Mutual authentication system between user and system

• US 20060230435A1
• Filed: 08/23/2004
• Published: 10/12/2006
• Est. Priority Date: 08/27/2003
• Status: Active Grant

• Current Assignee: Mnemonic Security Limited
• Original Assignee: Mnemonic Security Limited
• Inventors: Kokumai, Hitoshi
• Granted Patent: US 7,552,330 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs

Abstract

An effective means for system authentication by a user. A system is characterized by connecting an electronic apparatus on the system management side to a terminal on the user side via a communication line including the internet and, using system authentication information recorded on a recording medium included in the electronic apparatus on the system side and personal authentication information entered through a personal input operation on a user-operated terminal, for mutual authentication between the user and the electronic apparatus on the system management side that is accessed. In the mutual authentication system between the user and the system, two sets of authentication data are registered: one set is personal authentication data indicating the personal authentication information on the user and other set is server authentication date indicating the system authentication information. The system is characterized in that server side authentication using the server authentication date and user side authentication using authentication data of the user are performed alternatively.

Claims

1. A mutual authentication system between a user and a system in which an electronic apparatus at a system management side and a terminal device at the user side are connected via a communication path including Internet, and mutually authenticate a user and the electronic apparatus at the system management side as a target of access by using the system authentication information from a recording medium that is incorporated in the electronic apparatus at the system side and the personal authentication information from a personal input operation of the terminal device operated by the user,

wherein two sets of data for authentication are registered, one of the sets being data for personal authentication indicating personal authentication information of the user, and the other set being data for server authentication indicating system authentication information, and

the authentication at the server side using the data for the server authentication and the authentication at the user side using the data for the personal authentication of the user are alternately performed.

2. A mutual authentication system between a user and a system in which an electronic apparatus at a system management side and a terminal device at the user side are connected via a communication path including Internet, and mutually authenticate a user and the electronic apparatus at the system management side as a target of access by using the system authentication information from a recording medium that is incorporated in the electronic apparatus at the system side and the personal authentication information from a personal input operation of the terminal device operated by the user,

wherein two kinds of plural reference symbols are registered, respectively, for the mutual authentication, one of the sets being data for the personal authentication indicating the personal authentication information of the user, and the other set being data for the system authentication indicating the system authentication information;

and

the authentication at the system side using the data for system authentication and the authentication at the user side using the data for personal authentication of the user are alternately performed.

3. The mutual authentication system between a user and a system according to claim 2,

wherein two kinds of plural reference symbols are registered, respectively, for the mutual authentication, one of the sets being data for the personal authentication indicating the personal authentication information of the user, and the other set being data for the system authentication indicating the system authentication information;

and

the data for the user authentication is configured by a user authentication symbol and the data for the server authentication is configured by a server authentication symbol.

4. The mutual authentication system between a user and a system according to claim 2,

wherein the two kinds of reference symbols have the same number of the data for the personal authentication and the data for the data for the authentication.

5. The mutual authentication system between a user and a system according to claim 2,

wherein, in the two kinds of reference symbols, at least the data for the personal authentication is made into an image using type reference symbol.

6. The mutual authentication system between a user and a system according to claim 2,

wherein, the data for the personal authentication is constituted from image using type reference symbols, each selected as a normal symbol image from the group of plural normal symbol images and plural decoy symbol images;

the personal authentication is a memory selection depending on an individual experience; and

the selection order of the plural normal symbol images is in chronological order of the individual experiences.