Patent US6516413B1 successfully refreshed from Google Patents.
US6516413B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Apparatus and method for user authentication
Assignee: Fujifilm Business Innovation Corp
•
Filing: 1999-02-04
•
Granted: 2003-02-04
•
Expires: 2019-02-04
Abstract
Abstract An apparatus and method for user authentication for easily realizing the allocation of a complexity of rights when controlling access by a plurality of users to a plurality of objects. A verification apparatus sends to a proving apparatus required security information that shows the authority property required for access to an object, along with a challenge data and a modulo of a public key. A required security information inspection unit within the proving apparatus obtains the required security information stored in a response data memory and a control information representing a user's authority property stored in a control information memory. It then inspects whether an identifier of:the required security information is included in a list included in the control information. If the identifier is included, a response data is generated, upon! condition that all of challenge data, required security information, access ticket, control information and user identifying information are correct. An access ticket is a result of masking a user's capability, a data representing the extent of his access rights.
Inventors
- 👤 Toru Aratani
- 👤 Rumiko Kakehi
- 👤 Masaki Kyojima
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 20:31
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/3271; H04L2209/00; H04L2209/60; H04L2209/603
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
152 words
A user authentication apparatus that verifies the legitimacy of a response data generated to prove a right of a user, comprising: a first storage unit that stores a challenge data; a second storage unit that stores a control information; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the control information; a forth storage unit that stores a required security information; a required security information inspection unit that inspects whether the required security information and the control information satisfy a predetermined relationship; a response data generation unit that generates the response data according to an output from the required security information inspection unit using the challenge data, the control information, the required security information and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 2
Dependent Claim
152 words
A user authentication apparatus that verifies the legitimacy of a response data generated to prove a right of a user, comprising: a first storage unit that stores a challenge data; a second storage unit that stores a control information; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the control information; a forth storage unit that stores a required security information; a required security information inspection unit that inspects whether the required security information and the control information satisfy a predetermined relationship; a response data generation unit that generates the response data according to an output from the required security information inspection unit using the challenge data, the control information, the required security information and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 3
Dependent Claim
68 words
The user authentication apparatus as set forth in claim 1 , wherein the authentication characteristic information is a first decryption key, the required security information is a second decryption key, the challenge data is a data encrypted using an encryption key correspondent to the decryption keys and the verification unit verifies whether the response data generated by the response data generation unit is the correctly decrypted challenge data.
Claim 4
Dependent Claim
38 words
The user authentication apparatus as set forth in claim 1 , wherein the predetermined relationship between the required security information and the control information is that an information of the required security information exists within the control information.
Claim 5
Dependent Claim
31 words
The user authentication apparatus as set forth in claim 1 , wherein the right of the user to be authenticated is a right to use a digital data or a program.
Claim 6
Dependent Claim
31 words
The user authentication apparatus as set forth in claim 3 , wherein the right of the user to be authenticated is a right to use a digital data or a program.
Claim 7
Dependent Claim
34 words
The user authentication apparatus as set forth in claim 5 , wherein the information included in the required security information and the control information is an identifier of the digital data or the program.
Claim 8
Dependent Claim
35 words
The user authentication apparatus as set forth in claim 5 , wherein the information included in the required security information and the control information is a property information of the digital data or the program.
Claim 9
Dependent Claim
203 words
A user authentication apparatus that verifies the legitimacy of a response data generated to prove a right of a user, comprising: a first storage unit that stores a challenge data; a second storage unit that stores a control information; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the control information; a forth storage unit that stores a required security information; a fifth storage unit that stores an inspection information of the required security information; a first required security information inspection unit that inspects whether an output data generated according to a predetermined relationship between the challenge data and the required security information satisfies a predetermined relation with the inspection information; a second required security information inspection unit that inspects whether the control information and the required security information satisfy a predetermined relationship; a response data generation unit that generates the response data according to respective outputs from the first and the second required security information inspection units using the challenge data, the control information and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 10
Dependent Claim
203 words
A user authentication apparatus that verifies the legitimacy of a response data generated to prove a right of a user, comprising: a first storage unit that stores a challenge data; a second storage unit that stores a control information; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the control information; a forth storage unit that stores a required security information; a fifth storage unit that stores an inspection information of the required security information; a first required security information inspection unit that inspects whether an output data generated according to a predetermined relationship between the challenge data and the required security information satisfies a predetermined relation with the inspection information; a second required security information inspection unit that inspects whether the control information and the required security information satisfy a predetermined relationship; a response data generation unit that generates the response data according to respective outputs from the first and the second required security information inspection units using the challenge data, the control information and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 11
Dependent Claim
177 words
A user authentication apparatus that authenticates a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising; a first storage unit that stores a challenge data; a second storage unit that stores a first authority property allocated to the user; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; a forth storage unit that stores a second authority property needed for access to the object; an authority property inspection unit that inspects whether or not the first authority property and the second authority property satisfy a predetermined relationship; a response data generation unit that generates the response data according to an output from the authority property inspection unit using the challenge data, the first authority property, the second authority property and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 12
Dependent Claim
177 words
A user authentication apparatus that authenticates a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising; a first storage unit that stores a challenge data; a second storage unit that stores a first authority property allocated to the user; a third storage unit that stores an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; a forth storage unit that stores a second authority property needed for access to the object; an authority property inspection unit that inspects whether or not the first authority property and the second authority property satisfy a predetermined relationship; a response data generation unit that generates the response data according to an output from the authority property inspection unit using the challenge data, the first authority property, the second authority property and the authentication support information; and a verification unit that determines whether the response data is generated based on the authentication characteristic information.
Claim 13
Dependent Claim
140 words
A user authentication method for authenticating a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising the steps of; storing a challenge data; storing a first authority property allocated to the user; storing an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; storing a second authority property needed for access to the object; inspecting whether the first authority property and the second authority property satisfy a predetermined relationship; generating the response data according to an output from the inspection step using the challenge data, the first authority property, the second authority property and the authentication support information; and verifying whether the response data is generated based on the authentication characteristic information.
Claim 14
Dependent Claim
140 words
A user authentication method for authenticating a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising the steps of; storing a challenge data; storing a first authority property allocated to the user; storing an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; storing a second authority property needed for access to the object; inspecting whether the first authority property and the second authority property satisfy a predetermined relationship; generating the response data according to an output from the inspection step using the challenge data, the first authority property, the second authority property and the authentication support information; and verifying whether the response data is generated based on the authentication characteristic information.
Claim 15
Dependent Claim
156 words
A storage medium readable by a computer, storing a program of instructions executable by the computer to perform a method for authenticating a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising the steps of; storing a challenge data; storing a first authority property allocated to the user; storing an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; storing a second authority property needed for access to the object; inspecting whether the first authority property and the second authority property satisfy a predetermined relationship; generating the response data according to an output from the inspection step using the challenge data, the first authority property, the second authority property and the authentication support information; and verifying whether the response data is generated based on the authentication characteristic information.
Claim 16
Dependent Claim
156 words
A storage medium readable by a computer, storing a program of instructions executable by the computer to perform a method for authenticating a right of a user to use an object by verifying the legitimacy of a response data generated to prove the rights of the user, comprising the steps of; storing a challenge data; storing a first authority property allocated to the user; storing an authentication support information which is generated according to a predetermined relationship between an authentication characteristic information and the first authority property; storing a second authority property needed for access to the object; inspecting whether the first authority property and the second authority property satisfy a predetermined relationship; generating the response data according to an output from the inspection step using the challenge data, the first authority property, the second authority property and the authentication support information; and verifying whether the response data is generated based on the authentication characteristic information.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-02-03 | 2006-08-05 | 2007-02-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-02-03 | 2010-08-05 | 2011-02-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-02-03 | 2014-08-05 | 2015-02-04 | $7700.00 | Window Closed / Lapsed |