AUTHENTICATION SYSTEM AND METHOD THEREOF FOR WIRELESS NETWORKS

• US 20090045943A1
• Filed: 10/24/2007
• Published: 02/19/2009
• Est. Priority Date: 08/16/2007
• Status: Active Grant

• Current Assignee: Industrial Technology Research Institute
• Original Assignee: Industrial Technology Research Institute
• Inventors: Chiou, Shin-Yan, Chen, Yu-Tso, Shih, Teng-Jui
• Granted Patent: US 8,188,857 B2
• Time in Patent Office: Days
• US Class Current: 340/539.110
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An authentication system for a wireless network is disclosed. The authentication system includes a card, a card reader, an end-user device, and a wireless access device. The card reader is coupled to the wireless access device. The card records a data, and the card reader reads the data recorded in the card. The wireless access device receives the data read by the card reader and performs authentication between the wireless access device and the end-user device according to the data.

Claims

1. An authentication system for a wireless network, comprising:

a card, recording a first data;

a first card reader, reading the first data recorded in the card;

an end-user device; and

a wireless access device, coupled to the first card reader, for receiving the first data read by the first card reader and performing authentication between the end-user device and the wireless access device according to the first data.

2. The authentication system according to claim 1, wherein the wireless access device and the end-user device are connected to each other through a fixed service set identifier (SSID).

3. The authentication system according to claim 1, wherein the wireless access device and the end-user device are connected to each other through a dynamically produced SSID.

4. The authentication system according to claim 1, wherein the card is a contact less card, and the first card reader is an inductive card reader.

5. The authentication system according to claim 4, wherein the contact less card is embedded in the end-user device.

6. The authentication system according to claim 1, wherein the card is a contact card, and the first card reader is a contact card reader.

7. The authentication system according to claim 1 further comprising:

a second card reader, coupled to the end-user device, for reading the first data recorded in the card and transmitting the first data to the end-user device.

8. The authentication system according to claim 7, wherein the second card reader is embedded in the end-user device.

9. The authentication system according to claim 7, wherein the card is a contact less card, the first card reader is a first inductive card reader, and the second card reader is a second inductive card reader.

10. The authentication system according to claim 7, wherein the card is a contact card, the first card reader is a first contact card reader, and the second card reader is a second contact card reader.

11. The authentication system according to claim 7, wherein the end-user device transmits the first data to the wireless access device via the wireless network in order to perform authentication between the end-user device and the wireless access device.

12. The authentication system according to claim 7, wherein after the first card reader reads the first data, the first card reader generates a second data and writes the second data into the card, and the first card reader further transmits the second data and the first data to the wireless access device;

the second card reader reads the first data and the second recorded in the card and transmits the first data and the second data to the end-user device;

the wireless access device transmits the second data to the end-user device for authentication via the wireless network; and

the end-user device transmits the first data to the wireless access device for authentication via the wireless network.

13. The authentication system according to claim 12, wherein the second data is a random number.

14. The authentication system according to claim 1 further comprising:

an authentication server, coupled to the wireless access device;

wherein the wireless access device queries a corresponding user authentication data from the authentication server according to the first data recorded in the card and compares the user authentication data and a data input by the end-user device so as to perform authentication between the end-user device and the wireless access device.

15. The authentication system according to claim 1, wherein the wireless access device comprises at least one WiFi access device.

16. The authentication system according to claim 1, wherein the authentication system may be applied to a GSM, GPRS, WiFi, WiMAX, 3G, or 4G wireless communication system.

17. The authentication system according to claim 1, wherein the authentication system may be applied to a video push-casting system, an exhibition system, an access control system, or a payment system.

18. An authentication method for a wireless network, comprising:

reading a first data recorded in a card by using a first card reader;

transmitting the first data to a wireless access device; and

performing authentication between the wireless access device and an end-user device according to the first data.

19. The authentication method according to claim 18 further comprising:

calculating a common encryption key for performing a secured communication by using the wireless access device and the end-user device if the authentication between the wireless access device and the end-user device succeeds; and

terminating the network connection or restarting the network connection if the authentication between the wireless access device and the end-user device fails.

20. The authentication method according to claim 18, wherein the wireless access device and the end-user device are connected to each other through a fixed SSID.

21. The authentication method according to claim 18, wherein the wireless access device and the end-user device are connected to each other through a dynamically produced SSID.

22. The authentication method according to claim 18 further comprising:

reading the first data recorded in the card by using a second card reader; and

transmitting the first data to the end-user device.

23. The authentication method according to claim 22 further comprising:

transmitting the first data to the wireless access device via the wireless network by using the end-user device in order to perform authentication between the end-user device and the wireless access device.

24. The authentication method according to claim 22 further comprising:

writing a second data into the card by using the first card reader when the first card reader finishes reading the first data;

transmitting the second data and the first data to the wireless access device by using the first card reader;

reading the first data and the second data recorded in the card by using the second card reader;

transmitting the first data and the second data to the end-user device by using the second card reader;

transmitting the second data to the end-user device for authentication via the wireless network by using the wireless access device; and

transmitting the first data to the wireless access device for authentication via the wireless network by using the end-user device.

25. The authentication method according to claim 24, wherein the second data is a random number.

26. The authentication method according to claim 18 further comprising:

providing an authentication server;

querying a corresponding user authentication data from the authentication server according to the first data recorded in the card by using the wireless access device; and

comparing the user authentication data and a data input by the end-user device via the wireless network by using the wireless access device, so as to perform authentication between the end-user device and the wireless access device.

27. The authentication method according to claim 18, wherein the authentication method may be applied to a GSM, GPRS, WiFi, WiMAX, 3G, or 4G wireless communication system.

28. The authentication method according to claim 18, wherein the authentication method may be applied to a video push-casting system, an exhibition system, an access control system, or a payment system.