ACCESS CONTROL METHOD, AUTHENTICATION METHOD, AND AUTHENTICATION DEVICE

• US 20160014118A1
• Filed: 07/02/2015
• Published: 01/14/2016
• Est. Priority Date: 07/10/2014
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Da, Bin, Wang, Wei, Yang, Linju, Sun, Yan, Liao, Ke
• Granted Patent: US 9,667,625 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Disclosed is an access control method of an area restricted network system including a central control device and at least one area restricted network. Each area restricted network includes at least a master node. The method comprises a detection step of detecting that an access device has entered into an area restricted network in the area restricted network system; a receipt step of receiving, by a master node in the area restricted network, an authentication information request sent by the access device; a sending step of, in response to the authentication information request, generating and sending the authentication information for the access device by the master node in the area restricted network; and a request step of, by the access device, receiving the authentication information, and then utilizing the authentication information so as to send an authentication request to the central control device.

Claims

1. An access control method of an area restricted network system including a central control device and at least one area restricted network, each of the area restricted networks including at least a master node, the method comprising:

a detection step of detecting that an access device has entered into a first area restricted network in the area restricted network system;

a receipt step of receiving, by the master node in the first area restricted network, an authentication information request sent by the access device, the authentication information request being used to request authentication information for the access device from the master node;

a sending step of, in response to the authentication information request, generating and sending the authentication information for the access device by the master node in the first area restricted network; and

a request step of, by the access device, receiving the authentication information, and then utilizing the authentication information so as to send an authentication request to the central control device.

2. The method according to claim 1, wherein, each area restricted network further includes an area restriction signal transmission device which is associated with the master node in the corresponding area restricted network and is used to broadcast an area restriction signal for restricting the corresponding area restricted network, and the detection step includes:

a determination step of detecting a signal strength of the area restriction signal which is used to restrict the first area restricted network and is received by the access device, wherein, if the signal strength is greater than a first threshold, then determining that the access device has entered into the first area restricted network, and if the signal strength is less than a second threshold, then determining that the access device has departed from the first area restricted network.

3. The method according to claim 2, wherein:

the authentication information request includes a device ID of the access device, and the master node in the first area restricted network generates, in response to the received authentication information request, the authentication information based on the device ID included in the authentication information request.

4. The method according to claim 3, wherein:

the authentication information request sent by the access device is received and forwarded to the master node in the first area restricted network by the area restriction signal transmission device, and the authentication information sent by the master node is received and forwarded to the access device by the area restriction signal transmission device.

5. The method according to claim 2, further comprising:

an authentication step of, by the central control device, receiving the authentication request of the access device, acquiring the authentication information generated by the master node in the first area restricted network for the access device from the master node, and comparing the authentication information acquired from the master node and the authentication information provided to the central control device by the access device so as to conduct the authentication with respect to the access device.

6. The method according to claim 1, further comprising:

a control step of, by the central control device, generating an area device service table for each area restricted network in the area restricted network system, and conducting access control with respect to an authenticated access device based on a corresponding area device service table.

7. The method according to claim 6, wherein:

the area device service table of each area restricted network includes an area ID of the corresponding area restricted network as well as a device ID and a device function list of each device in the corresponding area restricted network.

8. The method according to claim 7, wherein:

after the access device passes through the authentication conducted by the central control device, the central control device adds the access device into an area device service table corresponding to the first area restricted network so as to update the area device service table.

9. An authentication method of conducting authentication with respect to an access device, which is used in an area restricted network system including at least one area restricted network, each of the area restricted networks including at least a master node, the method comprising:

a receipt step of receiving an authentication request of the access device which has entered into a first area restricted network in the area restricted network system, the authentication request including authentication information of the access device;

an acquisition step of, in response of the authentication request, acquiring authentication information generated by a master node in the first area restricted network for the access device from the master node; and

an authentication step of, based on the authentication information included in the authentication request received from the access device and the authentication information acquired from the master node, conducting the authentication with respect to the access device.

10. An authentication device for conducting authentication with respect to an access device, which is used in an area restricted network system including at least one area restricted network, each of the area restricted networks including at least a master node, the device comprising:

a receipt part configured to receive an authentication request of the access device which has entered into a first area restricted network in the area restricted network system, the authentication request including authentication information of the access device;

an acquisition part configured to, in response of the authentication request, acquire authentication information generated by a master node in the first area restricted network for the access device from the master node; and

an authentication part configured to, based on the authentication information included in the authentication request received from the access device and the authentication information acquired from the master node, conduct the authentication with respect to the access device.