verification code, and successfully authenticating said user off-line if they are identical to one another.

An off-line authentication method for use in an off-line authentication client device serving as a terminal for authenticating a user subject to authentication, off-line, in an off-line user authentication system designed to arrange a plurality of pattern elements in a given pattern format so as to create a presentation pattern to be presented to said user, and apply a one-time-password derivation rule serving as an off-line password of said user to certain ones of the pattern elements included in said presentation pattern at specific positions so as to create a one-time password, said off-line authentication method comprising:

• pre-receiving a plurality of pattern seed values pre-generated in accordance with a given generation rule and each adapted to be combined with a user ID of said user so as to allow a presentation pattern to be uniquely determined;
• pre-storing said plurality of pre-received pattern seed values;
• pre-receiving a plurality of verification codes pre-created by applying the one-time-password derivation rule serving as a password associated with said user subject to authentication to respective sets of pattern elements included in a plurality of presentation patterns formed from a plurality of pattern element sequences which are created based on said user ID of the user subject to authentication and said plurality of pre-generated pattern seed values and in accordance with a given pattern-element-sequence creation rule, and subjecting the respective obtained results to a one-way function algorithm;
• pre-storing said plurality of pre-received verification codes;
• allowing the user subject to authentication to enter his/her user ID;
• selecting one of the plurality of pre-stored pattern seed values to allow said selected pattern seed value to be used in authenticating said user;
• determining one of said plurality of verification-codes which corresponds to said selected pattern element sequence;
• creating a pattern element sequence based on said entered user ID and said selected pattern seed value and in accordance with said given pattern-element-sequence creation rule;
• arranging the pattern elements included in said created pattern element sequence, in said given pattern format, to create a presentation pattern, and displaying said created presentation pattern on a screen;
• allowing said user to enter a one-time password created as a result of applying said one-time-password derivation rule to the pattern elements included in said displayed presentation pattern;
• and
• comparing, by the off-line authentication client device, a result of subjecting said entered one-time password to said one-way function algorithm with said determined verification code, and successfully authenticating said user off-line if they are identical to one another.

A non-transitory computer-readable storage medium storing an off-line authentication program that causes an off-line computer in an off-line user authentication system to execute an off-line authentication method, said off-line user authentication system being designed to arrange a plurality of pattern elements in a given pattern format so as to create a presentation pattern to be presented to said user, and apply a one-time-password derivation rule serving as an off-line password of said user to certain ones of the pattern elements included in said presentation pattern at specific positions so as to create a one-time password, said off-line authentication method comprising:

• pre-receiving a plurality of pattern seed values pre-generated in accordance with a given generation rule and each adapted to be combined with a user ID of said user so as to allow a presentation pattern to be uniquely determined;
• pre-storing said plurality of pre-received pattern seed values;
• pre-receiving a plurality of verification codes pre-created by applying the one-time-password derivation rule serving as a password associated with said user subject to authentication to respective sets of pattern elements included in a plurality of presentation patterns formed from a plurality of pattern element sequences which are created based on said user ID of the user subject to authentication and said plurality of pre-generated pattern seed values and in accordance with a given pattern-element-sequence creation rule, and subjecting the respective obtained results to a one-way function algorithm;
• pre-storing said plurality of pre-received verification codes;
• allowing the user subject to authentication to enter his/her user ID;
• selecting one of the plurality of pre-stored pattern seed values to allow said selected pattern seed value to be used in authenticating said user;
• determining one of said plurality of verification-codes which corresponds to said selected pattern element sequence;
• creating a pattern element sequence based on said entered user ID and said selected pattern seed value and in accordance with said given pattern-element-sequence creation rule;
• arranging the pattern elements included in said created pattern element sequence, in said given pattern format, to create a presentation pattern, and displaying said created presentation pattern on a screen;
• allowing said user to enter a one-time password created as a result of applying said one-time-password derivation rule to the pattern elements included in said displayed presentation pattern;
• and
• comparing a result of subjecting said entered one-time password to said one-way function algorithm with said determined verification code, and successfully authenticating said user off-line if they are identical to one another.