US6148404A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Authentication system using authentication information valid one-time
Assignee: Biprogy Inc
•
Filing: 1998-05-27
•
Granted: 2000-11-14
•
Expires: 2018-05-27
Abstract
Abstract An authentication method adopting simple steps, in which it is difficult for a third person, who steals authentication data, to reuse (to replay, for attacking purpose) the stolen authentication data. First inspection data (value=D n-1 ), used for inspecting client's authentication data, is stored in a server in advance, while the client also stores first seed data (value=D n-1 ) for generating authentication data. The client first sends an authentication request to the server, and receives an authentication data request from the server. Then the client generates authentication data (value=D n ) by enciphering the first seed data (value=D n-1 ) using a client's secret key (K s ), and sends the enciphered data to the server. The server deciphers the received authentication data (value=D n ) by using a public key (K p ) of the client to generate second inspection data (value=D n-1 ), compares the second inspection data with the first inspection data (value=D n-1 ), and when they are coincident, grants the authentication request and stores the authentication data (value=D n ) in place of the first inspection data. Upon receiving the grant, the client stores the authentication data (value=D n ) as second seed data in place of the first seed data (value=D n-1 ).
Inventors
- 👤 Naonobu Yatsukawa
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 13:58
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0891; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/335; H04L9/0861; H04L9/0869; H04L9/0894; H04L9/32; H04L9/321; H04L9/3213; H04L9/3226; H04L9/3247; H04L9/3263; H04L9/3271; H04L9/3297; G06F2211/00; G06F2211/007; G06F2211/008; G06F2221/00; G06F2221/21; G06F2221/2151
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
246 words
An authentication method for authenticating an authentication requester by using a public-key enciphering scheme in response to an authentication request sent by the authentication requester, comprising: a storing step of storing first inspection data into an authenticator's memory in advance for inspecting authentication data of the authentication requester; an authentication request sending step of sending an authentication request from the authentication requester to the authenticator; an authentication-data requesting step of sending an authentication-data request from the authenticator to the authentication requester in response to the authentication request sent by the authentication requester; an authentication-data sending step of sending from the authentication requester to the authenticator, in response to the authentication-data request, first authentication information which is generated by enciphering first seed data held by the authentication requester with utilizing a secret key of the authentication requester, and storing the generated first authentication data as second seed data for a next authentication request in place of the stored first seed data; a comparing step of deciphering the first authentication data, sent by the authentication requester, by utilizing a public key of the authentication requester, generating second inspection data, and comparing the second inspection data with the first inspection data stored in advance; and an updating step of notifying the authentication requester of grant of the authentication request in a case where the second inspection data coincides with the first inspection data, and storing the first authentication data in place of the first inspection data in the memory.
Claim 2
Dependent Claim
246 words
An authentication method for authenticating an authentication requester by using a public-key enciphering scheme in response to an authentication request sent by the authentication requester, comprising: a storing step of storing first inspection data into an authenticator's memory in advance for inspecting authentication data of the authentication requester; an authentication request sending step of sending an authentication request from the authentication requester to the authenticator; an authentication-data requesting step of sending an authentication-data request from the authenticator to the authentication requester in response to the authentication request sent by the authentication requester; an authentication-data sending step of sending from the authentication requester to the authenticator, in response to the authentication-data request, first authentication information which is generated by enciphering first seed data held by the authentication requester with utilizing a secret key of the authentication requester, and storing the generated first authentication data as second seed data for a next authentication request in place of the stored first seed data; a comparing step of deciphering the first authentication data, sent by the authentication requester, by utilizing a public key of the authentication requester, generating second inspection data, and comparing the second inspection data with the first inspection data stored in advance; and an updating step of notifying the authentication requester of grant of the authentication request in a case where the second inspection data coincides with the first inspection data, and storing the first authentication data in place of the first inspection data in the memory.
Claim 3
Dependent Claim
145 words
An authentication server storing authentication data for granting authentication in response to an authentication request sent by a plurality of authentication requesters, comprising: a memory storing inspection data for inspecting authentication data of an authentication requester for each authentication request; sending means for sending an authentication-data request message to an arbitrary authentication requester when the server receives an authentication request from the arbitrary authentication requester; comparing means for generating new inspection data by deciphering authentication data sent by the authentication requester by utilizing a public key of the authentication requester, and comparing the newly generated inspection data with the inspection data stored in said memory; and grant means for granting the authentication request in a case where the newly generated inspection data coincides with the stored inspection data, and storing the authentication data sent by the authentication requester in place of the stored inspection data.
Claim 4
Dependent Claim
145 words
An authentication server storing authentication data for granting authentication in response to an authentication request sent by a plurality of authentication requesters, comprising: a memory storing inspection data for inspecting authentication data of an authentication requester for each authentication request; sending means for sending an authentication-data request message to an arbitrary authentication requester when the server receives an authentication request from the arbitrary authentication requester; comparing means for generating new inspection data by deciphering authentication data sent by the authentication requester by utilizing a public key of the authentication requester, and comparing the newly generated inspection data with the inspection data stored in said memory; and grant means for granting the authentication request in a case where the newly generated inspection data coincides with the stored inspection data, and storing the authentication data sent by the authentication requester in place of the stored inspection data.
Claim 5
Dependent Claim
132 words
An authentication apparatus for granting authentication, in response to an authentication request sent by an authentication requester, in support of an external authentication server, comprising: a memory storing seed data from which authentication data is generated for authentication of the authentication requester; sending/receiving means for sending an authentication request message to the authentication server, and receiving an authentication-data request message from the authentication server responding to the authentication request message; enciphering means for enciphering, in response to the authentication-data request message sent by the authentication server, the seed data stored in said memory by utilizing a secret key to generate authentication data; and authentication-data sending means for sending the generated authentication data to the authentication server, and storing the generated authentication data in said memory in place of the stored seed data.
Claim 6
Dependent Claim
132 words
An authentication apparatus for granting authentication, in response to an authentication request sent by an authentication requester, in support of an external authentication server, comprising: a memory storing seed data from which authentication data is generated for authentication of the authentication requester; sending/receiving means for sending an authentication request message to the authentication server, and receiving an authentication-data request message from the authentication server responding to the authentication request message; enciphering means for enciphering, in response to the authentication-data request message sent by the authentication server, the seed data stored in said memory by utilizing a secret key to generate authentication data; and authentication-data sending means for sending the generated authentication data to the authentication server, and storing the generated authentication data in said memory in place of the stored seed data.
Claim 7
Dependent Claim
220 words
An authentication terminal apparatus for granting authentication to an authentication request sent by an authentication requester via a storage medium, in support of an external authentication server, comprising: a main body; and interface means for accepting a storage medium storing: seed data used for generating authentication data to authenticate an authentication requester, a secret key of the authentication requester and a program for generating authentication data based on the seed data utilizing the secret key, and said main body comprising: receiving means for receiving an authentication request from the authentication requester; requesting means for sending an authentication request message to the authentication server in response to the authentication request, and receiving an authentication-data request message from the authentication server responding to the authentication request; instructing means for executing the program stored in the storage medium via said interface means in response to the authentication-data request message, said instructing means instructing the program to generate authentication data of the authentication requester based on the seed data by using the secret key, instructing the program to return the generated authentication data to the main body via said interface means, and instructing the program to update the seed data stored in the storage medium with the generated authentication data; and authentication-data sending means for sending the returned authentication data to the authentication server.
Claim 8
Dependent Claim
220 words
An authentication terminal apparatus for granting authentication to an authentication request sent by an authentication requester via a storage medium, in support of an external authentication server, comprising: a main body; and interface means for accepting a storage medium storing: seed data used for generating authentication data to authenticate an authentication requester, a secret key of the authentication requester and a program for generating authentication data based on the seed data utilizing the secret key, and said main body comprising: receiving means for receiving an authentication request from the authentication requester; requesting means for sending an authentication request message to the authentication server in response to the authentication request, and receiving an authentication-data request message from the authentication server responding to the authentication request; instructing means for executing the program stored in the storage medium via said interface means in response to the authentication-data request message, said instructing means instructing the program to generate authentication data of the authentication requester based on the seed data by using the secret key, instructing the program to return the generated authentication data to the main body via said interface means, and instructing the program to update the seed data stored in the storage medium with the generated authentication data; and authentication-data sending means for sending the returned authentication data to the authentication server.
Claim 9
Dependent Claim
140 words
A storage medium storing an authentication program for granting authentication to an authentication request sent by an authentication requester, in support of an external authentication server, said authentication program comprising: first program code means for storing seed data in a memory for generating authentication data to authenticate the authentication requester; second program code means for sending an authentication request message to the authentication server; third program code means for receiving the authentication request message from the authentication server; fourth program code means for generating authentication data based on the seed data stored in the memory by utilizing a secret key in response to the authentication data request message; and fifth program code means for sending the generated authentication data to the authentication server and storing the generated authentication data as new seed data in place of the old seed data.
Claim 10
Dependent Claim
140 words
A storage medium storing an authentication program for granting authentication to an authentication request sent by an authentication requester, in support of an external authentication server, said authentication program comprising: first program code means for storing seed data in a memory for generating authentication data to authenticate the authentication requester; second program code means for sending an authentication request message to the authentication server; third program code means for receiving the authentication request message from the authentication server; fourth program code means for generating authentication data based on the seed data stored in the memory by utilizing a secret key in response to the authentication data request message; and fifth program code means for sending the generated authentication data to the authentication server and storing the generated authentication data as new seed data in place of the old seed data.
Claim 11
Dependent Claim
60 words
The authentication method according to claim 1, wherein in said authentication-data sending step, the first seed data is replaced with the second seed data in a case where the authentication requester receives a notification of grant of the authentication request, while in a case where the authentication requester does not receive the notification, the first seed data is not replaced.
Claim 12
Dependent Claim
51 words
The authentication apparatus according to claim 3, said authentication-data sending means updates the seed data in a case where a notification of grant of the authentication request is received from the authentication server, while in a case where the notification is not received, said authentication-data sending means does not perform updating.
Claim 13
Dependent Claim
65 words
The authentication terminal apparatus according to claim 4, wherein said instructing means instructs the program stored in the storage medium to update the seed data in a case where a notification of grant of the authentication request is received from the authentication server, while in a case where the notification is not received, said instructing means instructs the program not to update the seed data.
Claim 14
Dependent Claim
56 words
The storage medium according to claim 5, wherein said fifth program code means includes sixth program code means for updating the seed data in a case where a notification of grant of the authentication request is received from the authentication server, while in a case where the notification is not received, not updating the seed data.
Claim 15
Dependent Claim
25 words
The authentication method according to claim 1, wherein identification data of the authentication requester is used as an initial value of the first seed data.
Claim 16
Dependent Claim
24 words
The authentication apparatus according to claim 3, wherein identification data of the authentication requester is used as an initial value of the seed data.
Claim 17
Dependent Claim
25 words
The authentication terminal apparatus according to claim 4, wherein identification data of the authentication requester is used as an initial value of the seed data.
Claim 18
Dependent Claim
26 words
The authentication method according to claim 1, wherein in said authentication-data sending step, authentication data is sent to the authentication server together with a public-key certificate.
Claim 19
Dependent Claim
24 words
The authentication apparatus according to claim 3, wherein said authentication-data sending means sends authentication data to the authentication server together with a public-key certificate.
Claim 20
Dependent Claim
25 words
The authentication terminal apparatus according to claim 4, wherein said authentication-data sending means sends authentication data to the authentication server together with a public-key certificate.
Claim 21
Dependent Claim
22 words
The authentication server according to claim 2, wherein said memory stores a public key of each authentication requester together with inspection data.
Claim 22
Dependent Claim
15 words
The authentication method according to claim 13, wherein the authenticator stores the sent public-key certificate.
Claim 23
Dependent Claim
34 words
The authentication method according to claim 1, wherein in a case where the first inspection data is not coincident with the second inspection data, the authentication request sent by the authentication requester is rejected.
Claim 24
Dependent Claim
35 words
The authentication server according to claim 2, wherein in a case where the newly generated inspection data is not coincident with the stored inspection data, the authentication request sent by the authentication requester is rejected.
Claim 25
Dependent Claim
25 words
The authentication method according to claim 1, wherein the secret key of the authentication requester is enciphered such that only an authentic owner can decipher.
Claim 26
Dependent Claim
16 words
The authentication terminal apparatus according to claim 4, wherein the storage medium is an IC card.
Claim 27
Dependent Claim
47 words
The authentication terminal apparatus according to claim 4, wherein the storage medium further stores a password, compares a password inputted by the authentication requester with the password stored in the storage medium, and only when the passwords are coincident, returns the authentication data to the main body.
Claim 28
Dependent Claim
44 words
The authentication terminal apparatus according to claim 4, wherein the generation of the authentication data based on the seed data by using the secret key is performed only within the storage medium so that the secret key is not sent to the main body.
References Cited (Backward Citations)
US5204902A
Cited
US5153919A
Cited
US5365589A
Cited
US5497421A
Cited
US5475758A
Cited
US5406628A
Cited
US5491752A
Cited
US5724425A
Cited
US5748735A
Cited
US5737419A
Cited
US5604801A
Cited
US5850442A
Cited
US5953422A
Cited
US5922074A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-11-14 | 2004-05-15 | 2004-11-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-11-14 | 2008-05-15 | 2008-11-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-11-14 | 2012-05-15 | 2012-11-14 | $7700.00 | Window Closed / Lapsed |