US 8,800,012 B2Granted

System and method for authentication in wireless networks by means of one-time passwords

AssigneeNEC Corporation

InventorYasuhiro Mizukoshi

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention is directed to perform high-reliable authentication using a one-way function that a communication is a communication which was performed with the same apparatus to be authenticated by storing a password only in an apparatus to be authenticated (it is unnecessary to store a password in both of an authentication apparatus and an apparatus to be authenticated) without transmitting a challenge code. When a setting is updated in a setting management server, authentication is performed by using a one-time password obtained last time. A sound communication terminal performs a process using a hash function once on a one-time password transmitted this time, and performs authentication by determining whether the processed one-time password matches a one-time password obtained last time or not. Whether the information at the time of the change in the setting is proper or not is determined by a sound terminal.

Claims4

Dependent claims

An authentication system comprising an authentication apparatus and an apparatus to be authenticated,

wherein the apparatus to be authenticated is a setting management apparatus for managing setting information of the authentication apparatus, and comprises:
a storing unit which stores a password and information indicative of the number of times of processing, for which the password is processed repeatedly with a predetermined one-way function;
a first transmitting unit which transmits an encrypted password obtained by processing the password with the one-way function for the number of times of processing, and the information indicative of the number of times of processing to the authentication apparatus;
and
a second transmitting unit which transmits an encrypted password obtained by processing the password with the one-way function for the subtracted number of times derived by subtracting a predetermined subtraction number from the number of times of processing, and the subtracted number of times to the authentication apparatus,
wherein the storing unit stores a password received from the authentication apparatus, as a new password,
wherein the authentication apparatus comprises:
an authentication unit performing authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the encrypted password that was processed for the subtracted number of times, and the information indicative of the subtracted number of times,
a transmitting unit transmitting a new password to the apparatus to be authenticated,
wherein the apparatus to be authenticated comprises a setting information transmitting unit which, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmits the setting information of the authentication apparatus to the authentication apparatus,
further comprising a connecting unit connecting the apparatus to be authentication to the authentication apparatus when the apparatus to be authenticated becomes accessible to the authentication apparatus after the apparatus to be authenticated fails to connect to the authentication apparatus;
and
the setting information transmitting unit transmits the setting information to the authentication apparatus connected as a network for setting by the setting connecting unit.

10 more elements

An authenticating method in an authentication system comprising an authentication apparatus and an apparatus to be authenticated, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, comprising:

a first transmitting step of transmitting from the apparatus to be authenticated an encrypted password obtained by processing a password with a predetermined one-way function for a predetermined number of times of processing, and information indicative of the number of times of processing to the authentication apparatus;
a second transmitting step of transmitting an encrypted password obtained by processing the password with the one-way function for the number of times derived by subtracting a predetermined subtraction number from the number of times of processing, and the subtracted number of times to be authenticated to the authentication apparatus;
and
a setting information transmitting step of, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmitting the setting information of the authentication apparatus to the authentication apparatus,
a storing step of storing a password received from the authentication apparatus, as a new password,
wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the encrypted password that was processed for the subtracted number of times, and the information indicative of the subtracted number of times,
wherein the authentication transmits a new password to the apparatus to be authenticated, and
wherein the authenticating method in an authentication system further comprises a setting connecting step of connecting the apparatus to be authenticated to the authentication apparatus when the apparatus to be authenticated becomes accessible to the authentication apparatus after the apparatus to be authenticated fails to connect to the authentication apparatus and a setting information transmitting step of transmitting the setting information to the authentication apparatus in the setting connecting step.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/666,557Filed 1 Nov 2012 · division
Priority: JP 2006-1885407 Jul 2006
Published: US 2013/0061052 A17 Mar 2013
Granted: 5 Aug 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/0838
Using passwords: using one-time-passwords
H04L 9/3228
Using a predetermined code, e.g. password, passphrase or PIN: one-time or temporary data, i.e. information which is sent for every authentication…
H04L 9/3236
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
H04W 12/068
Authentication: using credential vaults, e.g. password manager applications or one time password [OTP] applications

Family

PCT/JP2007/063057Parent of this division · filed 22 Jun 2007
US 2013/0061052 A1Pre-grant publication · published 7 Mar 2013
Application12/307,883Parent of this division
US 8,327,140 B2Parent of this division
US 2009/0240939 A1Published application
US 8,800,012 B2This patent

From the US filing history. Foreign family members aren’t listed.