Device which executes authentication processing by using offline information, and device authentication method

• US 20040193874A1
• Filed: 03/22/2004
• Published: 09/30/2004
• Est. Priority Date: 03/31/2003
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Mawatari, Masahiko, Kanazawa, Koji
• Application Number:
  US10/805,291
• Publication Number:
  US 20040193874A1
• Time in Patent Office: Days
• US Class Current: 713/161
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273

Abstract

A computer includes a unit which reads out authentication data recorded on a portable recording medium by another device, a recording unit which records the authentication data read out by the unit, and an authentication unit which performs mutual authentication processing between the authentication unit and the another device by using the authentication data recorded in the recording unit.

Claims

1. A computer comprising:

a unit which reads out authentication data recorded on a portable recording medium by another device;

a recording unit which records the authentication data read out by the unit; and

an authentication unit which performs mutual authentication processing between the authentication unit and the another device by using the authentication data recorded in the recording unit.

2. The computer according to claim 1, wherein the recording unit records the authentication data on a nonvolatile recording medium.

5. The computer according to claim 1, wherein the authentication unit includes:

a determination unit which determines whether current time falls within a valid period, on the basis of data representing the valid period contained in the authentication data; and

an invalidation unit which invalidates the authentication data when the determination unit determines that the current time does not fall within the valid period.

7. The computer according to claim 1, wherein the authentication unit comprises:

a count storage unit which stores an execution count of mutual authentication processing;

a determination unit which determines whether the execution count falls within a valid count, on the basis of data representing the valid count contained in the authentication data; and

an invalidation unit which invalidates the authentication data when the determination unit determines that the execution count does not fall within the valid count.

9. The computer according to claim 1, wherein the authentication unit comprises:

a first reception unit which receives an authentication request from the another device; and

a first transmission unit which transmits data generated using the authentication data to the another device in response to the authentication request received by the first reception unit.

11. The computer according to claim 1, wherein the authentication unit comprises:

a third transmission unit which transmits data generated using the authentication data to the another device;

a third reception unit which receives data transmitted from the another device; and

a determination unit which determines whether the data received by the third reception unit has been generated using the authentication data.

13. The computer according to claim 1, wherein the portable recording medium is configured to guarantee authenticity of recorded data.

3. A computer comprising:

a generation unit which generates authentication data;

a unit which records the authentication data generated by the generation unit on a portable recording medium;

a recording unit which records the authentication data recorded on the recording medium; and

an authentication unit which performs mutual authentication processing between the authentication unit and another device by using the authentication data recorded by the recording unit.

4. The computer according to claim 3, wherein the recording unit records the authentication data on a nonvolatile recording medium.

6. The computer according to claim 3, wherein the generation unit generates authentication data containing data representing a valid period.

8. The computer according to claim 3, wherein the generation unit generates authentication data containing data representing a valid count.

10. The computer according to claim 3, wherein the authentication unit comprises:

a second transmission unit which transmits an authentication request to the another device;

a second reception unit which receives data transmitted from the another device in accordance with the authentication request transmitted by the second transmission unit; and

a determination unit which determines whether the data received by the second reception unit has been generated using the authentication data.

12. The computer according to claim 3, wherein the authentication unit comprises:

a third transmission unit which transmits data generated using the authentication data to the another device;

a third reception unit which receives data transmitted from the another device; and

a determination unit which determines whether the data received by the third reception unit has been generated using the authentication data.

14. The computer according to claim 3, wherein the portable recording medium is configured to guarantee authenticity of recorded data.

15. The computer according to claim 3, wherein the generation unit comprises:

an acquisition unit which acquires owner data; and

an authentication data generation unit which generates authentication data on the basis of the owner data.

16. The computer according to claim 15, wherein the acquisition unit acquires biometric information of an owner as the owner data.

17. The computer according to claim 15, wherein the acquisition unit comprises:

an input unit which inputs the owner data; and

an owner data confirmation unit which confirms authenticity of the owner data input by the input unit.

18. A device authentication method comprising:

causing a first device to generate authentication data and record the authentication data on a portable recording medium;

causing a second device to read out the authentication data from the portable recording medium; and

performing mutual authentication processing by using the authentication data between the first and second devices.

19. The method according to claim 18, wherein in the mutual authentication processing,

first data generated by the first device on the basis of the authentication data is transmitted to the second device,

second data generated by the second device on the basis of the authentication data is transmitted to the first device,

the first device determines whether the data transmitted from the second device has been generated using the authentication data, and

the second device determines whether the data transmitted from the first device has been generated using the authentication data.