AUTHENTICATION DEVICE USING TRUE RANDOM NUMBER GENERATING ELEMENT OR PSEUDO-RANDOM NUMBER GENERATING ELEMENT, AUTHENTICATION APPARATUS, AND AUTHENTICATION METHOD

• US 20120210127A1
• Filed: 05/16/2007
• Published: 08/16/2012
• Est. Priority Date: 05/16/2006
• Status: Active Grant

• Current Assignee: Masakazu Sato, Osamu Kameda
• Original Assignee: Masakazu Sato, Osamu Kameda
• Inventors: Kameda, Osamu, Sato, Masakazu
• Granted Patent: US 8,756,421 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

Provided are an authentication device using a true random number generating element or a pseudo-random number generating element, for example, a USB token, an authentication apparatus using the same, an authentication method, an authentication system and the like. In the authentication system, the authentication device is prepared on a user side, and one code generated in the authentication device is used to encrypt another code. The authentication apparatus registers the codes and decrypts the encrypted code sent from the authentication device by using the registered codes to perform an authentication.

Claims

1. An authentication device, comprising:

a random number generating section for generating one of a true random number or a pseudo-random number; and

a control section for using at least one code generated by the random number generating section to encrypt another code.

2. An authentication device according to claim 1, wherein the authentication device comprises a token of a USB type, a card type or the like.

3. An authentication device according to claim 2, wherein the authentication device comprises the token of the card type provided with a USB interface.

4. An authentication system, comprising:

the authentication device according to claim 1; and

an authentication apparatus for registering a code the same as a code generated by the authentication device by confirming the code in advance, during an authentication or after the end of the authentication, decrypting an encrypted code transmitted from an authentication device side by using the registered code, and performing the authentication.

5. An authentication system according to claim 4, further comprising a terminal, to which the authentication device can be detachably attached, for controlling the authentication device.

6. An authentication system according to claim 5, wherein the authentication device encrypts a new code generated by the random number generating section during the authentication or after the end of the authentication.

7. An authentication system according to claim 6, wherein the authentication apparatus uses the registered code to decrypt the encrypted new code transmitted from the authentication device side during the authentication or after the end of the authentication.

8. A mail authentication system having an authentication device of claim 1, comprising:

a mail-transmitting-side terminal to which the authentication device is detachably attached;

a mail-receiving-side terminal to which the authentication device is detachably attached; and

a mail server for registering a code the same as a code generated by the authentication device on a mail transmitting side and a mail receiving side by confirming the code in advance, during an authentication or after the end of the authentication, decrypting an encrypted code transmitted from the mail transmitting side and the mail receiving side by using the registered code, and performing the authentication.

9. A mail authentication system according to claim 8, wherein:

the mail transmitting side uses the code generated by the authentication device to generate a key used for encrypting a mail body or a mail body and attached file during the authentication or after the end of the authentication, uses the key to encrypt the mail body or the mail body and attached file, and transmits the encrypted mail body or the encrypted mail body and attached file to the mail server; and

the mail server uses the registered code the registered code of the mail transmitting side to generate the key used for decrypting the mail body or the mail body and attached file, and uses the key to decrypt the encrypted mail body or the encrypted mail body and attached file transmitted from the mail transmitting side.

10. A mail authentication system according to claim 9, wherein the mail server confirms a recipient of mail on the basis of the decrypted mail body or the decrypted mail body and attached file, uses the registered code of the mail receiving side to generate the key used for encrypting the mail body or the mail body and attached file, uses the key to encrypt the mail body or the mail body and attached file, and transmits the encrypted mail body or the encrypted mail body and attached file to the mail receiving side in response to a request to transmit mail made from the mail receiving side.

11. A mail authentication system according to claim 8, wherein the mail transmitting side and/or the mail receiving side encrypts a new code generated by the random number generating section during the authentication or after the end of the authentication.

12. A mail authentication system according to claim 11, wherein the mail server uses the registered code to decrypt the encrypted new code transmitted from the mail transmitting side and/or the mail receiving side during the authentication or after the end of the authentication.

13. A distribution system, comprising:

a user-side terminal to which the authentication device according to claim 1 can be detachably attached; and

an authentication apparatus for registering a code the same as a code generated by the authentication device by confirming the code in advance, during an authentication or after the end of the authentication, decrypting an encrypted code transmitted from a user side by using the registered code, and performing the authentication.

14. A distribution system according to claim 13, wherein:

a distributed content such as a video is encrypted by using a key generated by using a code updated on a present day or every predetermined period, and is distributed to a user;

the authentication apparatus uses the registered code to encrypt the code updated on the present day or every predetermined period when distribution of the content such as the video is to be permitted after the authentication, and transmits the encrypted code to the user side; and

the user side decrypts the encrypted code that has been transmitted, uses the decrypted code to generate the key, and uses the key to decrypt the distributed content such as the video.

15. A distribution system according to claim 13, wherein the user side encrypts a new code generated by the random number generating section during the authentication or after the end of the authentication.

16. A distribution system according to claim 15, wherein the authentication apparatus decrypts the encrypted new code transmitted from the user side during the authentication or after the end of the authentication.

17. An authentication method, comprising:

preparing the authentication device according to claim 1;

registering a code the same as a code generated by the authentication device by confirming the code in advance, during an authentication or after the end of the authentication; and

decrypting an encrypted code transmitted from the authentication device side by using the registered code, for performing the authentication.

18. A mail authentication method, comprising:

preparing the authentication device according to claim 1 on each of a mail-transmitting side and a mail-receiving side;

registering a code the same as a code generated by the authentication device by confirming the code in advance, during an authentication or after the end of the authentication; and

decrypting an encrypted code transmitted from the mail-transmitting side by using the registered code, for performing the authentication.

19. A distribution method, comprising:

preparing the authentication device according to claim 1 on a side of a user who receives distribution of a content such as a video;

registering a code the same as a code generated by the authentication device by confirming the code in advance, during an authentication or after the end of the authentication; and

decrypting an encrypted code transmitted from the authentication device by using the registered code, for performing the authentication.

20. A mail authentication system according to claim 10, wherein the mail transmitting side and/or the mail receiving side encrypts a new code generated by the random number generating section during the authentication or after the end of the authentication.