Apparatus, method and system for authentication

• US 20030218532A1
• Filed: 03/26/2003
• Published: 11/27/2003
• Est. Priority Date: 03/26/2002
• Status: Active Grant

• Current Assignee: Vivo Mobile Communication Co., Ltd. (Vivo Communication Technology Co. Ltd.)
• Original Assignee: Nokia Corporation
• Inventors: Hussmann, Holger
• Granted Patent: US 7,053,771 B2
• Time in Patent Office: Days
• US Class Current: 340/5.8
• CPC Class Codes: B60R 2325/105 Radio frequency identification data [RFID]
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/24 using electronic identifiers containing a code not memorised by the user
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The invention relates to a portable, electronic device such as a mobile phone. The device is provided with a transponder and may be used for authentication purposes. The device includes means for writing user-specific information into a memory unit, included in the transponder. Thus, when an interrogating reading device stimulates the transponder, the transponder emits the user-specific information. This enables authentication of a user rather than of a device. In a preferred embodiment use is made of a user-specific key, by means of which a single-use code is generated, which is used as the emitted user-specific information. The invention also relates to a method and a system, which may work in connection with such a device.

Claims

1. A portable, electronic device comprising a transponder with a memory unit, and means for writing user-specific information into the transponder memory unit, so that the transponder, upon reception of an interrogating signal, generates a response signal comprising the user-specific information.

2. A portable, electronic device as claimed in claim 1, comprising a detachable subscriber unit from which the user-specific information is retrieved.

3. A portable, electronic device as claimed in claim 2, comprising calculating means for calculating an authentication code, to be included in the user-specific information.

4. A portable, electronic device as claimed in claim 3, wherein the calculating means is located within the detachable subscriber unit.

5. A portable, electronic device as claimed in claim 4, wherein the authentication code is calculated based on a user-specific key and a request code and using an algorithm.

6. A portable, electronic device as claimed in claim 5, wherein the request code is comprised in the interrogating signal, received by the portable electronic device.

7. A portable, electronic device as claimed in claim 2, wherein the user-specific information is a user identity number.

8. A portable, electronic device as claimed in claim 1, wherein the device is a mobile telephone.

9. A portable, electronic device as claimed in claim 1, wherein the transponder is intended to be used as an RFID-tag.

10. A method for use in an interrogating apparatus for authenticating a user, carrying a portable, electronic device, having a transponder with a memory unit, the method comprising the following steps:

transmitting a transponder interrogating signal to the transponder of the portable device;

receiving a response signal, comprising user specific information, from the transponder, said user-specific information being written, by means in the portable, electronic device, into a memory unit of the transponder; and

determining the authenticity of the user based on the user-specific information.

11. A method as claimed in claim 10, wherein the transponder interrogating signal comprises a request code, allowing the portable device to calculate an authentication code, to be transmitted by the transponder, the calculation being based on the request code and a user-specific key and using an algorithm;

wherein the response signal comprises the authentication code;

wherein the received authentication code is compared with an authentication code calculated in the same way on the apparatus'"'"' side of the air interface; and

wherein the authenticity of the user is determined based on the comparison.

12. A method as claimed in claim 10, wherein the transponder is intended to be used as an RFID-tag.

13. A system for authenticating a user, carrying a portable, electronic device, having a transponder with a memory unit, the system comprising

an interrogating apparatus,

means in the interrogating apparatus for transmitting a transponder interrogating signal to the transponder of the portable device;

means in the interrogating apparatus for receiving a response signal, comprising user specific information, from the transponder, said user-specific information being written, by means in the portable, electronic device, into a memory unit of the transponder; and

means for determining the authenticity of the user based on the user-specific information.

14. A system as claimed in claim 13, wherein the transponder interrogating signal comprises a request code, allowing the portable, electronic device to calculate an authentication code, to be transmitted by the transponder, the calculation being based on the request code and a user-specific key and using an algorithm;

wherein the response signal comprises the authentication code;

where the system comprises means for comparing the received authentication code with an authentication code calculated in the same way on the apparatus'"'"' side of the air interface; and

wherein the system comprises means for determining the authenticity of the user based on the comparison.

15. A system as claimed in claim 13, wherein the transponder is intended to be used as an RFID-tag.