Authentication apparatus, authentication method, and program

• US 20050027990A1
• Filed: 03/03/2003
• Published: 02/03/2005
• Est. Priority Date: 03/05/2002
• Status: Active Grant

• Current Assignee: Passology Company Limited
• Original Assignee: Passology Company Limited
• Inventors: Ogawa, Hideharu
• Granted Patent: US 7,814,331 B2
• Time in Patent Office: Days
• US Class Current: 713/184
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A generating section generates a presentation symbol string for receiving a next authentication request to an authenticated ID, a storing section stores a transformation rule and a sending destination of the presentation symbol string to be associated with each ID, a sending section sends “the generated presentation symbol string” to a display terminal, which is “the sending destination of the presentation symbol string stored in the storing section to be associated with the authenticated ID”, an updating section causes the storing section to further store the presentation symbol string sent to be associated with the authenticated ID to perform update, a receiving section receives an authentication request that designates an ID and a transformed symbol string from an access terminal, and an authenticating section causes authentication of the ID to succeed when a condition is satisfied where “the received transformed symbol string matches a transformation result obtained by applying ‘the transformation rule stored to be associated with the ID designated by the received authentication request’ to ‘the presentation symbol string stored to be associated with the ID’.”

Claims

1. An authentication apparatus that authenticates an identifier (hereinafter referred to as “

ID”

) allocated to each user and that comprises a generating section, a storing section, a sending section, an updating section, a receiving section, and an authenticating section,

wherein said generating section generates a presentation symbol string for receiving a next authentication request to an authenticated ID;

said storing section stores a transformation rule and a sending destination of the presentation symbol string to be associated with each ID;

said sending section sends “

the presentation symbol string generated by said generating section”

to “

the sending destination of the presentation symbol string stored in said storing section to be associated with the authenticated ID”

;

said updating section causes said storing section to further store the presentation symbol string sent by said sending section to be associated with the authenticated ID to perform update;

said receiving section receives an authentication request that designates an ID and a transformed symbol string; and

said authenticating section causes authentication of the ID to succeed when a condition is satisfied where “

the transformed symbol string received by said receiving section matches a transformation result obtained by applying. ‘

the transformation rule stored in said storing section to be associated with the ID designated by the authentication request received by said receiving section’

to ‘

the presentation symbol string stored in said storing section to be associated with the corresponding ID’

.”

2. The authentication apparatus according to claim 1, wherein the authentication request received by said receiving section is one that is sent from a terminal different from “

the sending destination of the presentation symbol string stored in said storing section to be associated with the ID designated by the corresponding authentication request.”

3. The authentication apparatus according to claim 2, wherein the sending destination of the presentation symbol string stored in said storing section to be associated with each ID is a telephone number of a facsimile apparatus or an e-mail address added to a mobile terminal.

4. The authentication apparatus according to claim 1, wherein said generating section generates the presentation symbol string when the use of a predetermined resource based on the authenticated ID is ended, stopped, or interrupted.

5. The authentication apparatus according to claim 1, wherein said generating section generates the presentation symbol string when said authenticating section fails in authentication.

6. The authentication apparatus according to claim 1, wherein said generating section generates the presentation symbol string after a predetermined time period since the success in authentication by said authenticating section.

7. The authentication apparatus according to claim 1, wherein said updating section causes said storing section to further store “

the transformation result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the ID designated by the authentication request received by said receiving section’

to ‘

the presentation symbol string sent by said sending section’

in place of ‘

the presentation symbol string sent by said sending section’

” and

performs update, and said authenticating section causes authentication of the ID to succeed when a condition in place of the relevant condition is satisfied where “

the transformed symbol string received by said receiving section matches ‘

the transformation result stored in said storing section to be associated with the ID designated by the authentication request received by said receiving section’

.”

8. The authentication apparatus according to claim 1, wherein said updating section causes said storing section to further store “

a transformation result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the authenticated ID’

to ‘

the presentation symbol string sent by said sending section’ and

further applying a predetermined one-way function to the result in place of ‘

the presentation symbol string sent by said sending section’

” and

performs update, and said authenticating section causes authentication of the ID to succeed when a condition in place of the relevant condition is satisfied where “

the result obtained by applying the predetermined one function to ‘

the transformed symbol string received by said receiving section’

matches ‘

the transformation result stored in said storing section to be associated with the ID designated by the authentication request received by said receiving section’

.”

13. A program that causes a computer to function as the authentication apparatus described in claim 1.

9. An authentication system that comprises an authentication apparatus and a presentation terminal and that authenticates an identifier (hereinafter referred to as “

ID”

) allocated to each user,

(a) said authentication apparatus comprising a seed generating section, a storing section, a seed sending section, an updating section, a receiving section, and an authenticating section,

wherein said seed generating section generates a seed for receiving a next authentication request to an authenticated ID;

said storing section stores a transformation rule and a sending destination of the seed to be associated with each ID;

said sending section sends “

the seed generated by said seed generating section”

to “

the sending destination of the seed stored in said storing section to be associated with the authenticated ID”

;

said updating section causes said storing section to further store the seed sent by said seed sending section to be associated with the authenticated ID to perform update;

said receiving section receives an authentication request that designates an ID and a transformed symbol string; and

said authenticating section causes authentication of the ID to succeed when a condition is satisfied where “

a transformed symbol string received by said receiving section matches a result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the ID designated by the authentication request received by said receiving section’

to ‘

a presentation symbol string generated by a predetermined procedure’

from “

the seed stored in said storing section to be associated with the ID’

”

; and

(b) said presentation terminal generates a presentation symbol string by a predetermined procedure from the seed sent from said authentication apparatus, and presents the generated presentation symbol string to a user to which the ID is assigned.

10. An authentication method that authenticates an identifier (hereinafter referred to as “

ID”

) allocated to each user by use of “

a storing section that stores a transformation rule and a sending destination of a presentation symbol string to be associated with each ID” and

that comprises a generating step, a storing step, a sending step, an updating step, a receiving step, and an authenticating step,

wherein said generating step generates a presentation symbol string for receiving a next authentication request to an authenticated ID;

said sending step sends “

the presentation symbol string generated by said generating step”

to “

a sending destination of the presentation symbol string stored in said storing section to be associated with the authenticated ID”

;

said updating step causes said storing section to further store the presentation symbol string sent by said sending step to be associated with the authenticated ID to perform update;

said receiving step receives an authentication request that designates an ID and a transformed symbol string; and

said authenticating step causes authentication of the ID to succeed when a condition is satisfied where “

the transformed symbol string received by said receiving step matches a transformation result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the ID designated by the authentication request received by said receiving step’

to ‘

the presentation symbol string stored in said storing section to be associated with the ID’

.”

11. The authentication method according to claim 10, wherein said updating step causes said storing section to further store “

the transformation result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the ID designated by the authentication request received by said receiving step’

to ‘

the presentation symbol string sent by said sending step’

in place of ‘

the presentation symbol string sent by said sending step’

” and

performs update, and

said authenticating step causes authentication of the ID to succeed when a condition in place of the relevant condition is satisfied where “

the transformed symbol string received by said receiving step matches ‘

the transformation result stored in said storing section to be associated with the ID designated by the authentication request received by said receiving step’

.”

12. The authentication method according to claim 10, wherein said updating step causes said storing section to further store “

a transformation result obtained by applying ‘

the transformation rule stored in said storing section to be associated with the authenticated ID’

to ‘

the presentation symbol string sent by said sending step’ and

further applying a predetermined one-way function to the result in place of ‘

the presentation symbol string sent by said sending step’

” and

performs update, and

said authenticating step causes authentication of the ID to succeed when a condition in place of the relevant condition is satisfied where “

the result obtained by applying the predetermined one function to ‘

the transformed symbol string received by said receiving step’

matches ‘

the transformation result stored in said storing section to be associated with the ID designated by the authentication request received by said receiving step’

.”