Terminal authentication system, server device, and terminal authentication method

• US 10,015,159 B2
• Filed: 05/14/2015
• Issued: 07/03/2018
• Est. Priority Date: 05/27/2014
• Status: Active Grant

• Current Assignee: Panasonic Intellectual Property Management Co., Ltd. (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Intellectual Property Management Co., Ltd. (Panasonic Holdings Corporation)
• Inventors: Toyonaga, Saburo, Tanaka, Hiroyuki, Ike, Kenjiro, Matsuo, Masakatsu
• Primary Examiner(s): Williams, Jeffery
• Application Number:
  US14/712,645
• Publication Number:
  US 20150350196A1
• Time in Patent Office: 1,146 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint

Abstract

Provided is a terminal authentication system including a client terminal and a server device. The client terminal transmits first information based on secret information different for each client terminal and a client certificate including a hash value of the secret information which is derived from the secret information, to a server device. The server device receives the first information and the client certificate, derives a hash value from the secret information based on the first information using a unidirectional function, and authenticates the client terminal on the basis of the derived hash value and the hash value of the secret information which is included in the client certificate.

Claims

1. A terminal authentication system comprising:

a client terminal; and

a server device,

wherein the client terminal and the server device are connected to each other through a network,

wherein the client terminal includes;

a storage that, in operation, stores a secret key of the client terminal, secret information for the client terminal and a client certificate including a public key of the client terminal and a hash value which is derived from the secret information, and

a first transceiver that is coupled to the storage and that, in operation, transmits the client certificate to the server device, and

wherein the server device includes;

a second transceiver,

a random number generator that, in operation, generates a first random number in a case that the second transceiver receives the client certificate from the client terminal,

first data encryption processor that, in operation, encrypts the first random number using the public key of the client terminal which is included in the client certificate; and

wherein the second transceiver transmits the encrypted first random number to the client terminal, and

wherein the client terminal further includes;

a first data decryption processor that, in operation, decrypts the encrypted a first random number using the secret key of the client terminal to thereby acquire the first random number in a case that the first transceiver receives the encrypted first random number from the server device, and

a second data encryption processor that, in operation, encrypts the secret information using a first shared key based on the first random number, and

wherein the server device further includes;

a second data decryption processor that, in operation decrypts the encrypted secret information using a second shared key based on the first random number to thereby acquire the secret information, in a case that the second transceiver receives the encrypted secret information from the client terminal,

a unidirectional function processor that is coupled to the second transceiver and that, in operation, derives a hash value from the encrypted secret information, using a unidirectional function, and

an authentication processor that is coupled to the unidirectional function processor and that, in operation, authenticates the client terminal based on the derived hash value and the hash value of the secret information which is included in the client certificate.

2. The terminal authentication system of claim 1, wherein the secret information includes a second random number.

3. The terminal authentication system of claim 1, wherein the client certificate includes at least one of identification information of the client terminal and authority information.

6. The terminal authentication system of claim 1, wherein each of the first shared key and the second shared key is a common key generated using the first random number.

7. The terminal authentication system of claim 1,

wherein the first shared key is a public key of the server device and the first random number, and

wherein the second shared key is a secret key of the server device and the first random number, and wherein

the second data encryption processor, in operation, encrypts the secret information using the public key of the server device and the first random number, and

the second data decryption processor, in operation, decrypts the encrypted secret information using the secret key of the server of the server device and the first random number.

4. A server device which is connected to a client terminal through a network, the server device comprising:

a transceiver;

a random number generator that, in operation, generates a first random number in a case that the transceiver receives a client certificate including a public key of the client terminal and a hash value which is derived from secret information stored by the client terminal, from the client terminal;

a data encryption processor that, in operation, encrypts the first random number using the public key of the client terminal which is included in the client certificate, wherein the transceiver transmits the encrypted first random number to the client terminal;

a data decryption processor that, in operation decrypts encrypted secret information, which was encrypted by the client terminal using a first shared key based on the first random number, using a second shared key based on the first random number to thereby acquire the secret information, in a case that the transceiver receives the encrypted secret information from the client terminal;

a unidirectional function processor that is coupled to the transceiver and that, in operation, derives a hash value from the encrypted secret information, using a unidirectional function; and

an authentication processor that is coupled to the unidirectional function processor and that, in operation, authenticates the client terminal based on the derived hash value and the hash value of the secret information which is included in the client certificate.

5. A terminal authentication method in a server device which is connected to a client terminal through a network, the terminal authentication method comprising:

receiving a client certificate including a public key of the client terminal and a hash value which is derived from secret information stored by the client, from the client terminal;

generating a first random number, responsive to the receiving of the client certificate including the public key of the client terminal and the hash value which is derived from the secret information stored by the client, from the client terminal;

encrypting the first random number using the public key of the client terminal which is included in the client certificate;

transmitting the encrypted first random number to the client terminal;

decrypting encrypted secret information, which was encrypted by the client terminal using a first shared key based on the first random number, using a second shared key based on the first random number to thereby acquire the secret information, in a case that the transceiver receives the encrypted secret information from the client terminal;

deriving a hash value from the encrypted secret information, using a unidirectional function; and

authenticating the client terminal based on the derived hash value and the hash value of the secret information which is included in the client certificate.