Authentication system, method of controlling the authentication system, and portable authentication apparatus

• US 20060226950A1
• Filed: 02/13/2006
• Published: 10/12/2006
• Est. Priority Date: 03/25/2005
• Status: Abandoned Application

• Current Assignee: Citizen Holdings Co., Ltd., Fujitsu Limited
• Original Assignee: Citizen Watch Co Limited (Citizen Electronics Company Limited), Fujitsu Limited
• Inventors: Tanaka, Toru, Kanou, Ryouhei, Kobayashi, Hiroki, Sato, Yuichi, Senta, Yosuke, Kawashima, Takeaki
• Application Number:
  US11/352,573
• Publication Number:
  US 20060226950A1
• Time in Patent Office: Days
• US Class Current: 340/5.610
• CPC Class Codes: G06F 21/1077 Recurrent authorisation
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

A personal-identification-information transmitting unit transmits personal identification information. A portable authentication apparatus receives the personal identification information, and performs an authentication process based on the personal identification information received and personal identification information stored in the portable authentication apparatus in advance. The portable authentication apparatus includes a control unit that controls provision of at least one of predetermined data and software to the information processing apparatus, based on a result of the authentication process.

Claims

1. An authentication system for authenticating a user who operates an information processing apparatus, the authentication system comprising:

a personal-identification-information transmitting unit that transmits personal identification information; and

a portable authentication apparatus that receives the personal identification information from the personal-identification-information transmitting unit, and performs a first authentication process based on the personal identification information received from the personal-identification-information transmitting unit and personal identification information that is stored in the portable authentication apparatus in advance, wherein

the portable authentication apparatus includes a control unit that controls provision of at least one of predetermined data and software to the information processing apparatus, based on a result of the first authentication process.

2. The authentication system according to claim 1, wherein

the portable authentication apparatus further includes a personal-environment storing unit that stores at least one of data and software for constructing a personal environment of the user for the information processing apparatus, and

the control unit controls provision of the at least one of the data and the software stored in the personal-environment storing unit to the information processing apparatus, based on the result of the first authentication process.

3. The authentication system according to claim 1, wherein

the portable authentication apparatus further includes an authentication-information storing unit that stores authentication information for identifying the user, and

the control unit controls the provision of the at least one of the predetermined data and the software to the information processing apparatus, based on the result of the first authentication process and a result of a second authentication process that is performed by comparing the authentication information stored in the authentication-information storing unit with authentication information received via the information processing apparatus.

4. The authentication system according to claim 1, wherein

when the first authentication process is successfully performed, and a subsequent first authentication process is failed and a connection between the portable authentication apparatus and the information processing apparatus is cut off, either one of the portable authentication apparatus and the information processing apparatus turns into an alert state for issuing an alert.

5. The authentication system according to claim 4, wherein

the either one of the portable authentication apparatus and the information processing apparatus, which turned into the alert state, maintains the alert state until the connection is recovered, and when the connection is recovered and the authentication process is successfully performed, returns to a non-alert state.

6. The authentication system according to claim 1, wherein

the personal-identification-information transmitting unit is an active transmitter that issues radio waves using a battery installed.

7. The authentication system according to claim 1, wherein

the personal-identification-information transmitting unit includes

a card holder that holds an identification card of the user;

an antenna provided at a top of the card holder; and

a battery provided at a back of the card holder.

8. An information processing system including a function of authenticating a user who operates an information processing apparatus, based on personal identification information stored in a personal-identification-information transmitting unit and personal identification information stored in a portable authentication apparatus connected to the information processing apparatus, wherein

the information processing apparatus is configured to be communicable with other information processing apparatus, determine a presence status of the user based on an authentication status between the personal-identification-information transmitting unit and the portable authentication apparatus, and exchange presence information of the user based on the presence status with the other information processing apparatus.

9. The information processing system according to claim 8, wherein

the presence information includes either one of location information and history information of the presence status.

10. An information processing system including a function of authenticating a user who operates an information processing apparatus, based on personal identification information stored in a personal-identification-information transmitting unit and personal identification information stored in a portable authentication apparatus connected to the information processing apparatus, the information processing system comprising:

a status management unit configured to be communicable with the information processing apparatus, wherein

the information processing apparatus determines a presence status of the user based on an authentication status between the personal-identification-information transmitting unit and the portable authentication apparatus, and transmits presence information of the user to the status management unit based on the presence status, and

the status management unit manages the presence information in such a manner that an apparatus capable of communicating with the status management unit refers to the presence information for at least one of the information processing unit.

11. The information processing system according to claim 10, wherein

the presence information includes either one of location information and history information of the presence status.

12. A control method for an authentication system for authenticating a user who operates an information processing apparatus, the control method comprising:

transmitting including a personal-identification-information transmitting unit transmitting personal identification information;

performing including a portable authentication apparatus performing an authentication process based on the personal identification information received from the personal-identification-information transmitting unit and personal identification information that is stored in the portable authentication apparatus in advance; and

controlling including a control unit of the portable authentication apparatus controlling provision of at least one of predetermined data and software to the information processing apparatus, based on a result of the authentication process.

13. The control method according to claim 12, wherein

the control unit controls provision of at least one of data and software for constructing a personal environment of the user to the information processing apparatus.

14. The control method according to claim 13, further comprising:

constructing including, when the authentication process is successfully performed, and when a success state of the authentication process continues, the information processing apparatus constructing the personal environment of the user with the provided at least one of the data and the software; and

changing including, when the authentication process fails,

the information processing apparatus suspending the provision of the personal environment; and

the information processing apparatus changing the personal environment to a public environment.

15. The control method according to claim 12, further comprising:

instructing including, when the authentication process is successfully performed, and when a subsequent authentication process fails and the connection between the portable authentication apparatus and the personal-identification-information transmitting unit is cut off, the information processing apparatus instructing an imaging device to perform an imaging operation.

16. The control method according to claim 12, further comprising:

turning including, when the authentication process is successfully performed, and when a subsequent authentication process fails and the connection between the portable authentication apparatus and the personal-identification-information transmitting unit is cut off, either one of the portable authentication apparatus and the information processing apparatus turning into an alert state for issuing an alert.

17. The control method according to claim 16, further comprising:

maintaining including the either one of the portable authentication apparatus and the information processing apparatus, which turned into the alert state, maintaining the alert state until the connection is recovered; and

returning including, when the connection is recovered and the authentication process is successfully performed, the either one of the portable authentication apparatus and the information processing apparatus, which turned into the alert state, returning to a non-alert state.

18. The control method according to claim 12, further comprising:

transferring including the portable authentication apparatus transferring an authentication program to the information processing apparatus on a connection destination; and

having the authentication process performed using the authentication program transferred to the information processing apparatus.

19. The control method according to claim 14, further comprising:

notifying including, when the authentication process fails, the portable authentication apparatus notifying a failure of the authentication process to the information processing apparatus; and

suspending including, when a predetermined time elapses, the information processing apparatus suspending the provision of the personal environment.

20. A portable authentication apparatus that authenticates a user who operates an information processing apparatus on a connection destination, using a personal-identification-information transmitting unit that transmits personal identification information, the portable authentication apparatus comprising:

a personal-identification-information storing unit that stores first personal identification information;

a receiving unit that receives second personal identification information from the personal-identification-information transmitting unit;

an authentication processing unit that performs an authentication process with the personal-identification-information transmitting unit, based on the first personal identification information and the second personal identification information; and

a control unit that controls provision of at least one of predetermined data and software to the information processing apparatus based on a result of the authentication process.

21. The portable authentication apparatus according to claim 20, further comprising:

a retractable antenna for communicating with the personal-identification-information transmitting unit;

an antenna joint that holds the antenna in a rotatable manner; and

a connector for connecting the portable authentication apparatus to the information processing apparatus.