AUTHENTICATION SERVER AND AUTHENTICATION METHOD BY AUTHENTICATION SERVER

• US 20130232550A1
• Filed: 11/02/2011
• Published: 09/05/2013
• Est. Priority Date: 11/08/2010
• Status: Active Grant

• Current Assignee: Sapere Co., Ltd.
• Original Assignee: Nihon University Educational Association
• Inventors: Kihara, Masami, Tsuchiya, Takahiro
• Granted Patent: US 9,185,558 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

An authentication server capable of determining securely and accurately whether an access source is a cellular phone or a computer when a content is accessed with being limited to cellular phone users. The authentication server including a transmission delay time measuring unit that measures a transmission delay time between the authentication server and a communication terminal over a plurality of times, a transmission delay time distribution property determining unit that determines whether or not a distribution property of the transmission delay time measured over the plurality of times is discrete, and a content access authentication unit recognizing that the communication terminal is a wireless communication terminal and approving the access to the contents when the distribution property of the transmission delay time is determined as being discrete and recognizing that the communication terminal is a wired communication terminal and denying the access to the contents when the distribution property of the transmission delay time is determined as not being discrete.

Claims

1. An authentication server comprising:

a data communication unit that performs data communication with a communication terminal performing authentication for an access to contents;

a transmission delay time measuring unit that measures a transmission delay time between the data communication unit and the communication terminal over a plurality of times;

a transmission delay time distribution property determining unit that determines whether or not a distribution property of the transmission delay time measured over the plurality of times is discrete; and

a content access authentication unit that approves the access to the contents when the distribution property of the transmission delay time is determined as being discrete and denies the access to the contents when the distribution property of the transmission delay time is determined as not being discrete.

2. The authentication server according to claim 1,

wherein the data communication unit transmits an HTML file including a plurality of data elements to the communication terminal and receives request signals requesting the data elements from the communication terminal, and

wherein the transmission delay time measuring unit measures a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit by measuring intervals at which the request signals requesting the data elements are received from the communication terminal.

3. The authentication server according to claim 2,

wherein the data communication unit sequentially repeats reception of one of the request signals and transmission of one of the data elements, and

wherein the transmission delay time measuring unit measures the total of the transmission delay times by measuring intervals at which the request signals are received.

4. The authentication server according to claim 1,

wherein the data communication unit receives a close signal of a connection from the communication terminal that has received the data elements, and

wherein the transmission delay time measuring unit measures a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit by measuring a time interval until reception of the close signal after reception of the request signals.

5. The authentication server according to claim 1,

wherein the data communication unit performs telephone communication for the communication terminal, and

wherein the content access authentication unit approves the access to the contents when the distribution property of the transmission delay time is determined as being discrete, and an incoming call reply is made from the communication terminal for the telephone communication and denies the access to the contents when the distribution property of the transmission delay time is determined as being discrete, and an incoming call reply is not made from the communication terminal for the telephone communication.

6. The authentication server according to claim 1,

wherein the data communication unit performs telephone communication for the communication terminal, and

wherein the content access authentication unit approves the access to the contents when the distribution property of the transmission delay time is determined as being discrete, and the distribution property of the transmission delay time changes for the telephone communication and denies the access to the contents when the distribution property of the transmission delay time is determined as being discrete, and the distribution property of the transmission delay time does not change for the telephone communication.

7. An authentication method by an authentication server, the authentication method sequentially comprising:

a content access authentication receiving step for receiving authentication for an access to contents that is performed by a communication terminal;

a transmission delay time measuring step for measuring a transmission delay time delayed with respect to the communication terminal over a plurality of times;

a transmission delay time distribution property determining step for determining whether or not a distribution property of the transmission delay time measured over the plurality of times is discrete; and

a content access authentication step for approving the access to the contents when the distribution property of the transmission delay time is determined as being discrete and denying the access to the contents when the distribution property of the transmission delay time is determined as not being discrete.

8. The authentication method by an authentication server according to claim 7, wherein, in the transmission delay time measuring step, an HTML file including a plurality of data elements is transmitted to the communication terminal, request signals requesting the data elements are received from the communication terminal, and a total of a transmission delay time from the authentication server to the communication terminal and a transmission delay time from the communication terminal to the authentication server is measured by measuring intervals at which the request signals requesting the data elements are received from the communication terminal.

9. The authentication method by an authentication server according to claim 8, wherein, in the transmission delay time measuring step, reception of one of the request signals and transmission of one of the data elements are sequentially repeated, and the total of the transmission delay times is measured by measuring intervals at which the request signals are received.

10. The authentication method by an authentication server according to claim 7, wherein, in the transmission delay time measuring step, a close signal of a connection is received from the communication terminal that has received the data elements, and a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit is measured by measuring a time interval until reception of the close signal after reception of the request signals.

11. The authentication method by an authentication server according to claim 7, wherein, in the content access authentication step, telephone communication is performed for the communication terminal, the access to the contents is approved when the distribution property of the transmission delay time is determined as being discrete and an incoming call reply is made from the communication terminal for the telephone communication, and the access to the contents is denied when the distribution property of the transmission delay time is determined as being discrete and an incoming call reply is not made from the communication terminal for the telephone communication.

12. The authentication method by an authentication server according to claim 7, wherein, in the content access authentication step, telephone communication is performed for the communication terminal, the access to the contents is approved when the distribution property of the transmission delay time is determined as being discrete and the distribution property of the transmission delay time changes for the telephone communication, and the access to the contents is denied when the distribution property of the transmission delay time is determined as being discrete and the distribution property of the transmission delay time does not change for the telephone communication.

13. An authentication server comprising:

a data communication unit that performs data communication with a communication terminal performing authentication for an access to contents;

a transmission delay time measuring unit that measures a transmission delay time between the data communication unit and the communication terminal over a plurality of times;

an extraction unit that accumulates the transmission delay times measured by the transmission delay time measuring unit, detects a peak value of the transmission delay times, and extracts the transmission delay time in a predetermined range including the peak values;

a distribution property calculating unit that calculates a distribution property of the transmission delay time extracted by the extraction unit;

a distribution property determining unit that determines whether or not the distribution property of the transmission delay time calculated by the distribution property calculating unit is discrete; and

a content access authentication unit that approves the access to the contents when the distribution property is determined as being discrete by the distribution property determining unit and denies the access to the contents when the distribution property is determined as not being discrete by the distribution property determining unit.

14. The authentication server according to claim 13,

wherein the data communication unit transmits an HTML file including a plurality of data elements to the communication terminal and receives request signals requesting the data elements from the communication terminal, and

wherein the transmission delay time measuring unit measures a transmission delay time from the data communication unit to the communication terminal by measuring intervals at which the request signals requesting the data elements are received from the communication terminal.

15. The authentication server according to claim 14,

wherein the data communication unit sequentially repeats reception of one of the request signals and transmission of one of the data elements, and

wherein the transmission delay time measuring unit measures the total of the transmission delay times by measuring intervals at which the request signals are received.

16. The authentication server according to claim 13,

wherein the data communication unit receives a close signal of a connection from the communication terminal that has received the data elements, and

wherein the transmission delay time measuring unit measures a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit by measuring a time interval until reception of the close signal after reception of the request signals.

17. The authentication server according to claim 13, further comprising a phone call determining unit that determines whether or not the data communication unit has received an incoming call reply from the communication terminal,

wherein the data communication unit performs telephone communication for the communication terminal, and

wherein the content access authentication unit approves the access to the contents in a case where the distribution property is determined as being discrete by the distribution property determining unit and the incoming call reply is determined to have been received by the phone call determining unit and denies the access to the contents in a case where the distribution property is determined as not being discrete by the distribution property determining unit or the incoming call reply is determined not to have been received by the phone call determining unit.

18. The authentication server according to claim 13, further comprising a phone call change determining unit that determines whether or not the distribution property of the transmission delay time calculated by the distribution property calculating unit has changed when telephone communication performed by the data communication unit is detected,

wherein the data communication unit performs the telephone communication for the communication terminal,

wherein the content access authentication unit approves the access to the contents in a case where the distribution property is determined as being discrete by the distribution property determining unit and the distribution property of the transmission delay time is determined to have changed by the phone call change determining unit and denies the access to the contents in a case where the distribution property is determined as not being discrete by the distribution property determining unit or the distribution property of the transmission delay time is determined not to have changed by the phone call change determining unit.

19. An authentication method by an authentication server, the authentication method sequentially comprising:

a distribution property determining step for performing data communication with a communication terminal performing authentication for an access to contents by using a data communication unit, measuring a transmission delay time delayed with respect to the communication terminal over a plurality of times by using a transmission delay time measuring unit, accumulating the transmission delay times, detecting a peak value of the transmission delay times, and extracting the transmission delay time in a predetermined range including the peak values by using an extraction unit, calculating a distribution property of the extracted transmission delay time by using a distribution property calculating unit, and determining whether or not the calculated distribution property is discrete by using a distribution property determining unit; and

a content access authentication step for approving the access to the contents when the distribution property is determined as being discrete in the distribution property determining step and denying the access to the contents when the distribution property is determined as not being discrete in the distribution property determining step.

20. The authentication method by an authentication server according to claim 19, wherein, in the distribution property determining step, an HTML file including a plurality of data elements is transmitted to the communication terminal, request signals requesting the data elements are received from the communication terminal, and a transmission delay time from the authentication server to the communication terminal is measured by measuring intervals at which the request signals requesting the data elements are received from the communication terminal by the transmission delay time measuring unit.

21. The authentication method by an authentication server according to claim 20, wherein, in the distribution property determining step, reception of one of the request signals and transmission of one of the data elements are sequentially repeated, and a total of the transmission delay times is measured by measuring intervals at which the request signals are received.

22. The authentication method by an authentication server according to claim 19, wherein, in the distribution property determining step, a close signal of a connection is received from the communication terminal that has received the data elements, and a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit is measured by measuring a time interval until reception of the close signal after reception of the request signals.

23. The authentication method by an authentication server according to claim 19, further comprising a phone call determining step for performing telephone communication for the communication terminal using the data communication unit and determining using a phone call determining unit whether or not the data communication unit receives an incoming call reply from the communication terminal before the distribution property determining step, simultaneously with the distribution property determining step, or between the distribution property determining step and the content access authentication step,

wherein, in the content access authentication step, the content access authentication unit approves the access to the contents in a case where the distribution property is determined as being discrete in the distribution property determining step and the incoming call reply is determined to have been received in the phone call determining step and denies the access to the contents in a case where the distribution property is determined as not being discrete in the distribution property determining step or the incoming call reply is determined not to have been received in the phone call determining step.

24. The authentication method by an authentication server according to claim 19, further comprising a phone call change determining step for performing telephone communication for the communication terminal using the data communication unit and determining using a phone call change determining unit whether or not the distribution property of the transmission delay time calculated by the distribution property calculating unit has changed after the telephone communication performed by the data communication unit before the distribution property determining step, simultaneously with the distribution property determining step or between the distribution property determining step and the content access authentication step.

wherein, in the content access authentication step, the content access authentication unit approves the access to the contents in a case where the distribution property is determined as being discrete in the distribution property determining step and the distribution property of the transmission delay time is determined to have changed in the phone call change determining step and denies the access to the contents in a case where the distribution property is determined as not being discrete in the distribution property determining step or the distribution property of the transmission delay time is determined not to have changed in the phone call change determining step.

25. An authentication server comprising:

a data communication unit that performs data communication with a communication terminal performing authentication for an access to contents;

a correspondence table that associates an identifier or a password of the communication terminal with a telephone number of the communication terminal;

a telephone communication unit that performs telephone communication using the telephone number associated with the identifier or the password in the correspondence table when the data communication unit performs authentication for an access to contents using the identifier or the password from the communication terminal;

a transmission delay time measuring unit that measures a transmission delay time between the data communication unit and the communication terminal over a plurality of times;

a transmission delay time change determining unit that determines whether or not the transmission delay time measured by the transmission delay time measuring unit at a time when the telephone communication unit performs telephone communication has changed from the transmission delay time at a time when the telephone communication unit does not perform the telephone communication; and

a content access authentication unit that approves the access to the contents when the transmission delay time is determined to have changed by the transmission delay time change determining unit and denies the access to the contents when the transmission delay time is determined not to have changed by the transmission delay time change determining unit.

26. The authentication server according to claim 25,

wherein the data communication unit transmits an HTML file including a plurality of data elements to the communication terminal and receives request signals requesting the data elements from the communication terminal, and

wherein the transmission delay time measuring unit measures a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit by measuring intervals at which the request signals requesting the data elements are received from the communication terminal.

27. The authentication server according to claim 26,

wherein the data communication unit sequentially repeats reception of one of the request signals and transmission of one of the data elements, and

wherein the transmission delay time measuring unit measures the total of the transmission delay times by measuring intervals at which the request signals are received.

28. The authentication server according to claim 25,

wherein the data communication unit receives a close signal of a connection from the communication terminal that has received the data elements, and

wherein the transmission delay time measuring unit measures a total of a transmission delay time from the data communication unit to the communication terminal and a transmission delay time from the communication terminal to the data communication unit by measuring a time interval until reception of the close signal after reception of the request signals.

29. The authentication server according to claim 25,

wherein the transmission delay time change determining unit determines whether or not the transmission delay time measured by the transmission delay time measuring unit has increased at a time when the telephone communication unit performs telephone communication from the transmission delay time at a time when the telephone communication unit does not perform the telephone communication, and

wherein the content access authentication unit approves the access to the contents when the transmission delay time change determining unit determines that the transmission delay time has increased and denies the access to the contents when the transmission delay time change determining unit determines that the transmission delay time has not increased.

30. The authentication server according to claim 25,

wherein the transmission delay time change determining unit determines whether or not the data communication unit has received a packet used for measuring the transmission delay time from the communication terminal when the telephone communication unit performs telephone communication, compared to when the telephone communication unit does not perform the telephone communication, and

wherein the content access authentication unit approves the access to the contents when the transmission delay time change determining unit determines that the packet used for measuring the transmission delay time has not been received and denies the access to the contents when the transmission delay time change determining unit determines that the packet used for measuring the transmission delay time has received.

31. The authentication server according to claim 25, wherein the content access authentication unit approves the access to the contents when the transmission delay time change determining unit determines that the transmission delay time has changed and an incoming call reply has been made for the telephone communication from the communication terminal and denies the access to the contents when the transmission delay time change determining unit determines that the transmission delay time has changed and an incoming call reply has not been made from the communication terminal for the telephone communication.

32. An authentication method by an authentication server, the authentication method sequentially comprising:

a content access authentication receiving step for receiving authentication for an access to contents that is performed by a communication terminal;

a telephone communication performing step for performing telephone communication using a telephone number associated with an identifier or a password used for the authentication for the access to contents while a transmission delay time delayed with respect to the communication terminal is measured a plurality of times;

a transmission delay time change determining step for determining whether or not the measured transmission delay time at a time when telephone communication is performed has changed from the transmission delay time at a time when the telephone communication is not performed; and

a content access authentication step for approving the access to the contents when the transmission delay time is determined to have changed and denying the access to the contents when the transmission delay time is determined not to have changed.

33. The authentication method by an authentication server according to claim 32, wherein, in the telephone communication performing step, an HTML file including a plurality of data elements is transmitted to the communication terminal, request signals requesting the data elements are received from the communication terminal, and a total of a transmission delay time from the authentication server to the communication terminal and a transmission delay time from the communication terminal to the authentication server is measured by measuring intervals at which the request signals requesting the data elements are received from the communication terminal.

34. The authentication method by an authentication server according to claim 33, wherein, in the telephone communication performing step, reception of one of the request signals and transmission of one of the data elements are sequentially repeated, and a total of the transmission delay times is measured by measuring intervals at which the request signals are received.

35. The authentication method by an authentication server according to claim 32, wherein, in the telephone communication performing step, a close signal of a connection is received from the communication terminal that has received the data elements, and a total of a transmission delay time from the authentication server to the communication terminal and a transmission delay time from the communication terminal to the authentication server is measured by measuring a time interval until reception of the close signal after reception of the request signals.

36. The authentication method by an authentication server according to claim 32,

wherein, in the transmission delay time change determining step, it is determined whether or not the measured transmission delay time has increased at a time when the telephone communication is performed from the transmission delay time at a time when the telephone communication is not performed, and

wherein, in the content access authentication step, the access to the contents is approved when the transmission delay time is determined to have increased and the access to the contents is denied when the transmission delay time is determined not to have increased.

37. The authentication method by an authentication server according to claim 32,

wherein, in the transmission delay time change determining step, it is determined whether or not a packet used for measuring the transmission delay time is received from the communication terminal when telephone communication is performed, compared to when the telephone communication is not performed, and

wherein, in the content access authentication step, the access to the contents is approved when the packet used for measuring the transmission delay time is determined not to have been received and the access to the contents is denied when the packet used for measuring the transmission delay time is determined to have been received.

38. The authentication method by an authentication server according to claim 32, wherein, in the content access authentication step, the access to the contents is approved when the transmission delay time is determined to have changed in the transmission delay time change determining step and an incoming call reply has been made from the communication terminal for the telephone communication and the access to the contents is denied when the transmission delay time is determined to have changed in the transmission delay time change determining step and an incoming call reply has not been made from the communication terminal for the telephone communication.