Communication System and Authentication Card

• US 20090100265A1
• Filed: 05/29/2006
• Published: 04/16/2009
• Est. Priority Date: 05/31/2005
• Status: Active Grant

• Current Assignee: Semiconductor Energy Laboratory Co., Ltd.
• Original Assignee: Semiconductor Energy Laboratory Co., Ltd.
• Inventors: Tadokoro, Asami
• Granted Patent: US 8,700,910 B2
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

One of the objects of the present invention is to provide a communication system in which biometrics can be utilized without leaking to a third person so that a strict personal authentication can be conducted. The communication system includes, storing a correspondence table in a card, storing a reference password which is formed by converting a part of biometrics of an authorized user in the card by using the correspondence table, reading a part of biometrics of a user by the card, converting a part of the biometrics of the user into a password by the card using the correspondence table, and checking the password against the reference password by the card, wherein the card and the user are authenticated if a the password and the reference password match in the step of checking.

Claims

1. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card;

converting the biometrics of the user into a password by the card using the correspondence table; and

checking the password against the reference password by the card,

wherein the card and the user are authenticated if the password and the reference password match in the step of checking.

8. The authentication method according to any one of claims 1 to 7, wherein the step of reading biometrics of a user is conducted by a sensor provided in the card.

13. The communication system according to any one of claims 1 to 7 and 9 to 10, wherein information obtained from a hand is used as the biometrics.

14. The communication system according to any one of claims 1 to 7 and 9 to 10, wherein information obtained from a fingerprint is used as the biometrics.

2. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card using power supplied by communication between the card and a terminal;

converting the biometrics of the user into a password by the card using the correspondence table; and

checking the password against the reference password by the card,

wherein the card and the user are authenticated if the password and the reference password match in the step of checking.

3. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card;

converting the biometrics of the user into a password by the card using the correspondence table;

checking the password against the reference password by the card, and

transmitting authentication data of the user if the password and the reference password match in the step of checking.

4. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user with by the card using power supplied by communication between the card and a terminal;

converting the biometrics of the user into a password by the card using the correspondence table;

checking the password against the reference password by using the card, and

transmitting authentication data of the user to the terminal if the password and the reference password match in the step of checking.

5. An authentication method in a communication system in which a server identifies a user, comprising:

storing a correspondence table in a card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card using power supplied by communication between the card and a terminal;

converting the biometrics of the user into a password by the card using the correspondence table;

checking the password against the reference password by using the card; and

transmitting authentication data of the user to the terminal if the password and the reference password match in the step of checking,

wherein after the authentication data of the user is received by the terminal, communication between the user and the server starts through the terminal.

6. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card;

converting the biometrics of the user into a password by the card using the correspondence table; and

checking the password against the reference password by the card,

wherein the card does not transmit authentication data of the user if the password and the reference password do not match in the step of checking.

7. An authentication method in a communication system for identifying a user by a card, comprising:

storing a correspondence table in the card;

storing a reference password which is formed by converting biometrics of an authorized user in the card by using the correspondence table;

reading biometrics of a user by the card using power supplied by communication between the card and a terminal;

converting the biometrics of the user into a password by the card using the correspondence table; and

checking the password against the reference password by the card,

wherein the card does not transmit authentication data of the user to the terminal if the password and the reference password do not match in the step of checking.

9. A communication system comprising:

a terminal;

a management server; and

an authentication card having a function of distinguishing a user,

wherein the authentication card has a sensor for reading biometrics of the user,

a function of storing a correspondence table for converting the biometrics read by the sensor into a password,

a function of forming the password from the biometrics read by the sensor with reference to the correspondence table,

a function of storing a password which is formed from biometrics of an authorized user as a reference password by the function of forming the password,

a function of checking the password against the reference password, and

a function of wirelessly transmitting information to the terminal which is connected to the management server.

11. The communication system according to claim 9, wherein an authentication-complete signal is transmitted from the authentication card to the management server through the terminal if the password and the reference password match in the step of checking.

12. The communication system according to claim 9, wherein an authentication-incomplete signal is transmitted from the authentication card to the management server through the terminal if the password and the reference password do not match in the step of checking.

10. An authentication card which has a function of identifying a user, comprising:

a sensor for reading biometrics of the user,

a function of storing a correspondence table for converting the biometrics read by the sensor into a password,

a function of forming the password from the biometrics read by the sensor with reference to the correspondence table,

a function of storing a password as a reference password which is formed from biometrics of an authorized user by the function of forming the password,

a function of checking the password against the reference password, and

a function of wirelessly transmitting information.

15. The authentication card according to claim 10, wherein information can be transmitted wirelessly if the password and the reference password match in the step of checking.

16. The authentication card according to claim 10, wherein information cannot be transmitted wirelessly if the password and the reference password do not match in the step of checking.