IP Library › Granted Patent US 8,327,140

Granted Patent B2

US 8,327,140 · App. 12/307,883 · Granted Dec 4, 2012

System and method for authentication in wireless networks by means of one-time passwords

Assignee: NEC Corporation

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 8,327,140
App. No.: 12/307,883
Granted: Dec 4, 2012
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

The present invention is directed to perform high-reliable authentication using a one-way function that a communication is a communication which was performed with the same apparatus to be authenticated by storing a password only in an apparatus to be authenticated (it is unnecessary to store a password in both of an authentication apparatus and an apparatus to be authenticated) without transmitting a challenge code. When a setting is updated in a setting management server, authentication is performed by using a one-time password obtained last time. A sound communication terminal performs a process using a hash function once on a one-time password transmitted this time, and performs authentication by determining whether the processed one-time password matches a one-time password obtained last time or not. Whether the information at the time of the change in the setting is proper or not is determined by a sound terminal.

Claims (80)

1. An authentication system comprising an authentication apparatus and an apparatus to be authenticated,

wherein the apparatus to be authenticated is a setting management apparatus for managing setting information of the authentication apparatus, and comprises:

a storing unit which stores a password and information indicative of a number of times of processing, for which the password is processed repeatedly with a predetermined one-way function;

a first transmitting unit which transmits an encrypted password obtained by processing the password with the predetermined one-way function for the number of times of processing, and the information indicative of the number of times of processing to the authentication apparatus; and

a second transmitting unit which transmits an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times derived by subtracting a predetermined subtraction number from the number of times of processing, and the subtracted number of times to the authentication apparatus,

wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the encrypted password that was processed for the subtracted number of times, and the information indicative of the subtracted number of times,

wherein the apparatus to be authenticated comprises a setting information transmitting unit which, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmits a set of updated setting information with a period of validity to the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated.

2. The authentication system according to claim 1 , wherein the authentication apparatus comprises:

a receiving unit which receives information from the apparatus to be authenticated;

an encrypting unit which processes the encrypted password, which is obtained by being processed for the subtracted number of times, with the predetermined one-way function for the predetermined subtraction number derived by subtracting the subtracted number of times from the number of times of processing; and

an authenticating unit which performs authentication by determining whether the password calculated by the encrypting unit coincides with the encrypted password received by the receiving unit from the first transmitting unit of the apparatus to be authenticated.

3. The authentication system according to claim 1 , wherein the authentication apparatus is an information communication terminal connected to a network and performing communication, and

the apparatus to be authenticated manages setting information of the information communication terminal as the setting management apparatus.

4. An authentication system comprising an authentication apparatus and an apparatus to be authenticated,

wherein the apparatus to be authenticated is a setting management apparatus for managing setting information of the authentication apparatus, and comprises:

a storing unit which stores a password and information indicative of a number of times of processing for which the password is processed with a predetermined one-way function;

a first transmitting unit which transmits an encrypted password obtained by processing the password with the one-way function for the number of times of processing, and the information indicative of the number of times of processing to the authentication apparatus; and

a second transmitting unit which transmits an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times derived by subtracting one from the number of times of processing, and the subtracted number of times to the authentication apparatus,

wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the information indicative of the subtracted number of times and the encrypted password that was processed for the subtracted number of times,

5. The authentication system according to claim 4 , wherein the authentication apparatus comprises:

a receiving unit which receives the set of updated setting information from the apparatus to be authenticated;

an encrypting unit which processes only once the encrypted password with the predetermined one-way function, the encrypted password being obtained by being processed for the subtracted number of times; and

an authenticating unit which performs authentication by determining whether the password calculated by the encrypting unit coincides with the encrypted password obtained by being processed for the number of times of processing.

6. The authentication system according to claim 4 , wherein the authentication apparatus is an information communication terminal connected to a network and performing communication, and

the apparatus to be authenticated manages setting information of the information communication terminal as the setting management apparatus.

7. An apparatus to be authenticated for sending an authentication request to an authentication apparatus, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, comprising:

a storing unit which stores a password and information indicative of a number of times of processing of the password with a predetermined one-way function;

a second transmitting unit which transmits an encrypted password obtained by processing the password with the predetermined one-way function for a number of times derived by subtracting a predetermined subtraction number from the number of times of processing, and the subtracted number of times to the authentication apparatus, wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the encrypted password that was processed for the subtracted number of times, and the information indicative of the subtracted number of times; and

a setting information transmitting unit which, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmits a set of updated setting information with a period of validity to the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated.

8. An apparatus to be authenticated for sending an authentication request to an authentication apparatus, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, comprising:

a storing unit which stores a password and information indicative of a number of times of processing of the password with a predetermined one-way function;

a second transmitting unit which transmits an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times one smaller than the number of times of processing to the authentication apparatus, wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the number of times of processing, the information indicative of the number of times of processing, the encrypted password that was processed for the subtracted number of times, and the information indicative of the subtracted number of times; and

9. An authentication apparatus for performing authentication in response to an authentication request from an apparatus to be authenticated, comprising:

a receiving unit which receives an encrypted password obtained by processing a password with a one-way function for a predetermined number of times of processing from the apparatus to be authenticated;

an encrypting unit which, when an encrypted password obtained by processing the password with the one-way function for a subtracted number of times derived by subtracting a predetermined subtraction number from the predetermined number of times of processing received by the receiving unit from the apparatus to be authenticated, processes the encrypted password with the one-way function for a subtraction number calculated by subtracting the subtracted number of times from the predetermined number of times of processing; and

an authenticating unit which authenticates the apparatus to be authenticated, by determining whether the encrypted password obtained by processing the password with the one-way function for the predetermined number of times of processing coincides with the encrypted password calculated by the encrypting unit,

10. An authentication apparatus for authenticating an apparatus to be authenticated in response to an authentication request from the apparatus to be authenticated, comprising:

an encrypting unit which processes once the encrypted password with the one-way function when an encrypted password obtained by processing the password with the one-way function for a subtracted number of times one smaller than the predetermined number of times of processing received by the receiving unit from the apparatus to be authenticated; and

an authenticating unit which authenticates the apparatus to be authenticated, by determining whether the encrypted password obtained by processing the password with the one-way function for the predetermined number of times of processing of coincides with the encrypted password calculated by the encrypting unit,

wherein the apparatus to be authenticated comprises a setting information transmitting unit which, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmits a set of updated setting information with a period of validity to the authentication apparatus to enable the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated.

11. An authenticating method in an authentication system comprising an authentication apparatus and an apparatus to be authenticated, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, comprising:

a first transmitting step of transmitting from the apparatus to be authenticated an encrypted password obtained by processing a password with a predetermined one-way function for a predetermined number of times of processing, and information indicative of the predetermined number of times of processing to the authentication apparatus;

a second transmitting step of transmitting an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times derived by subtracting a predetermined subtraction number from the predetermined number of times of processing, and the subtracted number of times from the apparatus to be authenticated to the authentication apparatus; and

a setting information transmitting step of, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmitting a set of updated setting information with a period of validity from the apparatus to be authenticated to the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated,

wherein the authentication apparatus performs authentication on the basis of the encrypted password that was processed for the predetermined number of times of processing, the information indicative of the predetermined number of times of processing, the encrypted password obtained by being processed the subtracted number of times, and the information indicative of the subtracted number of times.

12. The authenticating method according to claim 11 , wherein the authentication apparatus further performs:

an encrypting step of processing the encrypted password, which is obtained by being processed for the subtracted number of times with the predetermined one-way function for the predetermined subtraction number derived by subtracting the subtracted number of times from the predetermined number of times of processing; and

an authenticating step of authenticating the apparatus to be authenticated by the authentication apparatus by determining whether the encrypted password calculated in the encrypting step coincides with the encrypted password transmitted in the first transmitting step.

13. An authenticating method in an authentication system comprising an authentication apparatus and an apparatus to be authenticated, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, comprising:

a first transmitting step of transmitting from the apparatus to be authenticated an encrypted password obtained by processing a password with a predetermined one-way function for a predetermined number of times of processing, and the information indicative of the predetermined number of times of processing to the authentication apparatus;

a second transmitting step of transmitting from the apparatus to be authenticated an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times derived by subtracting one from the predetermined number of times of processing, and the subtracted number of times to the authentication apparatus; and

wherein the authentication apparatus performs authentication on the basis of the encrypted password obtained by being processed for the predetermined number of times of processing, the information indicative of the predetermined number of times of processing, the information indicative of the subtracted number of times and the encrypted password obtained by being processed for the subtracted number of times.

14. The authenticating method according to claim 13 , wherein the authentication apparatus further performs:

an encrypting step of processing once the encrypted password transmitted in the second transmitting step with the predetermined one-way function; and

15. A non-transitory computer-readable medium having computer-executable instructions for performing a method for an apparatus to be authenticated that sends an authentication request to an authentication apparatus, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, the method comprising:

a first transmitting process for transmitting an encrypted password obtained by processing a password with a predetermined one-way function for a predetermined number of times of processing, and information indicative of the predetermined number of times of processing from the apparatus to be authenticated to the authentication apparatus;

a second transmitting process for transmitting an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times derived by subtracting a predetermined subtraction number from the predetermined number of times of processing, and the subtracted number of times from the apparatus to be authenticated to the authentication apparatus; and

a setting information transmitting process for, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmitting a set of updated setting information with a period of validity from the apparatus to be authenticated to the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated, wherein the authentication apparatus performs authentication on the basis of the encrypted password obtained by being processed for the predetermined number of times of processing, the information indicative of the predetermined number of times of processing, the information indicative of the subtracted number of times and the encrypted password obtained by being processed for the subtracted number of times.

16. A non-transitory computer-readable medium having computer-executable instructions for performing a method for an apparatus to be authenticated which sends an authentication request to an authentication apparatus, the apparatus to be authenticated being a setting management apparatus for managing setting information of the authentication apparatus, the method comprising:

a second transmitting process for transmitting an encrypted password obtained by processing the password with the predetermined one-way function for a subtracted number of times one smaller than the predetermined number of times of processing, and the subtracted number of times from the apparatus to be authenticated to the authentication apparatus; and

17. A non-transitory computer-readable medium having computer-executable instructions for performing a method for an authentication apparatus for authenticating an apparatus to be authenticated in response to an authentication request from the apparatus to be authenticated, the method comprising:

a receiving process for receiving an encrypted password obtained by processing a password with a one-way function for a predetermined number of times of processing from the apparatus to be authenticated;

an encrypting process for, when an encrypted password obtained by processing the password with the one-way function for a subtracted number of times derived by subtracting a predetermined subtraction number from the predetermined number of times of processing received in the receiving process from the apparatus to be authenticated, processing the encrypted password with the one-way function for a subtraction number calculated by subtracting the subtracted number of times from the predetermined number of times of processing;

an authenticating process for authenticating the apparatus to be authenticated, by determining whether the encrypted password obtained by processing the password with the one-way function for the predetermined number of times of processing received in the receiving process coincides with the encrypted password calculated in the encrypting process; and

a setting information transmitting process which, when the apparatus to be authenticated is authenticated by the authentication apparatus, transmits a set of updated setting information with a period of validity to the authentication apparatus to enable the authentication apparatus to connect to a wireless network and to access the apparatus to be authenticated.

18. A non-transitory computer-readable medium having computer-executable instructions for performing a method for an authentication apparatus for authenticating an apparatus to be authenticated in response to an authentication request from the apparatus to be authenticated, the method comprising:

an encrypting process for, when an encrypted password obtained by processing the password with the one-way function for a subtracted number of times one smaller than the predetermined number of times of processing received from the apparatus to be authenticated in the receiving process, processing once the encrypted password with the one-way function;

an authenticating process for authenticating the apparatus to be authenticated, by determining whether the encrypted password obtained by processing the password with the one-way function for the predetermined number of times of processing received in the receiving step coincides with the encrypted password calculated in the encrypting process; and

Assignments (1)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 7, 2009

From: MIZUKOSHI, YASUHIRO

To: NEC CORPORATION

Reel/Frame 022089/0708 →

Priority Claims (1)

JP 2006-188540 · Jul 7, 2006 · national

Continuity (1)

Related Publication 20090240939A1 · Sep 24, 2009