IP Library › Granted Patent US 8,321,672
Granted Patent B2
US 8,321,672 · App. 12/014,254 · Granted Nov 27, 2012

Authentication system, information processing apparatus and method, program, and recording medium

Assignee: Sony Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,321,672
App. No.
12/014,254
Granted
Nov 27, 2012
Kind
B2
Abstract

An authentication system includes a mobile device carried by a user and a sensor sensing the user's biometric information. The mobile device includes a template storage unit storing the user's biometric information as a template, a first mutual authentication unit performing mutual authentication with the sensor via the user's body, and a template transmitter transmitting the stored template to the sensor via the user's body when the sensor is verified as valid. The sensor includes a second mutual authentication unit performing mutual authentication with the mobile device via the user's body, a sensing unit sensing the user's biometric information, a degree-of-match determining unit determining whether the biometric information matches the template, and a control-signal output unit outputting a preset control signal when the mobile device is verified as valid and when the biometric information and the template are determined to match each other.

Claims (360)

1. An authentication system comprising:

a mobile device carried by a user; and

a sensor configured to sense biometric information of the user, the mobile device and the sensor communicating with each other via a human body as a communication medium,

wherein the mobile device includes:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the mobile device to:

store the biometric information of the user as a template,

perform first mutual authentication with the sensor by performing communication via the body of the user as a communication medium, wherein the first mutual authentication with the sensor is performed by:

sending to the sensor a certificate of the mobile device for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

encrypting the stored template, the stored template being encrypted using a session key generated based on the first key generation information and the second key generation information; and

transmit the encrypted stored template to the sensor via the body of the user in a case where the sensor is verified as a valid sensor, and

wherein the sensor includes:

a sensor processor; and

a sensor memory coupled to the sensor processor which stores instructions that, when executed on the sensor processor, cause the sensor to:

perform second mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein the second mutual authentication with the mobile device is performed by:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user,

determine whether the sensed biometric information of the user matches the template transmitted from the mobile device via the body of the user based on degree-of-match information obtained by comparing the biometric information with the template, and

output a preset control signal in a case where the mobile device is verified as a valid mobile device based on a second mutual authentication result obtained by the second mutual authentication and in a case where the determination indicates that the biometric information and the template match each other.

2. The authentication system of claim 1 , wherein the memory stores a device ID, cryptographic keys, an attribute, the certificate of the mobile device, a public key of a certificate authority, and the template.

3. The authentication system of claim 2 , wherein the cryptographic keys comprise a secret key and a public key for use in encryption and decryption, and wherein the attribute comprises information specifying the action that can be taken if the sensor is verified as a valid sensor.

4. The authentication system of claim 1 ,

wherein the degree-of-match information comprises information indicating the degree-of-match between the sensed biometric information and the template,

wherein the degree-of-match information is compared to a preset value, and

wherein if the degree-of-match information is greater than the preset value, the sensed biometric information of the user matches the template transmitted from the mobile device.

5. An information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

store the biometric information of the user as a template;

perform mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein mutual authentication is performed with the sensor by

sending to the sensor a certificate of the mobile device for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

encrypting the stored template, the stored template being encrypted using a session key generated based on the first key generation information and the second key generation information;

transmitting the encrypted stored template to the sensor via the body of the user in a case where the sensor is verified as a valid sensor based on a mutual authentication result obtained by the mutual authentication.

6. The information processing apparatus according to claim 5 , wherein the mutual authentications are based on public-key cryptography, and a cryptographic key of the public-key cryptography is managed based on a public key infrastructure.

7. An information processing method for an information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising the steps of:

performing mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor; and

transmitting an encrypted template that is pre-stored biometric information of the user to the sensor via the body of the user in a case where the sensor is verified as a valid sensor, the template being encrypted using a session key generated based on the first key generation information and the second key generation information.

8. A non-transitory computer-readable medium that allows an information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user to perform information processing, the information processing comprising the steps of:

performing mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor; and

transmitting an encrypted template that is pre-stored biometric information of the user to the sensor via the body of the user in a case where the sensor is verified as a valid sensor, the template being encrypted based on the first key generation information and the second key generation information.

9. An information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

store the biometric information of the user as a template;

perform mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises;

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

determine whether the biometric information of the user transmitted from the sensor via the body of the user matches the template based on information obtained by comparing the biometric information with the template; and

a determination-result transmitting unit that transmits-information indicating a determination result obtained by the determination to the sensor via the body of the user.

10. The information processing apparatus according to claim 9 , wherein the mutual authentications are based on public-key cryptography, and a cryptographic key of the public-key cryptography is managed based on a public key infrastructure.

11. An information processing method for an information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising the steps of:

performing mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

determining whether the biometric information of the user transmitted from the sensor via the body of the user matches a template that is pre-stored biometric information of the user based on information obtained by comparing the biometric information with the template; and

transmitting information indicating a determination result to the sensor via the body of the user.

12. A non-transitory computer-readable medium that allows an information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user to perform information processing, the information processing comprising the steps of:

performing mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

determining whether the biometric information of the user transmitted from the sensor via the body of the user matches a template that is pre-stored biometric information of the user based on information obtained by comparing the biometric information with the template; and

transmitting information indicating a determination result to the sensor via the body of the user.

13. An information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as an encrypted template via the body of the user as a communication medium, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

perform mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user;

determine whether the sensed biometric information of the user matches the encrypted template transmitted from the mobile device via the body of the user based on information obtained by comparing the biometric information with the encrypted template, the encrypted template being encrypted using a session key generated based on the first key generation information and the second key generation information; and

output a preset control signal in a case where the sensed biometric information of the user matches the encrypted template transmitted from the mobile device.

14. The information processing apparatus according to claim 13 , wherein the mutual authentications are based on public-key cryptography, and a cryptographic key of the public-key cryptography is managed based on a public key infrastructure.

15. An information processing method for an information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium, comprising the steps of:

performing mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sensing the biometric information of the user;

determining whether the sensed biometric information of the user matches the template transmitted from the mobile device via the body of the user based on information obtained by comparing the biometric information with the template; and

outputting a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result and in a case where it is determined that the biometric information and the template match each other.

16. A non-transitory computer-readable medium that allows an information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium to perform information processing, the information processing comprising the steps of:

performing mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sensing the biometric information of the user;

determining whether the sensed biometric information of the user matches the template transmitted from the mobile device via the body of the user based on information obtained by comparing the biometric information with the template, the template being encrypted using a session key generated based on the first key generation information and the second key generation information; and

outputting a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result and in a case where it is determined that the biometric information and the template match each other.

17. An information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

perform mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user;

transmit the sensed biometric information of the user via the body of the user; and

output a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result obtained by the mutual authentication and in a case where the mobile device, which has received the transmitted biometric information of the user, receives via the body of the user information indicating a determination result that the biometric information and the template are determined to match each other, the template being encrypted using a session key generated based on the first key generation information and the second key generation information.

18. The information processing apparatus according to claim 17 , wherein the mutual authentications are based on public-key cryptography, and a cryptographic key of the public-key cryptography is managed based on a public key infrastructure.

19. An information processing method for an information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium, comprising the steps of:

performing mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sensing the biometric information of the user and transmitting the sensed biometric information of the user via the body of the user; and

outputting a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result and in a case where the mobile device, which has received the transmitted biometric information of the user, receives via the body of the user information indicating a determination result that the biometric information and the template are determined to match each other, the template being encrypted using a session key generated based on the first key generation information and the second key generation information.

20. A non-transitory computer-readable medium that allows an information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium to perform information processing, the information processing comprising the steps of:

performing mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sensing the biometric information of the user and transmitting the sensed biometric information of the user via the body of the user; and

outputting a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result and in a case where the mobile device, which has received the transmitted biometric information of the user, receives via the body of the user information indicating a determination result that the biometric information and the template are determined to match each other, the template being encrypted using a session key generated based on the first key generation information and the second key generation information.

21. An authentication system comprising:

a mobile device carried by a user; and

a sensor configured to sense biometric information of the user, the mobile device and the sensor communicating with each other via a human body as a communication medium,

wherein the mobile device includes

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the mobile device to:

store the biometric information of the user as a template,

perform a first mutual authentication with the sensor by performing communication via the body of the user as a communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

transmit an encrypted template to the sensor via the body of the user in a case where the sensor is verified as a valid sensor, the template being encrypted using a session key generated based on the first key generation information and the second key generation information, and

wherein the sensor includes

a sensor processor; and

a sensor memory coupled to the sensor processor which stores instructions that, when executed on the sensor processor, cause the sensor to:

perform a second mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein the second mutual authentication with the mobile device is performed by:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user,

determine whether the sensed biometric information of the user matches the template transmitted from the mobile device via the body of the user based on information obtained by comparing the biometric information with the template, and

output a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result obtained by the second mutual authentication and in a case where the biometric information and the template match each other.

22. An information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

store the biometric information of the user as a template;

perform mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor; and

transmit an encrypted template to the sensor via the body of the user in a case where the sensor is verified as a valid sensor, the template being encrypted using a session key generated based on the first key generation information.

23. An information processing apparatus that is carried by a user and that performs communication via the body of the user as a communication medium with a sensor that senses biometric information of the user, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

store the biometric information of the user as a template;

perform mutual authentication with the sensor by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

sending to the sensor a certificate of the information processing apparatus for verification;

receiving a certificate of the sensor;

verifying the validity of the certificate of the sensor;

sending a first challenge to the sensor, in response to verifying that the certificate of the sensor is valid;

receiving a first response and a first key generation information from the sensor;

authenticating the sensor based on the received response;

sending a first authentication result to the sensor;

receiving a second challenge from the sensor;

generating a second response and a second key generation information;

sending the generated second response and the second key generation information to the sensor for verification; and

receiving a second authentication result from the sensor;

determine whether the biometric information of the user transmitted from the sensor via the body of the user matches the template based on information obtained by comparing the biometric information with the template, the template being encrypted using a session key generated based on the first key generation information and the second key generation information; and

transmit information indicating a determination result obtained by the determining of the match to the sensor via the body of the user.

24. An information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

perform mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user;

determine whether the sensed biometric information of the user matches the template transmitted from the mobile device via the body of the user based on information obtained by comparing the biometric information with the template, the template being encrypted using a session key generated based on the first key generation information and the second key generation information; and

output a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result obtained by the mutual authentication and in a case where the biometric information and the template match each other.

25. An information processing apparatus for performing communication with a mobile device that is carried by a user and that stores in advance biometric information of the user as a template via the body of the user as a communication medium, comprising:

a processor; and

a memory coupled to the processor which stores instructions that, when executed on the processor, cause the apparatus to:

perform mutual authentication with the mobile device by performing communication via the body of the user as the communication medium, wherein performing mutual authentication comprises:

receiving a certificate of the mobile device from the mobile device;

verifying the certificate of the mobile device;

sending to the mobile device a certificate of the sensor in response to verifying that the certificate of the mobile device is valid;

receiving a first challenge from the mobile device, in response to verifying that the certificate of the sensor is valid;

generating a first response and a first key generation information;

sending the first response and the first key generation information to the mobile device;

receiving a first authentication result from the mobile device;

sending a second challenge to the mobile device;

receiving a second response and a second key generation information from the mobile device;

verifying the second response; and

sending a second authentication result to the sensor;

receiving a template from the mobile device, wherein the template is encrypted a session key generated based on the first key generation information and the second key generation information;

sense the biometric information of the user;

transmit the sensed biometric information of the user via the body of the user; and

output a preset control signal in a case where the mobile device is verified as a valid mobile device based on a mutual authentication result obtained by the mutual authentication and in a case where the mobile device, which has received the transmitted biometric information of the user, receives via the body of the user information indicating a determination result that the biometric information and the template are determined to match each other, the template being encrypted using a session key generated based on the first key generation information and the second key generation information.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2008
From: ASANO, TOMOYUKI
To: SONY CORPORATION
Reel/Frame 020366/0614 →
Priority Claims (1)
JP P2007-013833 · Jan 24, 2007 · national
Continuity (1)
Related Publication 20080209545A1 · Aug 28, 2008