EP0986209A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Remote authentication system
Assignee: Mitsubishi Electric Corp
•
Filing: 1999-06-22
•
Granted: —
•
Expires: 2019-06-22
Abstract
Abstract To obtain a remote authentication system that securely authenticates with protecting biometrics information, which is user's personal information, and is firm on security when performing authentication of a person with the biometrics information, and a remote authentication method. The present invention encrypts biometrics information that is user's personal information, and transfers the biometrics information over a network in such a state that only an authentication server, which the user assigns, can decode the biometrics information. Therefore, it is possible to securely protect user's privacy that is the biometrics information in a style of reflecting user's intention, and to prevent reuse of invalid authentication information since it is possible to confirm the date and time, when the authentication information was generated, by the authentication server. Furthermore, it is possible to keep the security of a system firm since an authenticated side can confirm whether the user is authenticated.
Inventors
- 👤 Hiroshi c/o Mitsubishi Denki K.K. Nakamura
- 👤 Teruko c/o Mitsubishi Denki K.K. Fujii
- 👤 Tetsuo c/o Mitsubishi Denki K.K. Sadakane
- 👤 Yoshimasa c/o Mitsubishi Denki K.K. Baba
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-05 13:27
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32; G06F21/33; H04L63/08; H04L63/0861; H04L9/00; H04L9/08; H04L9/0861; H04L9/0866; H04L9/32; H04L9/321; H04L9/3226; H04L9/3231; G06F2221/00; G06F2221/21; G06F2221/2101
Claims Analysis
Total Claims: 7
Claim 1
Independent Claim
275 words
A remote authentication system in which an
authentication server 3, an application server 4, and a user
terminal 5 are connected to a network 2 respectively, and
which authenticates a user using the user terminal, wherein
the authentication server has a pair of a public key and a
secret key in a public key encryption method, announces the
public key, and conceals the secret key; wherein at least one kind or a plural kind of
biometrics acquisition apparatus 6 is connected to the user
terminal; wherein the biometrics acquisition apparatus:
encrypts user's biometrics information, acquired at the time
of authentication, with a common key in a common key
encryption method; acquires date and time information,
creates a message digest with connecting the date and time
information with the common key, and further encrypts the
message digest with the common key; acquires the public key
of the authentication server, which the user assigns, and
encrypts the common key with the public key of the
authentication server; and transfers the biometrics
information encrypted, the common key and date and time
information, which is encrypted, and the message digest
encrypted with connecting the date and time information with
the common key, as authentication information to the user
terminal; wherein the user terminal and the application server
transfer the authentication information to the
authentication server; and wherein the authentication server: decodes user's
biometrics information with the common key acquired by
decoding the authentication information, which is
transferred, with the secret key; authenticates the user
with the biometrics information; encrypts result of
authentication and a message digest of the result of the
authentication; and transfers both to the application server.
Claim 2
Dependent Claim
273 words
A remote authentication system in which an
authentication server 3, an application server 4, and a user
terminal 5 are connected to a network 2 respectively, and
which authenticates a user using the user terminal, wherein
the authentication server has a pair of a public key and a
secret key in a public key encryption method, announces the
public key, and conceals the secret key, and at least one
kind or a plural kind of biometrics acquisition apparatus 6
is connected to the user terminal; wherein the biometrics acquisition apparatus:
encrypts user's biometrics information, acquired at the time
of authentication, with a common key in a common key
encryption method; acquires date and time information,
creates a message digest with connecting the date and time
information with the common key, further encrypts the
message digest with the common key; acquires the public key
of the authentication server, which the user assigns;
encrypts the common key with the public key of the
authentication server; and transfers the biometrics
information encrypted, the common key and date and time
information, which is encrypted, and the message digest
encrypted with connecting the date and time information with
the common key, as authentication information to the user
terminal; wherein the user terminal transfers the
authentication information to the authentication server; and wherein the authentication server: decodes user's
biometrics information with the common key acquired by
decoding the authentication information, which is
transferred, with the secret key; authenticates the user
with the biometrics information; encrypts result of
authentication and a message digest of the result of the
authentication with the secret key; and transfers both to
the user terminal.
Claim 3
Dependent Claim
150 words
The remote authentication system according to any
one of claims 1 and 2, wherein the biometrics acquisition
apparatus transfers biometrics information to the user
terminal without encrypting the biometrics information at
the time of authentication; and wherein the user terminal: encrypts the user's
biometrics information, which is obtained, with a common key
in a common key encryption method; acquires a public key of
a authentication server that a user assigns; encrypts the
common key with the public key of the authentication server;
acquires date and time information, creates a message digest
with connecting the date and time information with the
common key, encrypts the message digest with the common key;
and transfers the biometrics information encrypted, the
common key and date and time information, which is encrypted,
and the message digest encrypted with connecting the date
and time information with the common key, as authentication
information to the user terminal.
Claim 4
Dependent Claim
59 words
The remote authentication system according to any
one of claims 1 to 3, wherein the user terminal uses
biometrics information as a part or all of random numbers
for creating the common key when, at the time of
authentication, the user terminal creates the common key in
a common key encryption method for encrypting the user's
biometrics information acquired.
Claim 5
Dependent Claim
66 words
The remote authentication system according to any
one of claims 1 to 3, wherein the biometrics acquisition
apparatus includes an authentication unit of an
administrator administrating the biometrics acquisition
apparatus and an authentication unit of an initializer
initializing the biometrics acquisition apparatus; and wherein the two authentication units perform
authentication separately, and performs initialization with
authentication of the initializer even if the administrator
is not authenticated.
Claim 6
Dependent Claim
128 words
The remote authentication system according to any
one of claims 1 to 3, wherein the authentication server:
saves a historic record of a matching rate that is result of
matching biometrics at the time of user authentication;
compares a matching rate with an average matching rate at
the time of identifying a user as a principal until the
previous occasion if the authentication server does not
identify the user as the principal at the time of user
authentication; confirms whether a matching rate at this
time changes more largely than a preset value determined by
an administrator; and informs a contact, who is registered
beforehand, if a number of failed times due to changes more
largely than a fixed value reaches a fixed value determined
by the administrator.
Claim 7
Dependent Claim
296 words
The remote authentication system according to any
one of claims 1 to 3, wherein the authentication server:
saves historic records of matching rates that are results of
matching biometrics at the time of user authentication;
compares a matching rate with a matching rate at the time of
identifying a user as a principal until the previous
occasion at the time of user authentication if the
authentication server identifies the user as the principal;
makes the user authentication unsuccessful if the two
matching rates are the same rates and a message digest of
biometrics information is not saved, performs message digest
calculation of biometrics information at this time, saves
the message digest of biometrics information with the
matching rate; saves a message digest of biometrics
information at this time with a matching rate as a pair with
calculating the message digest of biometrics information at
this time if the two matching rates are the same and a
message digest is saved, compares the message digest of
biometrics information at this time with the message digest
of biometrics information at the same matching rate in the
past, identifies the user as a principal if both message
digests are different from each other; does not identify the
user as a principal if a pair of a matching rate and a
message digest at this time completely coincides with a pair
of a matching rate and a message digest in the past; and
informs a contact, who is registered beforehand, if a number
of cases that the pair of the matching rate and message
digest at this time completely coincides with the pair of
the matching rate and message digest in the past reaches a
value equal to or more than a fixed value which is
determined by an administrator.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.