AUTHENTICATION METHOD, AUTHENTICATION APPARATUS AND AUTHENTICATION SYSTEM

• US 20120066753A1
• Filed: 09/08/2011
• Published: 03/15/2012
• Est. Priority Date: 03/09/2009
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: PAN, Jian, Tang, Lei
• Application Number:
  US13/227,928
• Publication Number:
  US 20120066753A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An authentication method includes: receiving second authentication information sent by an application server when first authentication succeeds; sending the second authentication information to a corresponding terminal through a telecommunication network; receiving an identifier (ID) for identifying the terminal and the second authentication verification information that are returned by the terminal through the telecommunication network; and performing a second authentication according to the ID and the second authentication verification information, or forwarding the ID and the second authentication verification information to the application server, so that the application server performs the second authentication.

Claims

1. An authentication method, comprising:

receiving second authentication information sent by an application server when first authentication succeeds;

sending the second authentication information to a corresponding terminal through a telecommunication network;

receiving an identifier (ID) for identifying the terminal and second authentication verification information that are returned by the terminal through the telecommunication network; and

performing second authentication according to the ID and the second authentication verification information, or forwarding the ID and the second authentication verification information to the application server, so that the application server performs the second authentication.

2. The authentication method according to claim 1, wherein the performing the second authentication according to the ID and the second authentication verification information comprises:

determining whether the ID and the second authentication information agree with registration information preset by a user of the terminal.

3. The authentication method according to claim 1, further comprising:

generating an authentication failure result if the ID and the second authentication verification information that are returned by the terminal are not received within a preset period.

4. A third-party authentication apparatus, comprising:

a first receiving module, configured to receive second authentication information sent by an application server when first authentication succeeds;

a sending module, configured to send the second authentication information to a corresponding terminal through a telecommunication network;

a second receiving module, configured to receive an identifier (ID) for identifying the terminal and second authentication verification information that are returned by the terminal through the telecommunication network; and

an authentication module, configured to determine whether the ID and the second authentication verification information agree with registration information of a user of the terminal.

5. An authentication system, comprising:

an application server, configured to perform first authentication according to received verification information, and send second authentication information when the first authentication succeeds; and

a third-party authentication apparatus, configured to receive the second authentication information, send the second authentication information to a corresponding terminal through a telecommunication network, receive an identifier (ID) for identifying the terminal and second authentication verification information that are returned by the terminal through the telecommunication network, and perform second authentication according to the ID and the second authentication verification information.