Subscriber registration and authentication method

• US 5,812,667 A
• Filed: 09/11/1995
• Issued: 09/22/1998
• Est. Priority Date: 09/12/1994
• Status: Expired due to Fees

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Miki, Noriki, Kumozaki, Kiyomi
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): White, Carmen D.
• Application Number:
  US08/526,080
• Time in Patent Office: 1,107 Days
• Field of Search: 380/23, 380/24, 380/25, 380/49
• US Class Current: 380/249
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention provides a subscriber registration and authentication method which secures high safety and by which necessary circuit scale is small. In the method of the present invention, each network termination unit has a peculiar secret information item for identifying it and an encrypted information item obtained from the secret information item with a public key determined by the network manager; the operation system decrypts the encrypted information item stored in the network termination unit which will be registered with a secret key determined by the network manager, and registers this termination unit for the local service unit by writing the encrypted and decrypted information items into the service unit; at the beginning of providing the service, the local service unit calls the network termination unit as a communication partner by sending the encrypted information item which is peculiar for the termination unit; the called network termination unit compares the received encrypted information item with that of its own, and if these agree with each other, responds to the local service unit by using the secret information item of its own; and the local service unit confirms that the network termination unit has been regularly registered by collating the received information item with the information item of its own.

Claims

1. A subscriber registration and authentication method, used in a communication service system in which plural network termination units are connected via a communication network with a local service unit controlled by an operation system which is managed by a network manager and the local service unit provides services for each registered network termination unit, said method for registering each network termination unit for the local service unit and authenticating the registered network termination unit before providing the service, wherein:

each network termination unit has a peculiar secret information item for identifying the network termination unit and an encrypted information item obtained by encrypting the secret information item with a public key which is determined by the network manager, and said method comprises;

step (r), performed by the operation system, of decrypting the encrypted information item stored in the network termination unit which will be registered by using a secret key which is determined by the network manager, and registering this network termination unit for the local service unit by writing the encrypted and decrypted information items into the local service unit;

step (c1), performed by the local service unit at the beginning of providing the service, of calling the network termination unit as a communication partner by sending the encrypted information item which is peculiar for the network termination unit;

step (c2), performed by the called network termination unit, of comparing the received encrypted information item with the encrypted information item of its own, and if these agree with each other, responding to the local service unit by using the secret information item of its own; and

step (c3), performed by the local service unit, of confirming that the network termination unit as a communication partner has been regularly registered by collating the information item received from the network termination unit with the information item of its own.

2. A subscriber registration and authentication method as claimed in claim 1, wherein the network termination unit has a ROM, and the secret information item which is peculiar to the network termination unit and the encrypted information item obtained by the encryption with the public key are previously stored as a pair of information items in the ROM.

3. A subscriber registration and authentication method as claimed in claim 1, wherein each network termination unit has a setting means for setting up an ID number assigned by the network manager, the number being peculiar to the network termination unit, and the method further comprises:

step (a1), performed by the operation system, of writing the ID number into the local service unit;

step (a2), performed by the local service unit when the network termination unit which has the set ID number and will be registered is connected to the communication network, of calling the corresponding network termination unit by sending the ID number;

step (a3), performed by the network termination unit called by the local service unit, of comparing the received ID number with the ID number which has been set up by the setting means, and if these agree with each other, sending the encrypted information item of its own to the local service unit; and

step (a4), performed by the local service unit, of transferring the encrypted information item received from the network termination unit to the operation system, and

the step (r) performed by the operation system comprises decrypting the transferred encrypted information item with the secret key, and registering this network termination unit for the local service unit by writing the encrypted and decrypted information items and the ID number as a group of information items.

4. A subscriber registration and authentication method as claimed in claim 3, wherein:

the step (c1) performed by the local service unit at the beginning of providing the service comprises calling the network termination unit as a communication partner by sending a part or the whole of the encrypted information item and the ID number which correspond to the network termination unit; and

the step (c2) performed by the called network termination unit comprises comparing a part or the whole of the encrypted information item and the ID number which have been received with the corresponding encrypted information item and ID number of its own, and if these agree with each other, responding to the local service unit by using the secret information item of its own.