CLIENT SERVER DISTRIBUTED SYSTEM, CLIENT APPARATUS, SERVER APPARATUS, AND MUTUAL AUTHENTICATION METHOD USED THEREIN

• US 20080028458A1
• Filed: 07/23/2007
• Published: 01/31/2008
• Est. Priority Date: 07/28/2006
• Status: Abandoned Application

• Current Assignee: NEC Infrontia Corporation (NEC Corporation)
• Original Assignee: NEC Infrontia Corporation (NEC Corporation)
• Inventors: WATANABE, Yasuhiro, MASUHIRO, Mao
• Application Number:
  US11/781,659
• Publication Number:
  US 20080028458A1
• Time in Patent Office: Days
• US Class Current: 726/14
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]

Abstract

In a client-server distributed system including an SIP-protocol-coping server apparatus and an SIP-protocol-coping client apparatus, client authentication of the SIP-protocol-coping client apparatus is performed from the SIP-protocol-coping server apparatus by a client authentication unit. In the client-server distributed system, in addition to the client authentication, server authentication of the SIP-protocol-coping server apparatus is performed by a server authentication unit from the SIP-protocol-coping client apparatus. In the client-server distributed system, authentication completion is recognized when the bidirectional authentication is achieved.

Claims

1. An SIP (Session Initiation Protocol)-protocol-coping client-server distributed system in which an SIP-protocol-coping client apparatus and an SIP-protocol-coping server apparatus are connected to a network, and client authentication to authenticate the client apparatus from the server apparatus when the client apparatus registers position information in the server apparatus,

means to authenticate the server apparatus from the client apparatus is arranged in each of the server apparatus and the client apparatus.

2. The client-server distributed system according to claim 1, wherein

the server apparatus includes means which sets and stores an externally input user name and an externally input password of the client apparatus and means which authenticates a user name and a password of a client apparatus to be connected by the client authentication, and

the client apparatus includes means which sets and stores an externally input server name of the server apparatus and the user name and the password of the client apparatus and means which authenticates a server name and a password of a server apparatus to be connected.

3. The client-server distributed system according to claim 2, wherein

the server apparatus is connected to a maintenance interface to which the user name and the password can be input, and

the client apparatus is connected to a maintenance interface to which the server name, the user name, and the password can be input.

4. The client-server distributed system according to claim 1, wherein

the client authentication and the server authentication are performed by challenge-digest authentication.

5. The client-server distributed system according to claim 4, wherein

the client apparatus includes means which generates a challenge to perform the server authentication to perform digest authentication, and

the server apparatus includes means which generates a digest on the basis of the challenge.

6. The client-server distributed system according to claims 1, wherein

in communication between the server apparatus and the client apparatus, authentication achievement is recognized when the client authentication and the client authentication are achieved.

7. The client-server distributed system according to claim 1, wherein

a one-time password is used in initial authentication between the server apparatus and the client apparatus.

8. The client-server distributed system according to claim 7, wherein

the one-time password is made invalid when authentication in communication between the server apparatus and the client apparatus is achieved.

9. The client-server distributed system according to claim 7, wherein

the server apparatus includes means which generates a mutual authentication password used in second and subsequent start-up states of the client apparatus and means which delivers the generated mutual authentication password to the client apparatus.

10. The client-server distributed system according to claim 7, wherein

the mutual authentication password is generated and set in initial authentication in the server apparatus, in a state in which the mutual authentication password is set in the client apparatus, the server apparatus performs authentication by using the user name of the client apparatus and the mutual authentication password in the second and subsequent start-up states of the client apparatus, and the client apparatus performs authentication by using the server name of the server apparatus and the mutual authentication password.

11. The client-server distributed system according to claim 7, wherein

the server apparatus encodes the mutual authentication password to deliver the mutual authentication password to the client apparatus, and

the client apparatus decodes and sets the encoded mutual authentication password.

12. The client-server distributed system according to claim 7, wherein

the server apparatus encodes the mutual authentication password in response to an external designation of the presence/absence of encoding to deliver the encoded mutual authentication password to the client apparatus and notifies the client apparatus of the designation of the presence/absence of encoding, and

the client apparatus sets the designation of the presence/absence of encoding transmitted from the server apparatus and decodes and sets the mutual authentication password in reception of the encoded mutual authentication password.

13. The client-server distributed system according to claim 7, wherein

the server apparatus sets an encoding rule externally designated and used in encoding of the mutual authentication password and transmits the encoding rule to the client apparatus, and

the client apparatus sets the encoding rule transmitted from the server apparatus.

14. The client-server distributed system according to claim 7, wherein

the server apparatus and the client apparatus generate and set an encoding key for delivery of the mutual authentication password by a common procedure.

15. The client-server distributed system according to claim 1, wherein

the server apparatus and the client apparatus repeat bidirectional authentication when communication between the server apparatus and the client apparatus is interrupted for a preset predetermined period of time.

16. The client-server distributed system according to claim 1, wherein

the server apparatus and the client apparatus repeat bidirectional authentication at preset intervals.

17. The client apparatus according to claim 1.

18. The server apparatus according to claim 1.

19. A mutual authentication method used in an SIP (Session Initiation Protocol)-protocol-coping client-server distributed system in which an SIP-protocol-coping client apparatus and an SIP-protocol-coping server apparatus are connected to a network, and client authentication to authenticate the client apparatus from the server apparatus when the client apparatus registers position information in the server apparatus, wherein

each of the server apparatus and the client apparatus execute a process to authenticate the server apparatus from the client apparatus.

20. The mutual authentication method according to claim 19, wherein

the server apparatus executes a process of setting and storing an externally input user name and an externally input password of the client apparatus and a process of authenticating a user name and a password of a client apparatus to be connected by the client authentication, and

the client apparatus executes a process of setting and storing an externally input server name of the server apparatus and the user name and the password of the client apparatus and a process of authenticating a server name and a password of a server apparatus to be connected.

21. The mutual authentication method according to claim 20, wherein

the server apparatus is connected to a maintenance interface to which the user name and the password can be input, and

the client apparatus is connected to a maintenance interface to which the server name, the user name, and the password can be input.

22. The mutual authentication method according to claim 19, wherein

the client authentication and the server authentication are performed by challenge-digest authentication.

23. The mutual authentication method according to claim 22, wherein

the client apparatus includes means which generates a challenge to perform the server authentication to perform digest authentication, and

the server apparatus includes means which generates a digest on the basis of the challenge.

24. The mutual authentication method according to claim 19, wherein

in communication between the server apparatus and the client apparatus, authentication achievement is recognized when the client authentication and the client authentication are achieved.

25. The mutual authentication method according to claim 19, wherein

a one-time password is used in initial authentication between the server apparatus and the client apparatus.

26. The mutual authentication method according to claim 25, wherein

the one-time password is made invalid when authentication in communication between the server apparatus and the client apparatus is achieved.

27. The mutual authentication method according to claim 25, wherein

the server apparatus includes means which generates a mutual authentication password used in second and subsequent start-up states of the client apparatus and means which delivers the generated mutual authentication password to the client apparatus.

28. The mutual authentication method according to claim 25, wherein

the mutual authentication password is generated and set in initial authentication in the server apparatus, in a state in which the mutual authentication password is set in the client apparatus, the server apparatus performs authentication by using the user name of the client apparatus and the mutual authentication password in the second and subsequent start-up states of the client apparatus, and the client apparatus performs authentication by using the server name of the server apparatus and the mutual authentication password.

29. The mutual authentication method according to claim 25, wherein

the server apparatus encodes the mutual authentication password to deliver the mutual authentication password to the client apparatus, and

the client apparatus decodes and sets the encoded mutual authentication password.

30. The mutual authentication method according to claim 25, wherein

the server apparatus encodes the mutual authentication password in response to an external designation of the presence/absence of encoding to deliver the encoded mutual authentication password to the client apparatus and notifies the client apparatus of the designation of the presence/absence of encoding, and

the client apparatus sets the designation of the presence/absence of encoding transmitted from the server apparatus and decodes and sets the mutual authentication password in reception of the encoded mutual authentication password.

31. The mutual authentication method according to claim 25, wherein

the server apparatus sets an encoding rule externally designated and used in encoding of the mutual authentication password and transmits the encoding rule to the client apparatus, and

the client apparatus sets the encoding rule transmitted from the server apparatus.

32. The mutual authentication method according to claims 25, wherein

the server apparatus and the client apparatus generate and set an encoding key for delivery of the mutual authentication password by a common procedure.

33. The mutual authentication method according to claim 19, wherein

the server apparatus and the client apparatus repeat bidirectional authentication when communication between the server apparatus and the client apparatus is interrupted for a preset predetermined period of time.

34. The mutual authentication method according to claim 19, wherein

the server apparatus and the client apparatus repeat bidirectional authentication at preset intervals.

35. A computer program product executed by a client apparatus in an SIP (Session Initiation Protocol)-protocol-coping client-server distributed system in which an SIP-protocol-coping client apparatus and an SIP-protocol-coping server apparatus are connected to a network, and client authentication to authenticate the client apparatus from the server apparatus when the client apparatus registers position information in the server apparatus, wherein

the computer program product causes a central processing device of the client apparatus to execute a process of setting and storing an externally input server name of the server apparatus and an externally input user name and an externally input password of the client apparatus and a process of authenticating a server name and a password of a server apparatus to be connected, and

the computer program product causes the client apparatus to authenticate the server apparatus.