Mutual authentication apparatus and method

• US 20070192841A1
• Filed: 12/14/2006
• Published: 08/16/2007
• Est. Priority Date: 02/15/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Hee Jean
• Application Number:
  US11/638,576
• Publication Number:
  US 20070192841A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A mutual authentication apparatus and method for using the Internet, including a user authentication code generator and a server authentication code generator which execute mutual authentication between a user and a server by generating a server authentication code required for the access to the server using an authentication code generating function based on time information provided from a mobile communication network or a global positioning system (GPS) satellite, accessing the server with the generated server authentication code, generating a user authentication code using an authentication code generating function at the accessed server, and providing the generated user authentication code to the user.

Claims

1. A mutual authentication apparatus for generating authentication codes for mutual authentication with a server based on time information (T) which is provided over a communication network, comprising:

a user authentication code generator which generates a user authentication code using an authentication code generating function; and

a server authentication code generator which generates a server authentication code using the authentication code generating function.

2. The mutual authentication apparatus as in claim 1, wherein the mutual authentication apparatus is applied to a mobile terminal including a PDA and a Wibro phone.

3. The mutual authentication apparatus as in claim 1, further comprising:

a time information receiver which receives the time information T; and

a display which displays the user authentication code and the server authentication code.

4. The mutual authentication apparatus as in claim 1, wherein the authentication code generating function uses secret information (X, Y) which is shared with the server, and the time information T.

5. The mutual authentication apparatus as in claim 1, wherein the user authentication code and the server authentication code are generated within a synchronization interval in which synchronization is conducted according to a network condition.

6. A mutual authentication method of a user terminal, comprising:

receiving time information T over a communication network;

generating a user authentication code using an authentication code generating function based on the time information; and

displaying the user authentication code.

7. The mutual authentication method as in claim 6, wherein the authentication code generating function uses secret information X shared with a server which authenticates the user terminal, and the time information T.

8. The mutual authentication method as in claim 6, wherein the user authentication code is generated within a synchronization interval in which synchronization is conducted according to a network condition.

9. A mutual authentication method of a server, comprising:

performing user authentication based on a user authentication code received from a user terminal;

generating a server authentication code using the user authentication code and an authentication code generating function; and

displaying the server authentication code to be recognized by a user.

10. The mutual authentication method as in claim 9, wherein the user authentication code contains secret information X shared with the user terminal, and time information T.

11. The mutual authentication method as in claim 9, wherein the user authenticating operation generates a user authentication code with the authentication code generating function based on the user authentication code, and performs the user authentication according to whether the generated user authentication code matches the received user authentication code.

12. The mutual authentication method as in claim 9, wherein the server authentication code generating operation generates the server authentication code by applying the secret information, which is contained in the user authentication code, to the authentication code generating function.

13. The mutual authentication method as in claim 9, wherein the user authentication code and the server authentication code are generated within a synchronization interval in which synchronization is conducted according to a network condition.