IP Library › Granted Patent US 8,621,577
Granted Patent B2
US 8,621,577 · App. 11/501,927 · Granted Dec 31, 2013

Method for performing multiple pre-shared key based authentication at once and system for executing the method

Inventors: Jin-Hyeock Choi (Suwon-si, KR); Emin Yegin Alper (Foster City, CA); Jun-Hyuk Song (Suwon-si, KR); Ji-Cheol Lee (Yongin-si, KR)
Assignee: Samsung Electronics Co., Ltd.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,621,577
App. No.
11/501,927
Granted
Dec 31, 2013
Kind
B2
Abstract

A method and apparatus for performing a multiple Pre-Shared Key (PSK) based authentication in a single procedure is described, where the multiple PSK based authentication generates a combined credential in a terminal by using a plurality of credentials including a user identifier and the PSK, and authenticates the terminal in an authentication server by using the combined credential.

Claims (67)

1. A method of performing a multiple Pre-Shared Key (PSK) based authentication, the method comprising:

generating a combined credential in a terminal using a plurality of credentials, the generated combined credential comprising a combined user identifier including a first user identifier and a second user identifier and a combined PSK including a first PSK and a second PSK corresponding to the first user identifier and the second user identifier, respectively;

transmitting the generated combined credential from the terminal to an authentication server; and

authenticating the terminal in the authentication server using the generated combined credential,

wherein the first user identifier and the first PSK are for a device authentication of the terminal and the second user identifier and the second PSK are for a subscription authentication.

2. The method of claim 1 , wherein the combined user identifier and the combined PSK comprise a user identifier and a PSK included in the generated combined credential, respectively in an identical order.

3. The method of claim 1 , wherein the generating of the combined PSK is performed when an authentication process of the authentication server has accessed all of PSKs.

4. The method of claim 1 , wherein the combined user identifier identifies each user identifier based on a discriminator, the discriminator comprising at least one of ‘|’, ‘/’ and ‘,’.

5. The method of claim 1 , wherein the generating of the combined credential comprises consecutively combining a user identifier, and generating of the combined PSK comprises consecutively combining a PSK.

6. The method of claim 1 , wherein the combined user identifier comprises a single string of characters and the combined PSK comprises a single string of characters.

7. A method of performing a Pre-Shared Key (PSK) based authentication in a terminal, the method comprising:

receiving a challenge code from an authentication server;

generating a response code based on the challenge code and a plurality of PSKs by converting the challenge code and a first PSK via a predetermined conversion method to generate a first response result, and by converting the first response result and a second PSK via the predetermined conversion method to generate a second response result; and

transmitting the response code to the authentication server,

wherein the first PSK is for a device authentication of the terminal and the second PSK is for a subscription authentication, or vice versa.

8. The method of claim 7 , wherein the plurality of PSKs is N number of PSKs and the generating of the response code comprises:

converting the challenge code and the first PSK of a first user identifier via the conversion method, and generating the first response result;

converting an n−1 th response result and an n th PSK of an n th user identifier via the conversion method, and generating an n th response result; and

generating the n th response result as the response code, when n equals the N,

wherein “n” is an integer.

9. The method of claim 8 , wherein the n comprises values between 2 and N, and the method further comprises:

repeating the converting of the n−1 th response result and the n th PSK of the n th user identifier via the conversion method, and the generating of the n th response result, with respect to each of the values of the n, until n is equal to N.

10. The method of claim 8 , wherein the conversion method comprises a hash function.

11. A method of performing a Pre-Shared Key (PSK) based authentication in an authentication server, the method comprising:

transmitting a challenge code to a terminal;

generating a first response code based on the challenge code and a plurality of PSKs by converting the challenge code and a first PSK via a predetermined conversion method to generate a first response result, and by converting the first response result and a second PSK via the predetermined conversion method to generate a second response result;

receiving a second response code from the terminal;

comparing the first response code and the second response code; and

authenticating the terminal when the first response code is identical to the second response code,

wherein the first PSK is for a device authentication of the terminal and the second PSK is for a subscription authentication, or vice versa.

12. The method of claim 11 , wherein the plurality of PSKs is N number of PSKs and the generating of the first response code comprises:

converting the challenge code and the first PSK of a first user identifier via the conversion method and generating the first response result; and

converting an n−1 th response result and an n th PSK of an n th user identifier via the conversion method, and generating an n th response result; and

generating the n th response result as the first response code, when n equals the N,

wherein “n” is an integer.

13. The method of claim 12 , wherein the n comprises values between 2 and N, and the method further comprises:

repeating the converting of the n−1 th response result and the n th PSK of the n th user identifier via the conversion method, and the generating of the n th response result, with respect to each of the values of the n, until n is equal to N.

14. The method of claim 12 , wherein the conversion method comprises a hash function.

15. A non-transitory computer-readable storage medium storing a program for implementing a method of performing a Pre-Shared Key (PSK) based authentication method, the method comprising:

generating a combined credential in a terminal using a plurality of credentials, the generated combined credential comprising a combined user identifier including a first user identifier and a second user identifier and a combined PSK including a first PSK and a second PSK corresponding to the first user identifier and the second user identifier, respectively;

transmitting the generated combined credential from the terminal to an authentication server; and

authenticating the terminal in an authentication server using the generated combined credential,

wherein the first user identifier and the first PSK are for a device authentication of the terminal and the second user identifier and the second PSK are for a subscription authentication.

16. A system for performing a multiple Pre-Shared Key (PSK) based authentication, the system comprising:

a generation unit for generating a combined credential in a terminal using a plurality of credentials, the generated combined credential comprising a combined user identifier including a first user identifier and a second user identifier and a combined PSK including a first PSK and a second PSK corresponding to the first user identifier and the second user identifier, respectively;

a transmission unit for transmitting the generated combined credentials from the generation unit to an authentication unit; and

an authentication unit for authenticating the terminal in an authentication server using the generated combined credential,

wherein the first user identifier and the first PSK are for a device authentication of the terminal and the second user identifier and the second PSK are for a subscription authentication.

17. The system of claim 16 , wherein the generation unit comprises:

a combined user identifier generation unit for generating the combined user identifier;

a combined PSK generation unit for generating the combined PSK; and

a combined credential generation unit for generating the combined credential comprising the combined user identifier and the combined PSK.

18. The system of claim 17 , wherein the combined PSK generation unit generates the combined PSK when an authentication process of the authentication server has accessed all of PSKs.

19. The system of claim 17 , wherein the combined user identifier and the combined PSK respectively comprises, in an identical order, a user identifier and a PSK comprised in the combined credential.

20. The system of claim 17 , wherein the combined user identifier generation unit is configured to generate the combined user identifier by consecutively combining a user identifier, and the combined PSK generation unit is configured to generate the combined PSK by consecutively combining a PSK.

21. A terminal performing a Pre-Shared Key (PSK) based authentication, the terminal comprising:

a challenge code receiving unit for receiving a challenge code from an authentication server;

a generation unit for generating a response code based on the challenge code and a plurality of PSKs by converting the challenge code and a first PSK via a predetermined conversion method to generate a first response result, and by converting the first response result and a second PSK via the predetermined conversion method to generate a second response result; and

a response code transmission unit for transmitting the response code to the authentication server,

wherein the first PSK is for a device authentication of the terminal and the second PSK is for a subscription authentication, or vice versa.

22. The terminal of claim 21 , wherein the plurality of PSKs is N number of PSKs and the generation unit comprises:

a first response result generation unit for converting the challenge code and the first PSK of a first user identifier via the conversion method, and generating the first response result;

an n th response result generation unit for converting an n−1 th response result and an n th PSK of an n th user identifier via the conversion method, and generating an n th response result; and

a response code generation unit for generating the n th response result as the response code, when n is identical to the N,

wherein “n” is an integer.

23. The terminal of claim 22 , wherein the n comprises values between 2 and N, and the terminal further comprises:

a repeating unit for repeating the converting of the n−1 th response result and the n th PSK of the n th user identifier via the conversion method, and the generating of the n th response result, with respect to each of the values of the n, until n is equal to N.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 21, 2006
From: CHOI, JIN-HYEOCK; ALPER, EMIN-YEGIN; SONG, JUN-HYUK; LEE, JI-CHEOL
To: SAMSUNG ELECTRONICS CO., LTD.
Reel/Frame 018317/0144 →
Priority Claims (1)
KR 10-2006-0048238 · May 29, 2006 · national
Continuity (2)
Provisional Application 60709463 · Aug 19, 2005
Related Publication 20070043945A1 · Feb 22, 2007