TERMINAL DEVICE, AUTHENTICATION INFORMATION MANAGEMENT METHOD, AND AUTHENTICATION INFORMATION MANAGEMENT SYSTEM

• US 20170220791A1
• Filed: 01/16/2015
• Published: 08/03/2017
• Est. Priority Date: 02/14/2014
• Status: Abandoned Application

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: SHIBUTANI, Akira, TANNO, Tetsuhiro, KOBAYASHI, Shigeko, HIGUCHI, Yuuta, SASAGAWA, Tetsuhiro
• Application Number:
  US15/115,119
• Publication Number:
  US 20170220791A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A terminal device, an authentication information management method, and an authentication information management system for securing a security level of authentication information while maintaining the convenience for a user. A mobile device determines whether communication with a wearable device is possible and determines whether the mobile device is able to communicate with an authentication server. When it is determined that communication between the mobile device and the wearable device is possible and communication between the mobile device and the authentication server is possible, the mobile device transmits identification information corresponding to the wearable device to the authentication server, requests the authentication server to transmit authentication information, receives the authentication information from the authentication server in response to the transmission request, and transmits the received authentication information to the wearable device.

Claims

1. :

A terminal device which is able to perform short-range communication with a short-range communication device which is a device capable of performing the short-range communication and to perform communication other than the short-range communication with an authentication server for transmitting authentication information which is information for receiving authentication from a device making an authentication request, the terminal device comprising circuitry configured to;

determine whether the terminal device is able to communicate with the short-range communication device and determine whether the terminal device is able to communicate with the authentication server;

transmit identification information corresponding to the short-range communication device to the authentication server and make an authentication information transmission request when the terminal device determines that communication between the terminal device and the short-range communication device is possible and communication between the terminal device and the authentication server is possible;

receive authentication information from the authentication server in response to the transmission request;

transmit the authentication information received to the short-range communication device; and

input an update instruction for the authentication information,

wherein the terminal device requests the authentication server to transmit the authentication information when the terminal device inputs the update instruction for the authentication information.

2. :

An authentication information management method to be executed by a terminal device which is able to perform short-range communication with a short-range communication device which is a device capable of performing the short-range communication and to perform communication other than the short-range communication with an authentication server for transmitting authentication information which is information for receiving authentication from a device making an authentication request, the authentication information management method comprising;

a communication possibility determination step of determining whether the terminal device is able to communicate with the short-range communication device and determining whether the terminal device is able to communicate with the authentication server;

an authentication information transmission request step of transmitting identification information corresponding to the short-range communication device to the authentication server and issuing an authentication information transmission request when it is determined that communication between the terminal device and the short-range communication device is possible and communication between the terminal device and the authentication server is possible in the communication possibility determination step;

an authentication information reception step of receiving the authentication information from the authentication server in response to the authentication information transmission request in the authentication information transmission request step;

an authentication information transmission step of transmitting the authentication information received in the authentication information reception step to the short-range communication device; and

an update instruction input step of inputting an update instruction of the authentication information,

wherein, in the authentication information transmission request step, the authentication server is requested to transmit the authentication information when the update instruction for the authentication information is input in the update instruction input step.

3. :

An authentication information management system including a short-range communication device which is a device capable of performing short-range communication, an authentication server configured to transmit authentication information which is information for receiving authentication from a device making an authentication request, and a terminal device capable of performing short-range communication with the short-range communication device and capable of performing communication other than the short-range communication with the authentication server,

wherein the short-range communication device includes circuitry configured to;

receive the authentication information from the terminal device; and

retain the authentication information received;

wherein the terminal device includes circuitry configured to;

determine whether the terminal device is able to communicate with the short-range communication device and determine whether the terminal device is able to communicate with the authentication server;

transmit identification information corresponding to the short-range communication device to the authentication server and make an authentication information transmission request when the terminal device determines that communication between the terminal device and the short-range communication device is possible and communication between the terminal device and the authentication server is possible;

receive the authentication information from the authentication server in response to the authentication information transmission request; and

transmit the authentication information received to the short-range communication device, and

wherein the authentication server includes circuitry configured to;

receive the identification information corresponding to the short-range communication device and receive the authentication information transmission request;

generate the authentication information of the short-range communication device; and

transmit the authentication information generated to the terminal device when the authentication server receives the authentication information transmission request.

4. :

The authentication information management system according to claim 3,

wherein the authentication information management system determines whether an update of the authentication information is necessary, and

wherein the authentication server regenerates authentication information of the short-range communication device when the authentication information management system determines that the update is necessary.

5. :

The authentication information management system according to claim 4,

wherein the authentication information management system determines that the update of the authentication information is necessary when the authentication information is not updated for a fixed period.

6. :

The authentication information management system according to claim 4,

wherein the authentication information management system detects misuse of the authentication information, and

wherein the authentication information management system determines that it is necessary to update the authentication information when the authentication information management system detects the misuse.

7. :

The authentication information management system according to claim 4,

wherein the terminal device transmits line authentication information which is authentication information of a line for use in communication between the terminal device and the authentication server and an identifier of the short-range communication device or an identifier of a subscriber authentication module mounted on the short-range communication device as the identification information corresponding to the short-range communication device to the authentication server,

wherein the authentication server determines whether the authentication information can be transmitted on the basis of the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device, and

wherein it is determined whether the update of the authentication information is necessary when the authentication server determines that the transmission is possible.

8. :

The authentication information management system according to claim 7,

wherein the terminal device transmits association information which is information indicating association of the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device to the authentication server,

wherein the authentication server receives the association information, and

wherein the authentication server determines that transmission is possible if the association information is received when the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device are not associated.

9. :

The authentication information management system according to claim 8,

wherein the authentication server retains information obtained by associating the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device when the authentication server receives the association information of the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device from the terminal device, and

wherein the authentication server determines that the transmission is possible when the authentication server retains the information obtained by associating the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication if the line authentication information and the identifier of the short-range communication device or the identifier of the subscriber authentication module mounted on the short-range communication device are not associated.