Wireless authentication method and wireless authentication system

• US 20070294746A1
• Filed: 08/24/2007
• Published: 12/20/2007
• Est. Priority Date: 02/25/2005
• Status: Active Grant

• Current Assignee: Ryujin Fujinomaki
• Original Assignee: The Super Game Corporation
• Inventors: Sasakura, Toyoki, Miyamoto, Kenichi
• Granted Patent: US 7,924,139 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: B60R 2325/205 Mobile phones
• CPC Class Codes: B60R 25/2018 Central base unlocks or authorises unlocking
• CPC Class Codes: B60R 25/25 using biometry
• CPC Class Codes: B60R 25/252 Fingerprint recognition
• CPC Class Codes: G07C 2009/00793 by Hertzian waves
• CPC Class Codes: G07C 9/00309 operated with bidirectional data transmission between data carrier and locks
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/40 for vehicles, e.g. vehicle-to-pedestrians [V2P]

Abstract

A first communication device performs a first, a second, and a third authentication processing for a second communication device, a authentication station sends to the first communication device a confirmation signal indicating that a person'"'"'s identity is confirmed, when the authentication station succeeds the authentication of the second communication device, so that the authentication station validates the cancellation of a usage restrictions of the controlled device imposed by the first communication device based on the cancellation permission signal.

Claims

1. A wireless authentication method, comprising the steps of:

performing a first authentication processing for a second communication device, by checking received identification information against identification information stored in an internal storage unit of a first communication device, when the first communication device judges that a transmission signal level from the second communication device is equal to or more than a predetermined value, and receives the identification information identifying the second communication device from the second communication device, by the first communication device;

reporting to a remote authentication station an authentication result including the identification information, when the first communication device succeeds the authentication of the second communication device by performing the first authentication processing, by the first communication device;

performing a second authentication processing for the second communication device, by checking the identification information including the authentication result against identification information stored in an internal storage unit of the authentication station, by the authentication station;

transmitting to the first communication device a cancellation permission signal to cancel the usage restrictions of a controlled device whose usage is restricted by the first communication device, when the authentication of the second communication device by the second authentication processing is successful, by the authentication station;

requesting personal specification information on the user to the second communication device, by the first communication device;

sending fingerprint information sent by the second communication device to the authentication station, by the first communication device;

performing a third authentication processing for the second communication device, by checking a correspondence relationship between the personal specification information and the identification information stored in the internal storage unit of the authentication station, by the authentication station; and

sending to the first communication device confirmation signal indicating that a person'"'"'s identity is confirmed, when the authentication station succeeds the authentication of the second communication device, by the authentication station, so that the authentication station validates the cancellation of the usage restrictions of the controlled device imposed by the first communication device based on the cancellation permission signal.

2. The wireless authentication method according to claim 1, wherein the authentication station sends to the controlled device the confirmation signal indicating that a person'"'"'s identity is confirmed at the same time, when the authentication station succeeds the third authentication processing;

and

the controlled device validates the cancellation of the usage restrictions of the controlled device imposed by the first communication device, when the controlled device receives the confirmation of a person'"'"'s identity from the first communication device and the authentication station.

3. The wireless authentication method according to claim 1, wherein the personal specification information is divided into a first part and a second part and stored in the first communication device and the second communication device respectively;

and

the personal specification information that is sent to the first communication device from the second communication device is the second part and the first communication device combines the second part of the personal specification information sent from the second communication device with the first part of the personal specification information and sends to the authentication station as personal specification information on the user.

4. The wireless authentication method according to claim 3, wherein the personal specification information is fingerprint information for the user.

5. The wireless authentication method according to claim 4, wherein the fingerprint information is registered by hashing source data.

6. The wireless authentication method according to claim 1, wherein the personal specification information is erased, when the distance between the first and second communication devices for which the transmission signal level from the second communication device is not equal to or more than a predetermined value is maintained for a predetermined time.

14. The wireless authentication method according to claim 2, wherein the personal specification information is divided into a first part and a second part and stored in the first communication device and the second communication device respectively;

and

the personal specification information that is sent to the first communication device from the second communication device is the second part and the first communication device combines the second part of the personal specification information sent from the second communication device with the first part of the personal specification information and sends to the authentication station as personal specification information on the user.

7. A wireless authentication system, comprising:

a first communication device and second communication device which communicate interactively with one another by a wireless line;

a controlled device for which the cancellation of usage restrictions is controlled by the first communication device; and

an authentication station which communicates interactively between the first communication device and the controlled device;

wherein the authentication station stores respective distinctive IDs of the first communication device, the second communication device, and the controlled device, and personal specification information of a user using by the first communication device corresponding to the distinctive ID;

the first communication device performs a first authentication processing for the second communication device, by checking received identification information against identification information stored in an internal storage unit of the first communication device, when the first communication device judges that a transmission signal level from the second communication device is equal to or more than a predetermined value, and receives identification information identifying the second communication device from the second communication device;

the first communication device reports the authentication result including the identification information to the remote authentication station, when the first communication device succeeds the authentication of the second communication device by performing the first authentication processing;

the authentication station performs a second authentication processing for the second communication device, by checking the identification information included in the authentication result against identification information stored in an internal storage unit of the authentication station;

the authentication station transmits to the first communication device a cancellation permission signal to cancel the usage restrictions of the controlled device whose usage is restricted by the first communication device, when the authentication station succeeds the authentication of the second communication device by performing the second authentication processing;

the first communication device requests personal specification information of the user to the second communication device, and sends fingerprint information sent by the second communication device to the authentication station;

the authentication station performs a third authentication processing for the second communication device, by checking a correspondence relationship between the personal specification information and identification information stored in an internal storage unit of the authentication station; and

the authentication station sends to the first communication device a confirmation signal indicating that a person'"'"'s identity is confirmed, when the authentication station succeeds the authentication of the second communication device by performing the third authentication processing, so that the authentication station validates the cancellation of the usage restrictions of the controlled device imposed by the first communication device based on the cancellation permission signal.

8. The wireless authentication system according to claim 7, wherein the authentication station sends to the controlled device the confirmation signal indicating that a person'"'"'s identity is confirmed at the same time, when the authentication station succeeds the third authentication processing;

and

the controlled device validates the cancellation of the usage restrictions for the controlled device imposed by the first communication device, when the controlled device receives a confirmation report of a person'"'"'s identity from the first communication device and the authentication station.

9. The wireless authentication system according to claim 7, wherein the personal specification information is divided into a first part and a second part and stored in the first communication device and the second communication device respectively;

and

the personal specification information that is sent to the first communication device from the second communication device is the second part and the first communication device combines the second part of the personal specification information sent from the second communication device with the first part of the personal specification information and sends to the authentication station as personal specification information on the user.

10. The system authentication system according to claim 9, wherein the personal specification information is fingerprint information for the user.

11. The wireless authentication system according to claim 10, wherein the fingerprint information is registered by hashing source data.

12. The wireless authentication system according to claim 7, wherein the personal specification information is erased, when the distance between the first and second communication devices for which the transmission signal level from the second communication device is not equal to or more than a predetermined value is maintained for a predetermined time.

13. The wireless authentication system according to claim 7, wherein the controlled device is a door unlocking control device of an automobile.

15. The wireless authentication system according to claim 8, wherein the personal specification information is divided into a first part and a second part and stored in the first communication device and the second communication device respectively;

and

the personal specification information that is sent to the first communication device from the second communication device is the second part and the first communication device combines the second part of the personal specification information sent from the second communication device with the first part of the personal specification information and sends to the authentication station as personal specification information on the user.