AUTHENTICATION DEVICE, AUTHENTICATION SYSTEM, AND AUTHENTICATION METHOD

• US 20170124312A1
• Filed: 06/11/2015
• Published: 05/04/2017
• Est. Priority Date: 06/19/2014
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: INOUE, Tomoki
• Granted Patent: US 11,429,700 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

In order to improve the safety and reliability of services provided by a computer, this authentication device is equipped with a transmission unit and a determination unit. The transmission unit transmits a challenge to a terminal device where the challenge is presented to a user to be authenticated, said challenge being information serving as the basis on which the user inputs information to be used for authentication processing. At this time, the transmission unit transmits a plurality of different challenges to the terminal device. The determination unit determines not only whether or not a response input to the terminal device by the user in response to each challenge is correct, but also whether or not time information regarding the challenge and the response thereto satisfies a condition regarding the response.

Claims

1. An authentication device comprising:

a transmission unit that transmits a challenge to a terminal device on which the challenge is presented to a user of being authenticated, the challenge being information serving as a basis on which the user inputs information to be used in an authentication process; and

a determination unit that performs the authentication process to determine whether a response is correct or wrong, the response being information which is inputted by the user to the terminal device based on the challenge,

wherein the transmission unit includes a function to transmit, to the terminal device, a plurality of challenges to the user, the challenges being different from one another, and at least one of the challenges is information requesting the user to make the response that includes biometric information on the user; and

wherein the determination unit further includes a function to determine whether time information regarding the challenge and the response to the challenge satisfies a condition regarding the response.

2. The authentication device according to claim 1, wherein the determination unit further includes a function to perform either one or both of verification of identity to verify that the user of be authenticated is a pre-registered user using biometric information included in the response and verification of uniqueness to verify that a single piece of identification information is allocated to the user of being authenticated.

3. The authentication device according to claim 1, wherein the transmission unit transmits the plurality of challenges to the terminal device, and also transmits, to the terminal device, information for controlling the terminal device such that the plurality of challenges are continuously presented to the user by the terminal device.

4. The authentication device according to claim 1, wherein the transmission unit transmits the plurality of challenges in a mode of streaming to the terminal device such that the plurality of challenges are continuously presented to the user in sequence by the terminal device.

5. The authentication device according to claim 1, wherein the transmission unit transmits to the terminal device information for controlling the terminal device such that output durations for which the individual challenges are presented to the user by the terminal device are different from one another.

6. The authentication device according to claim 1, wherein the challenge is an image or a sound.

7. An authentication system comprising:

the authentication device according to claim 1; and

the terminal device that presents to the user of being authenticated the plurality of challenges transmitted from the authentication device, and accepts responses made by the user to the challenges and transmits the responses to the authentication device.

8. An authentication method comprising:

when transmitting a challenge to a terminal device that presents the challenge to a user of being authenticated, the challenge being information serving as a basis on which the user inputs information to be used for an authentication process, transmitting by a computer to the terminal device a plurality of challenges which are different from one another and include the challenge requesting the user to make a response which includes biometric information regarding the user;

determining by a computer whether the response inputted by the user to the terminal device based on the challenge is correct or wrong against the challenge; and

determining by a computer whether time information regarding the challenge and the response to the challenge satisfies a condition regarding the response.

9. (canceled)