Method and device for authenticating user

• US 20030139910A1
• Filed: 12/05/2002
• Published: 07/24/2003
• Est. Priority Date: 12/11/2000
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamamoto, Masaaki, Hiramatsu, Yoshiaki, Wakabayashi, Tatsuaki, Kanto, Hiroshi
• Granted Patent: US 7,096,492 B2
• Time in Patent Office: Days
• US Class Current: 702/188
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

IP server W and gateway server GWS transmit data in HTML format in response to a request from mobile unit MS. At this stage, in the HTML data, the personal identification information request data string is added to a URL of the page corresponding to a service, which requires user authentication. As the HTML data is received by mobile unit MS, the user carries out an inputting operation to designate the URL while the image corresponding to the HTML is displayed on the liquid crystal display unit. Then, mobile unit MS reads out personal identification information from ROM, and transmits to mobile packet communication network MPN. IP server W carries out user authentication on the basis of personal identification information transmitted from mobile unit MS in this manner.

Claims

1. A user authentication method comprising:

a reception process for a cellular terminal belonging to a first network to receive data from said first network;

a detection process for said cellular terminal to detect whether a specific data string exists in data received in said reception process;

a transmission process for said cellular terminal to transmit personal identification information for identifying a user pre-stored in said cellular terminal with certainty, only when said data string is determined to exist in said detection process;

a forwarding process for a relaying device which relays transmission and reception of data between said first network and a second network to forward personal identification information transmitted from said cellular terminal to said second network; and

an authentication process for a server being connected to said second network to authenticate a user of said cellular terminal on the basis of said personal identification information.

2. A user authentication method according to claim 1

wherein said cellular terminal, in said transmission process, transmits said personal identification information in a format, which cannot be deciphered by devices other than said server;

and

wherein said server, in said authentication process, deciphers said personal identification information, and authenticates a user of said cellular terminal on the basis of the personal identification information.

3. A user authentication method according to claim 1 further comprising:

a search process for said relaying device to search for an address of said server in said second network in accordance with a request from said cellular terminal;

wherein said data said cellular terminal receives in said reception process is data corresponding to a search outcome as a result of a search carried out by said relaying device in said search process.

4. A user authentication method according to claim 1

wherein said data is written in a markup language;

and

wherein said data string is a specific identifier contained in said data.

5. A user authentication method according to claim 1 further comprising:

a determination prompting process for said cellular terminal to prompt a user of itself to determine whether said personal identification information can be transmitted only when said data string is determined to exist in said detection process;

wherein said cellular terminal, in said transmission process, transmits said personal identification information only when a permission of the user is obtained in said determination prompting process.

6. A user authentication method according to claim 5

wherein said cellular terminal, in said determination prompting process, displays an image to prompt the user'"'"'s determination, and prompts the user to enter input identification information;

wherein said cellular terminal, in said transmission process, transmits input identification information inputted by the user along with said personal identification information; and

wherein said server, in said authentication process, carries out user authentication on the basis of personal identification information transmitted in said transmission process and said input identification information.

7. A user authentication method according to claim 1 further comprising

a transmission process for said server for transmitting input data to prompt said cellular terminal to enter input identification information after said authentication process;

a process for said cellular terminal which receives said input data transmitted in said transmission process to prompt a user to input said input identification information on the basis of the input data;

a second transmission process for transmitting input identification information inputted in said process for prompting input; and

a second authentication process for authenticating a user of said cellular terminal on the basis of said input identification information transmitted in said second transmission process.

8. A user authentication method according to claim 1

wherein said personal identification information is a serial number of said cellular terminal.

9. A user authentication method according to claim 1

wherein said personal identification information consists of a combination of a serial number of said cellular terminal and information stored in a user identification module which is connected with said cellular terminal.

10. A user authentication method according to claim 1

wherein said first network is a mobile communication network;

and

wherein said cellular terminal is a mobile unit, which carries out communication via said mobile communication network.

11. A communication system comprising:

a cellular terminal for transmitting to said first network, personal identification information for identifying with certainty a user pre-stored in a terminal, by receiving data from a first network, determining whether a specific data string exists in the data, and only when said data string is determined to exist;

a second network which is connected with said first network via a relaying device; and

a server which is connected with said second network for carrying out authentication on the basis of said personal identification information.

12. A cellular terminal comprising

a communication unit for carrying out communication with others via a first network;

and

a controlling unit, by carrying out communication, via said first network and a second network being connected with the first network, with a server in the second network by said communication unit, for reading out personal identification information from memory installed in the cellular terminal or a memory connected with the cellular terminal, and transmitting the personal identification information to said server via said connection, when data containing a specific data string is received from the server.

13. A program causing a computer to execute:

a process of reading out personal identification information from memory installed in the cellular terminal or memory connected with the cellular terminal, and transmitting the personal identification information to said server by said communication unit by carrying out communication, via a first network and a second network being connected with the first network, with a server in the second network by a communication unit, when data containing a specific data string is received from the server.

14. A recording medium storing:

a program for prompting a computer to execute a process of reading out personal identification information from memory installed in a cellular terminal or memory connected with the cellular terminal, and transmitting the personal identification information to said server by said communication unit by carrying out communication by a communication unit, via a first network and a second network being connected with the first network, with a server in the second network when data containing a specific data string is received from the server.