Authentication apparatus, authentication method, and authentication system

• US 10,003,593 B2
• Filed: 04/08/2016
• Issued: 06/19/2018
• Est. Priority Date: 04/08/2015
• Status: Active Grant

• Current Assignee: KYOCERA Document Solutions, Inc. (Kyocera Corporation)
• Original Assignee: KYOCERA Document Solutions, Inc. (Kyocera Corporation)
• Inventors: Nakazato, Yosuke, Kowaka, Makoto
• Primary Examiner(s): Shiferaw, Eleni A
• Assistant Examiner(s): Zarrineh, Shahriar
• Application Number:
  US15/094,972
• Publication Number:
  US 20160301681A1
• Time in Patent Office: 802 Days
• Field of Search: 726 5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

Provided is an authentication apparatus easily realizing a one-time password system ensuring the security of a password without new equipment. The apparatus includes a user information registration processing circuit and a user authentication processing circuit. The user information registration processing circuit registers user identification information, reference identification information constituting a reference, and a selection sequenced identification indicator string having selection identification indicators selected from identification indicators and a sequence of these indicators for each user. The user authentication processing circuit executes a user authentication using a password determined by calculating the positions of the selection identification indicators of the selection sequenced identification indicator string from the position of an identification indicator of a random identification indicator string where the identification indicators are arranged at random that corresponds to the reference identification information into the sequence of the selection identification indicators and the user identification information.

Claims

1. An authentication apparatus comprising:

a user information registration processing circuit that registers, for each user, user identification information, reference identification information that constitutes a reference, and a selection sequenced identification indicator string having a plurality of selection identification indicators that are selected from a plurality of identification indicators and a sequence of the selection identification indicators; and

a user authentication processing circuit that executes a user authentication by the use of a password and the user identification information, wherein

the user authentication processing circuit produces a random identification indicator string by arranging the plurality of identification indicators at random;

the user authentication processing circuit calculates, for each of the selection identification indicators of the selection sequenced identification indicator string, a position value that indicates the position of the respective selection identification indicator in the random identification indicator string relative to the reference, thereby providing a plurality of position values;

the user authentication processing circuit creates the password as a value by arranging the plurality of position values based on the order the respective selection identification indicators occur in the sequence of the selection identification indicators, thereby providing the password as a sequence of the position values;

when a job execution requirement is received, the user authentication processing circuit verifies a user as proper based on whether the user inputs the password, thereby providing the user authentication;

when the user authentication processing circuit verifies the user as a proper user, the authentication apparatus executes the job; and

when the authentication apparatus is operated and the user identification information is inputted, the user authentication processing circuit executes the user authentication by the use of the inputted user identification information.

2. The authentication apparatus according to claim 1, wherein

the reference identification information is one reference identification indicator that is selected from the plurality of identification indicators.

3. The authentication apparatus according to claim 1, wherein

the reference identification information is a reference position of the random identification indicator string.

4. The authentication apparatus according to claim 1, comprising:

a display circuit, wherein

the user authentication processing circuit displays the random identification indicator string on the display circuit.

5. The authentication apparatus according to claim 4, wherein

the user authentication processing circuit displays a user authentication error notification on the display circuit when the user authentication fails.

6. An authentication method carried out on an authentication apparatus, the method comprising:

registering, using a user information registration processing circuit, for each user, user identification information, reference identification information that constitutes a reference, and a selection sequenced identification indicator string having a plurality of selection identification indicators that are selected from a plurality of identification indicators and a sequence of the selection identification indicators;

producing, using a user authentication processing circuit, a random identification indicator string by arranging the plurality of identification indicators at random;

calculating, using the user authentication processing circuit, for each of the selection identification indicators of the selection sequenced identification indicator string, a position value that indicates the position of the respective selection identification indicator in the random identification indicator string relative to the reference, thereby providing a plurality of position values;

creating, using the user authentication processing circuit, a password as a value by arranging the plurality of position values based on the order the respective selection identification indicators occur in the sequence of the selection identification indicators, thereby providing the password as a sequence of the position values; and

executing, using the user authentication processing circuit, a user authentication by the use of the password and the user identification information, wherein

when a job execution requirement is received, the user authentication processing circuit verifies a user as proper based on whether the user inputs the password, thereby providing the user authentication;

when the user authentication processing circuit authenticates the user as a proper user, the authentication apparatus executes the job; and

when the authentication apparatus is operated and the user identification information is inputted, the user authentication processing circuit executes the user authentication by the use of the inputted user identification information.

7. An authentication system having an authentication apparatus, an image forming apparatus and a terminal apparatus that are connected together via a network, wherein

the authentication apparatus comprises:

a user information registration processing circuit that registers, for each user, user identification information, reference identification information that constitutes a reference, and a selection sequenced identification indicator string having a plurality of selection identification indicators that are selected from a plurality of identification indicators and a sequence of the selection identification indicators; and

a user authentication processing circuit that executes a user authentication by the use of a password and the user identification information, wherein

the user authentication processing circuit produces a random identification indicator string by arranging the plurality of identification indicators at random;

the user authentication processing circuit calculates, for each of the selection identification indicators of the selection sequenced identification indicator string, a position value that indicates the position of the respective selection identification indicator in the random identification indicator string relative to the reference, thereby providing a plurality of position values;

the user authentication processing circuit creates the password as a value by arranging the plurality of position values based on the order the respective selection identification indicators occur in the sequence of the selection identification indicators, thereby providing the password as a sequence of the position values;

when a job execution requirement is received, the user authentication processing circuit verifies a user as proper based on whether the user inputs the password, thereby providing the user authentication;

when the user authentication processing circuit authenticates the user as a proper user, the image forming apparatus executes the job; and

when the image forming apparatus is operated from the terminal apparatus, the user authentication processing circuit of the authentication apparatus executes the user authentication by the use of the user identification information that is inputted from the terminal apparatus.