AUTHENTICATION SYSTEM, AUTHENTICATION-SERVICE-PROVIDING DEVICE, AUTHENTICATION-SERVICE-PROVIDING METHOD, AND COMPUTER READABLE MEDIUM

• US 20080098466A1
• Filed: 05/22/2007
• Published: 04/24/2008
• Est. Priority Date: 10/19/2006
• Status: Active Grant

• Current Assignee: Fujifilm Business Innovation Corp. (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Inventors: Yoshida, Takeo, Aoki, Ryuichi
• Granted Patent: US 7,950,050 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

An authentication system includes: a first information processor; a second information processor; an authentication-service-providing device; and an authentication device, wherein the authentication-service-providing device has: an unit that receives second authentication information for authenticating a user from the second information processor and executes a second authentication based on the second authentication information; and an unit that issues third authentication information to the second information processor when the second authentication is successful; and the authentication device has: an unit that receives first authentication information for authenticating the user from the first information processor and executes a first authentication based on the first authentication information; and an unit that receives, from the first information processor, third authentication information obtained by the second information processor and input to the first information processor and cooperates with the authentication-service-providing device to obtain a result of a third authentication based on the third authentication information.

Claims

1. An authentication system comprising:

a first information processor;

a second information processor;

an authentication-service-providing device; and

an authentication device, wherein

the second information processor comprises;

a second authentication information transmission unit that transmits second authentication information for authenticating a user to the authentication-service-providing device; and

an authentication information obtaining unit that obtains third authentication information issued by the authentication-service-providing device in response to the second authentication information;

the authentication-service-providing device comprises;

a second authentication unit that receives the second authentication information from the second information processor and executes a second authentication based on the second authentication information; and

an authentication information issuance unit that issues the third authentication information to the second information processor when the second authentication is successful;

the first information processor comprises;

a first authentication information transmission unit that receives input of first authentication information for authenticating the user and transmits the first authentication information to the authentication device; and

a third authentication information transmission unit that receives input of third authentication information obtained by the second information processor and transmits the third authentication information to the authentication device; and

the authentication device comprises;

a first authentication unit that receives the first authentication information from the first information processor and executes a first authentication based on the first authentication information; and

a third authentication result obtaining unit that receives the third authentication information from the first information processor and cooperates with the authentication-service-providing device to obtain a result of a third authentication based on the third authentication information.

2. An authentication system comprising:

an authentication-service-providing device; and

an authentication device, wherein

the authentication-service-providing device comprises;

a second authentication unit that receives second authentication information for authenticating a user from a second information processor and executes a second authentication based on the second authentication information; and

an authentication information issuance unit that issues third authentication information to the second information processor when the second authentication is successful; and

the authentication device comprises;

a first authentication unit that receives first authentication information for authenticating the user from a first information processor and executes a first authentication based on the first authentication information; and

a third authentication result obtaining unit that receives, from the first information processor, third authentication information obtained by the second information processor and input to the first information processor and cooperates with the authentication-service-providing device to obtain a result of a third authentication based on the third authentication information.

3. An authentication-service-providing device comprising:

a second authentication unit that receives second authentication information for authenticating a user from a second information processor and executes a second authentication based on the second authentication information;

an authentication information issuance unit that issues third authentication information to the second information processor when the second authentication is successful; and

a third authentication unit that receives third authentication information from an authentication device which receives first authentication information for authenticating the user from a first information processor, executes a first authentication based on the first authentication information, and receives, from the first information processor, the third authentication information obtained by the second information processor and input to the first information processor, and that executes a third authentication based on the received third authentication information and the issued third authentication information, and reports a result of the third authentication to the authentication device.

4. The authentication-service-providing device according to claim 3, wherein

the third authentication unit receives, from the authentication device, identification information of the first information processor transmitting the third authentication information, along with the third authentication information.

5. The authentication-service-providing device according to claim 3, further comprising:

a fraud information notification unit that reports information related to fraud when the first authentication is successful and the third authentication fails.

6. The authentication-service-providing device according to claim 4, further comprising:

a fraud information notification unit that reports information related to fraud when the first authentication is successful and the third authentication fails.

7. The authentication-service-providing device according to claim 3, wherein

the third authentication information has a validity period and is one-time information.

8. An authentication-service-providing device comprising:

a second authentication unit that receives second authentication information for authenticating a user from a second information processor and executes a second authentication based on the second authentication information;

an authentication information issuance unit that issues third authentication information to the second information processor when the second authentication is successful; and

an authentication-information-providing unit that provides issued third authentication information to an authentication device which receives first authentication information for authenticating the user from a first information processor, executes a first authentication based on the first authentication information, and receives, from the first information processor, third authentication information obtained by the second information processor and input to the first information processor.

9. A method for providing an authentication service, comprising:

receiving second authentication information for authenticating a user from a second information processor and executing a second authentication based on the second authentication information;

issuing third authentication information to the second information processor when the second authentication is successful; and

cooperating with an authentication device which receives first authentication information for authenticating the user from a first information processor, executes a first authentication based on the first authentication information, and receives, from the first information processor, the third authentication information obtained by the second information processor and input to the first information processor, to obtain a result of a third authentication based on the third authentication information.

10. The method for providing an authentication service according to claim 9, wherein the cooperating is comprising:

receiving the third authentication information from the authentication device;

executing a third authentication based on the received third authentication information and the issued third authentication information; and

reporting a result of the third authentication to the authentication device.

11. The method for providing an authentication service, according to claim 9, wherein the cooperating is comprising:

providing the issued third authentication information to the authentication device.

12. A computer readable medium storing a program causing a computer to execute a process for providing an authentication service, the process comprising:

receiving second authentication information for authenticating a user from a second information processor and executing a second authentication based on the second authentication information;

issuing third authentication information to the second information processor when the second authentication is successful; and

cooperating with an authentication device which receives first authentication information for authenticating the user from a first information processor, executes a first authentication based on the first authentication information, and receives, from the first information processor, the third authentication information obtained by the second information processor and input to the first information processor, to obtain a result of a third authentication based on the third authentication information.

13. The computer readable medium according to claim 12, wherein the cooperating comprising:

receiving the third authentication information from the authentication device;

executing a third authentication based on the received third authentication information and the issued third authentication information; and

reporting a result of the third authentication to the authentication device.

14. The computer readable medium according to claim 12, wherein the cooperating comprising:

providing the issued third authentication information to the authentication device.

15. An authentication system comprising:

a first information processor;

a second information processor;

an authentication-service-providing device; and

an authentication device;

wherein

the second information processor comprises a second authentication information transmission unit that transmits to the authentication-service-providing device second authentication information for authenticating a user;

the authentication-service-providing device comprises a second authentication unit that receives the second authentication information from the second information processor and executes a second authentication based on the second authentication information;

the first information processor comprises a first authentication information transmission unit that receives input of first authentication information for authenticating the user and transmits the first authentication information to the authentication device; and

the authentication device comprises;

a first authentication unit that receives the first authentication information from the first information processor and executes a first authentication based on the first authentication information, and

a second authentication result checking unit that cooperates with the authentication-service-providing device to check whether or not the second authentication is successful for a user specified by the first authentication information.

16. An authentication system comprising:

an authentication-service-providing device; and

an authentication device;

wherein

the authentication-service-providing device comprises a second authentication unit that receives second authentication information for authenticating a user from a second information processor and executes a second authentication based on the second authentication information; and

the authentication device comprises;

a first authentication unit that receives first authentication information for authenticating the user from a first information processor and executes a first authentication based on the first authentication information; and

a second authentication result-checking unit that cooperates with the authentication-service-providing device to check whether or not the second authentication is successful for a user specified by the first authentication information.

17. An authentication-service-providing device comprising:

a second authentication unit that receives second authentication information for authenticating a user from a second information processor, executes a second authentication based on the second authentication information, and records, when the second authentication is successful, in a second authentication result memory, information indicating that the second authentication is successful, in correlation with user identification information for identifying a user specified by the second authentication information; and

a second authentication result notification unit that receives, from an authentication device which receives first authentication information for authenticating the user from a first information processor and executes a first authentication based on the first authentication information, user identification information for identifying a user specified by the first authentication information, and notifies the authentication device as to whether or not the second authentication is successful for a user identified by the user identification information, on the basis of a stored content of the second authentication result memory.

18. A method for providing an authentication service, comprising:

receiving from a second information processor second authentication information for authenticating a user, executing a second authentication based on the second authentication information, and recording, when the second authentication is successful, in a second authentication result memory, information indicating that the second authentication is successful, in correlation with user identification information for identifying a user specified by the second authentication information; and

receiving, from an authentication device which receives first authentication information for authenticating the user from a first information processor and executes a first authentication based on the first authentication information, user identification information for identifying a user specified by the first authentication information, and notifying the authentication device as to whether or not the second authentication is successful for a user identified by the user identification information, on the basis of a stored content of the second authentication result memory.

19. A computer readable medium storing a program causing a computer to execute a process for providing an authentication service, the process comprising:

receiving from a second information processor second authentication information for authenticating a user, executing a second authentication based on the second authentication information, and recording, when the second authentication is successful, in a second authentication result memory, information indicating that the second authentication is successful, in correlation with user identification information for identifying a user specified by the second authentication information; and

receiving, from an authentication device which receives first authentication information for authenticating the user from a first information processor and executes a first authentication based on the first authentication information, user identification information for identifying a user specified by the first authentication information, and notifying the authentication device as to whether or not the second authentication is successful for a user identified by the user identification information, on the basis of a stored content of the second authentication result memory.