User authentication method and system for a home network

• US 20060149967A1
• Filed: 12/29/2005
• Published: 07/06/2006
• Est. Priority Date: 12/30/2004
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Kyung-hec, Lee, Yung-ji
• Application Number:
  US11/319,277
• Publication Number:
  US 20060149967A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

An external authentication method authenticates access a home network from outside the home network using temporal credential information. The method of authentication for the home network includes requesting a transmission of temporal credential information from the home server for authenticating a user, and receiving the temporal credential information from the home server. The temporal credential information is information including, for example, a temporal authentication key. Accordingly, the home user can access the home network by performing a facilitated and safer authentication using the temporal authentication key from outside the home network.

Claims

1. A method of authentication for a home network, the method comprising:

requesting a transmission of temporal credential information from a home server for authenticating a user; and

receiving the temporal credential information from the home server,

wherein the temporal credential information includes a temporal authentication key.

2. The method according to claim 1, wherein the temporal credential information is received using a location limited channel.

3. The method according to claim 1, wherein the temporal credential information comprises at least one of information necessary for authentication and a lifetime of the temporal authentication key.

13. The method according to claim 3, wherein the information necessary for authentication includes a hash algorithm.

4. A method of authentication for home network, the method comprising:

receiving, from a mobile device, an authentication initiation request and home server information for authenticating a user,;

transmitting relay device information to the mobile device;

receiving, from the mobile device, user authentication data which is based on the relay device information;

transmitting the user authentication data, which is received from the mobile device, to the home server;

receiving user authentication information from the home server;

transmitting the received user authentication information to the mobile device;

receiving authentication validation information from the mobile device; and

transmitting the received authentication validation information to the home server.

5. The method according to claim 4, wherein the relay device information comprises at least one of an Internet Protocol/Media Access Control (IP/MAC) address of the mobile device, a serial number, and public key information.

6. The method according to claim 4, wherein receiving the authentication initiation request from the mobile device is carried out through a location limited channel.

7. The method according to claim 4, wherein the user authentication data comprises at least one of a user identification (ID), a lifetime of an authentication key, a number of uses of an authentication key, information validating a point in time, relay device information, and information necessary for authenticating a challenge.

8. A method of authentication for home network, the method comprising:

storing and maintaining temporal credential information received from a home server;

transmitting, to a guest device, a hash algorithm and a guest authentication key which is generated based on the temporal credential information; and

transmitting, to the home server, at least one of a guest identification (ID) of the guest device, accessible service information, and a hash algorithm.

9. The method according to claim 8, wherein transmitting the guest authentication key and the hash algorithm is carried out through a location limited channel.

10. A method of authentication for a home network, the method comprising:

receiving a guest authentication key and a hash algorithm from a mobile device;

transmitting, to the mobile device, at least one of a guest identification (ID), accessible service information, and the hash algorithm, wherein the at least one of the guest identification (ID), accessible service information, and the hash algorithm is based on the received guest authentication key and the hash algorithm;

transmitting guest authentication information to the home server; and

receiving, from the home server, at least one of user accessible service information and database state information.

11. A method of authentication for a home network, the method comprising:

storing and maintaining temporal credential information received from a home server;

transmitting, to a guest device, at least one of a guest authentication key for authenticating the guest device and a hash algorithm; and

transmitting, to the home server, a guest identification (ID) of the guest device, an accessible service information, and the hash algorithm.

12. An apparatus for authentication for a home network, the apparatus comprising:

a storage and maintenance unit which stores and maintains temporal credential information received from a home server;

a transmitting and receiving unit which transmits an authentication initiation request and home server information to a relay device and which receives relay device information about the relay device; and

an operation unit which creates a guest authentication key for a user based on the temporal credential information.