Communication processing method and system relating to authentication information

• US 20080022356A1
• Filed: 09/18/2006
• Published: 01/24/2008
• Est. Priority Date: 06/07/2006
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Morikawa, Hiroaki, Tanaka, Kosuke, Sato, Ryuichi, Iriyama, Yasuomi
• Granted Patent: US 7,823,187 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention is to safely and surely distribute authentication information to users or user terminals. This method includes: requesting authentication using predetermined authentication information for an access destination via a network; receiving a notification indicating an authentication failure from the access destination; acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and requesting the authentication using the acquired currently valid authentication information for the access destination via the network. Thus, by supposing that a failure in the authentication occurs, and by causing the user side to present the data to indicate own legitimacy for the authentication information manager, the currently valid authentication information is distributed, for example, after the encryption.

Claims

1. A communication processing method, comprising:

requesting authentication using predetermined authentication information for an access destination via a network;

receiving notification indicating an authentication failure from said access destination;

acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and

requesting said authentication using said acquired currently valid authentication information for said access destination via said network.

2. The communication processing method as set forth in claim 1, wherein said acquiring comprises:

transmitting a session key request to said authentication information manager;

receiving said session key from said authentication information manager;

generating a digest corresponding to said session key by a predetermined digest function, and transmitting said digest to said authentication information manager; and

when said digest is judged by said authentication information manager to be legitimate, receiving said currently valid authentication information from said authentication information manager.

3. The communication processing method as set forth in claim 2, wherein said transmitting said session key comprises:

requesting said authentication using said predetermined authentication information for said authentication information manager via said network.

4. The communication processing method as set forth in claim 1, further comprising:

receiving notification of an authentication success based on said currently valid authentication information from said access destination; and

storing said currently valid authentication information into an authentication information storage.

5. A program embodied on a medium, for causing a computer to carry out a communication processing;

said program comprising;

requesting authentication using predetermined authentication information for an access destination via a network;

receiving notification indicating an authentication failure from said access destination;

acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and

requesting said authentication using said acquired currently valid authentication information for said access destination via said network.

6. A computer, comprising:

an authentication request unit that requests authentication using predetermined authentication information for an access destination via a network;

a unit that receives notification indicating an authentication failure from said access destination; and

a unit that acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device, and

wherein said authentication request unit requests said authentication using said acquired currently valid authentication information for said access destination via said network.

7. A computer system, comprising:

a processing server that carries out an authentication processing by predetermined authentication information;

an authentication information manager that holds authentication information used in said authentication processing carried out by said processing server in an authentication information storage, and distributes said authentication information to a client terminal that uses said authentication information; and

a client terminal that uses said authentication information and accesses said processing server, and

wherein after new registration or update of said authentication information used in said authentication processing carried out by said processing server occurs, said processing server notifies said client terminal of an authentication failure when an authentication request is received from said client terminal, and

said authentication information manager transmits newly registered or updated currently valid authentication information to said client terminal when data indicating legitimacy of said client terminal is received from said client terminal.

8. The computer system as set forth in claim 7, wherein said data indicating said legitimacy of said client terminal is a value of a predetermined digest function for a session key given from said authentication information manager.