Authentication system, authentication request device, validating device and service medium

• US 20030191949A1
• Filed: 02/27/2003
• Published: 10/09/2003
• Est. Priority Date: 08/30/2000
• Status: Abandoned Application

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Odagawa, Akihiro
• Application Number:
  US10/362,871
• Publication Number:
  US 20030191949A1
• Time in Patent Office: Days
• US Class Current: 713/186
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00173 wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00543 wherein external data is encrypted, e.g. for secure communication with an external device or for encrypting content on a separate record carrier

Abstract

An authentication requester 11 uses property 13 thereof to request authentication. When an encryption key 41 for requesting authentication is input into the property 13, the encryption key 41 and a public key 42 (public information for encryption) are combined, such that encrypted information 46 is computed from biometrics information 44 and variable information 45 on varying location, time, etc. The encrypted information 46 is then transmitted as presented information 14 to a verification unit 16A. In the verification unit 16A, an encryption key 43 for authentication and the public key 42 (public information for decryption) are used to decode the encrypted information 46, and the decoded information is compared for a match. When a configuration in which the encryption key 41 merely passes through the property 13 and the verification unit 16A and does not remain as a default value, is adopted, the risk of theft of the encryption key 41 by a third party is reduced.

Claims

1. An authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the authentication system comprising:

encrypted-information preparing means for receiving fixed authentication-requesting information that is unique to the authentication requester, and variable information that has characteristics varying with respect to time, so as to prepare encrypted information based on the fixed authentication-requesting information and the variable information, and

information decoding means for receiving fixed authenticating information corresponding to the fixed authentication-requesting information, and the encrypted information, so as to decode at least the fixed authentication-requesting information from the encrypted information.

2. The authentication system of claim 1, characterized by further comprising:

first fixed-information storing means for storing another fixed authentication-requesting information that is unique to the authentication requester, and

second fixed-information storing means for storing another fixed authenticating information that corresponds to said another fixed authentication-requesting information,

wherein the encrypted-information preparing means prepares the encrypted information including said another fixed authentication-requesting information as well, and

the information decoding means decodes said another fixed authentication-requesting information as well.

3. The authentication system of claim 2, characterized by further comprising collating means for receiving outputs from the information decoding means and said another fixed-information storing means, so as to compare said another fixed authentication-requesting information for agreement with said another fixed authenticating information.

4. The authentication system of claim 3, characterized in that:

the information decoding means decodes the variable information as well, and

the authentication system further includes determining means for receiving the decoded variable information to determine based on the variable information whether the authentication requester is legitimate.

5. The authentication system of any one of claims 1 through 4, characterized in that:

the encrypted-information preparing means also uses public information for encryption, so as to prepare the encrypted information, and

the information decoding means also uses public information for decryption, so as to perform the decoding.

6. The authentication system of claim 1, characterized in that:

the authenticator is a plural presence, and

the fixed authentication-requesting information is made common to each of the authenticators.

7. The authentication system of claim 1, characterized in that:

the encrypted-information preparing means and the information decoding means are incorporated into a single medium, and

the medium further includes

a circuit for generating at least one of a sound signal and an image signal, and

control means for receiving the decoded fixed authentication-requesting information to control, based on the fixed information, the circuit to be operational or non-operational.

8. An authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the authentication system comprising:

encrypted-information preparing means for receiving variable information that has characteristics varying at least with respect to time, so as to prepare encrypted information based on the variable information, and

information decoding means for receiving fixed authenticating information corresponding to fixed authentication-requesting information, and the encrypted information, so as to decode at least the variable information from the encrypted information.

9. The authentication system of claim 8, characterized by further comprising:

registered-information storing means for storing registered information for use in determining whether the variable information is appropriate or not, and

appropriateness determining means for determining whether the decoded variable information is appropriate or not, based on the registered information.

10. An authentication request device in authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the authentication request device comprising:

a variable-information input unit for receiving variable information that has characteristics varying with respect to time, and

encrypted-information preparing means for receiving the variable information from the variable-information input unit, so as to prepare encrypted information based on the variable information.

11. The authentication request device of claim 10, characterized by further comprising a fixed-information input unit for receiving fixed authentication-requesting information that is unique to the authentication requester,

wherein the encrypted-information preparing means prepares the encrypted information based on the fixed information and the variable information.

12. The authentication request device of claim 10 or 11, characterized by further comprising:

first fixed-information storing means for storing another fixed authentication-requesting information that is unique to the authentication requester, and

second fixed-information storing means for storing another fixed authenticating information corresponding to said another fixed authentication-requesting information,

wherein the encrypted-information preparing means prepares the encrypted information including said another fixed authentication-requesting information as well.

13. The authentication request device of claim 12, characterized in that said another fixed information is prepared based on image information which identifies the authentication requester.

14. The authentication request device of any one of claims 11 through 13, characterized in that the variable information is determined based on a GPS (global positioning system).

15. The authentication request device of any one of claims 11 through 13, characterized in that the variable information is determined based on information from a mobile information terminal and a mobile base station.

16. A verification device in an authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the verification device comprising:

an encrypted-information input unit for receiving encrypted information which is transmitted from the authentication requester, and which is prepared based on variable information and fixed authentication-requesting information that is unique to the authentication requester,

a fixed-information input unit for inputting fixed authenticating information corresponding to the fixed authentication-requesting information, and

information decoding means for receiving outputs from the encrypted-information input unit and the fixed-information input unit, so as to decode at least the fixed authentication-requesting information from the encrypted information.

17. The verification device of claim 16, characterized in that:

the encrypted information that is transmitted from the authentication requester includes another fixed authenticating information corresponding to the fixed authentication-requesting information, and

the verification device further includes

fixed-information storing means for storing said another fixed authenticating information corresponding to said another fixed authentication-requesting information, and

collating means for receiving outputs from the information decoding means and the fixed-information storing means, so as to compare said another fixed authentication-requesting information for agreement with the fixed authenticating information.

18. The verification device of claim 16 or 17, characterized in that

the information decoding means decodes the variable information as well, and

the verification device further includes determining means for receiving the decoded variable information to determine legitimacy of the authentication requester based on the variable information.

19. A verification device in an authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the verification device comprising:

an encrypted-information input unit for receiving encrypted information prepared based on variable information transmitted from the authentication requester, and

information decoding means for receiving an output from the encrypted-information input unit, so as to decode at least the variable information from the encrypted information.

20. The verification device of claim 19, characterized by further comprising

registered-information storing means for storing registered information for use in determining whether the variable information is appropriate or not, and

appropriateness determining means for determining whether the decoded variable information is appropriate or not, based on the registered information.

21. A service medium in an authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the service medium comprising:

a fixed-information input unit for receiving fixed authentication-requesting information that is unique to the authentication requester,

a variable-information input unit for receiving variable information that has characteristics varying with respect to time,

encrypted-information preparing means for receiving the fixed authentication-requesting information and the variable information, so as to prepare encrypted information based on the fixed authentication-requesting information and the variable information,

information decoding means for receiving fixed authenticating information corresponding to the fixed authentication-requesting information, and an output from the encrypted-information preparing means, so as to decode at least the fixed authentication-requesting information from the encrypted information,

a circuit for generating at least one of a sound signal and an image signal, and

control means for receiving the decoded fixed authentication-requesting information to control, based on the fixed information, the circuit to be operational or non-operational.

22. A service medium in an authentication system for use by an authenticator to authenticate legitimacy of an authentication requester in response to a request from the authentication requester, the service medium comprising:

a variable-information input unit for receiving variable information that has characteristics varying with respect to time,

encrypted-information preparing means for preparing encrypted information based on the variable information,

information decoding means for receiving an output from the encrypted-information preparing means, so as to decode at least the variable information from the encrypted information,

a circuit for generating at least one of a sound signal and an image signal, and

control means for receiving the decoded variable information to control, based on the variable information, the circuit to be operational or non-operational.