AUTHENTICATING METHOD OF COMMUNICATING CONNECTION, GATEWAY APPARATUS USING AUTHENTICATING METHOD, AND COMMUNICATION SYSTEM USING AUTHENTICATING METHOD

• US 20120233468A1
• Filed: 02/13/2012
• Published: 09/13/2012
• Est. Priority Date: 03/10/2011
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: SONG, Kwan-woo, LEE, Dong-ik
• Granted Patent: US 9,374,350 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 72/04 Wireless resource allocation

Abstract

An authenticating method of communicating connection between a terminal and a gateway apparatus, the method including transmitting authentication information and first intrinsic identification information that is intrinsic identification information of the terminal from the terminal to the gateway apparatus and requesting the authentication; authenticating the communicating connection by using at least one of the first intrinsic identification information and the authentication information; and when the authenticating is successful, generating at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus, thereby increasing communication security between the terminal and the gateway apparatus.

Claims

1. An authentication method of communicating connection between a terminal and a gateway apparatus, the method comprising:

transmitting at least one of authentication information and first intrinsic identification information that is intrinsic identification information of the terminal from the terminal to the gateway apparatus and requesting the authentication;

authenticating the communicating connection by using at least one of the first intrinsic identification information and the authentication information; and

when the authenticating is successful, generating at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus.

2. The method of claim 1, further comprising, when the authenticating is successful, transmitting connection information for accessing to the gateway apparatus and the at least one authentication key to the terminal.

3. The method of claim 2, wherein the first intrinsic identification information comprises a media access control (MAC) address of the terminal, and

wherein the second intrinsic identification information comprises a MAC address of the gateway apparatus.

4. The method of claim 2, further comprising:

matching the at least one authentication key with the terminal, and storing the at least one authentication key matched with the terminal in the gateway apparatus; and

storing the at least one authentication key in the terminal.

5. The method of claim 2, further comprising:

connecting the terminal, to the gateway apparatus by using the connection information; and

transmitting predetermined data between the gateway apparatus and the terminal.

6. The method of claim 5, wherein the transmitting comprises encrypting the predetermined data by using the at least one authentication key and transmitting the encrypted data.

7. The method of claim 5, wherein the transmitting comprises:

connecting the terminal to the gateway apparatus by using the connection information, transmitting the first intrinsic identification information, and requesting information monitored by the gateway apparatus;

authenticating the terminal, which outputs the requesting, by using the first intrinsic identification information; and

when the authenticating is successful, transmitting the monitored information from the gateway apparatus to the terminal.

8. The method of claim 7, further comprising receiving, as the monitored information, a detection result of a security situation from a detecting device included in the same home as the gateway apparatus, in the gateway apparatus.

9. The method of claim 7, wherein the requesting of the information further comprises transmitting the first intrinsic identification information, which is encrypted using the at least one authentication key, to the gateway apparatus.

10. The method of claim 9, wherein the transmitting the monitored information from the gateway apparatus to the terminal comprises:

encrypting the monitored information by using the at least one authentication key, in the gateway apparatus; and

transmitting the encrypted information to the terminal.

11. The method of claim 10, further comprising decrypting the encrypted information by using the at least one authentication key, in the terminal.

12. The method of claim 7, wherein the at least one authentication key comprises:

a first authentication key for encrypting data to be transmitted; and

a second authentication key for decrypting received data.

13. A gateway apparatus comprising:

an authentication processing unit to receive at least one of authentication information and first intrinsic identification information that is intrinsic identification information of a terminal from the terminal and authenticate communicating connection by using at least one of the first intrinsic identification information and the authentication information; and

an authentication key generating unit to, when the authenticating is successful, generate at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus.

14. The gateway apparatus of claim 13, further comprising a communication interface unit to transmit and receive predetermined data to and from the terminal,

wherein, when the authenticating is successful, the authentication processing unit transmits connection information for accessing to the gateway apparatus and the at least one authentication key to the terminal through the communication interface unit.

15. The gateway apparatus of claim 14, wherein the first intrinsic identification information comprises a media access control (MAC) address of the terminal, and

wherein the second intrinsic identification information comprises a MAC address of the gateway apparatus.

16. The gateway apparatus of claim 14, further comprising a detection result processing unit to receive a detection result of a security situation from a detecting device included in the same home as the gateway apparatus and to monitor the security situation.

17. The gateway apparatus of claim 16, further comprising a controller to, when the terminal transmits the first intrinsic identification information and requests the gateway apparatus to transmit monitored information by the detection result processing unit, authenticate the terminal, which outputs the requesting, by using the first intrinsic identification information, and to control the gateway apparatus so as to transmit the monitored information to the terminal when the authenticating is successful.

18. The gateway apparatus of claim 17, wherein the controller encrypts the monitored information by using the at least one authentication key, and controls the gateway apparatus so as to transmit the encrypted information to the terminal.

19. The gateway apparatus of claim 17, wherein, when the controller encrypts and transmits the first intrinsic identification information by using the at least one authentication key, the controller decrypts the first intrinsic identification information by using the at least one authentication key.

20. The gateway apparatus of claim 14, further comprising a storage unit to match and store the at least one authentication key matched with the terminal.

21. A communication system comprising a mobile terminal and a gateway apparatus, wherein the mobile terminal transmits at least one of authentication information and first intrinsic identification information that is intrinsic identification information of the terminal from the terminal to the gateway apparatus and requests the authentication of communication connection between the mobile terminal and the gateway apparatus, and

wherein the gateway apparatus authenticates the communicating connection by using at least one of the first intrinsic identification information and the authentication information, and generates at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus, when the authenticating is successful.