US 9,756,029 B2Granted

Method and system for authenticating at least one terminal requesting access to at least one resource

AssigneeMitsubishi Electric Corporation

InventorsNicolas Gresset, Herve Bonneville

Life of this patent

Estimating the term…

Loading patent…

Abstract

For authenticating at least one terminal requesting access to at least one resource, an authentication server performs: obtaining for each terminal at least one piece of authentication information; transmitting to a gateway device at least one checking function, or coefficients thereof. Each piece of authentication information is representative of a value such that, when inputted to respective checking function(s), the checking function(s) return(s) a predefined value. The gateway device performs: receiving from one terminal a request for getting access to the resource(s), said request being received in conjunction with a piece of authentication information; retrieving a checking function applicable to the received request; inputting the piece of authentication information provided by the terminal into the retrieved checking function, for obtaining an authentication result; accepting the request for getting access to the resource(s), when the authentication result equals said predefined value; and rejecting the request otherwise.

Claims12

Dependent claims

A method for authenticating at least one terminal requesting access to at least one resource, the access to the at least one resource being managed by an authentication server and a gateway device that routes data between the at least one terminal, the authentication server, and the at least one resource, the method comprising:

performing by the authentication server,
authenticating each of the at least one terminal for initial access to the at least one resource,
after authenticating each of the at least one terminal, offloading to the gateway device responsibility for authenticating the authenticated terminal for future access to the at least one resource by,
determining for the authenticated terminal first and second pieces of authentication information;
transmitting the first piece of authentication information to the authenticated terminal, and subsequently transmitting the second piece of authentication information to the authenticated terminal, wherein upon receiving the second piece of authentication information the authenticated terminal replaces the first piece of authentication information with the second piece of authentication information;
transmitting to the gateway device multiple checking functions, or coefficients thereof, corresponding to the authenticated terminal,
wherein each piece of authentication information is representative of a value such that, when inputted to a corresponding checking function, the corresponding checking function returns a predefined value, and
wherein each of the multiple checking functions returns a same predefined value when either the first or the second piece of authentication information is inputted thereto;
and
performing by the gateway device,
receiving from a particular one of the at least one terminal a first request for getting access to the at least one resource, said first request being received in conjunction with a piece of authentication information provided by the particular terminal;
retrieving a checking function applicable to the received request, from amongst the at least one checking function received from the authentication server corresponding to the particular terminal;
inputting the piece of authentication information provided by the particular terminal into the retrieved checking function, for obtaining an authentication result;
accepting the first request for getting access to the at least one resource, when the authentication result equals said predefined value;
and
rejecting the first request for getting access to the at least one resource, when the authentication result differs from said predefined value.

13 more elements

A system for authenticating at least one terminal requesting access to at least one resource, the system comprising an authentication server managing access to the at least one resource and a gateway device including means for routing data between the at least one terminal, the authentication server, and the at least one resource, the system comprising:

an authentication server programmed to,
authenticate each of the at least one terminal for initial access to the at least one resource,
after authenticating each of the at least one terminal, offload to the gateway device responsibility for authenticating the authenticated terminal for future access to the at least one resource by,
determining for the authenticated terminal first and second pieces of authentication information;
transmitting the first piece of authentication information to the authenticated terminal, and subsequently transmitting the second piece of authentication information to the authenticated terminal, wherein upon receiving the second piece of authentication information the authenticated terminal replaces the first piece of authentication information with the second piece of authentication information;
transmitting to the gateway device at least one checking function, or coefficients thereof, corresponding to the authenticated terminal,
wherein each piece of authentication information is representative of a value such that, when inputted to a corresponding checking function, the corresponding checking function returns a predefined value, and
wherein each of the multiple checking functions returns a same predefined value when either the first or the second piece of authentication information is inputted thereto;
and
a gateway device programmed to,
receive from a particular one of the at least one terminal a first request for getting access to the at least one resource, said first request being received in conjunction with a piece of authentication information provided by the particular terminal;
retrieve a checking function applicable to the received first request, from amongst the at least one checking function received from the authentication server corresponding to the particular terminal;
input the provided piece of authentication information into the retrieved checking function, for obtaining an authentication result;
accept the first request for getting access to the at least one resource, implemented when the authentication result equals said predefined value;
and
reject the first request for getting access to the at least one resource, implemented when the authentication result differs from said predefined value.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/438,157Filed 1 Nov 2013
Priority: EP 1219362721 Nov 2012
Published: US 2015/0249653 A13 Sep 2015
Granted: 5 Sep 2017
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0884
For authentication of entities: by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity…
H04L 63/02
Network architectures or network communication protocols for network security: for separating internal from external traffic, e.g. firewalls
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources