Authentication method and system using IC card

• US 6,076,164 A
• Filed: 08/29/1997
• Issued: 06/13/2000
• Est. Priority Date: 09/03/1996
• Status: Expired due to Term

• Current Assignee: KDDI Corporation
• Original Assignee: Kokusai Denshi Denwa Company Limited (KDDI Corporation)
• Inventors: Tanaka, Toshiaki, Hada, Satoshi, Yamada, Mitsuru
• Primary Examiner(s): Hayes, Gail O.
• Assistant Examiner(s): SONG, HOSUK
• Application Number:
  US08/921,249
• Time in Patent Office: 1,019 Days
• Field of Search: 380/25, 380/23, 713/201, 713/200, 713/185, 713/155, 713/159, 713/171, 713/172
• US Class Current: 713/185
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2211/005 Network, LAN, Remote Access, Distributed System
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method and system for authenticating between a user or client and a network access entity such as a server or another client using an IC card. The method includes a step of executing an initial authentication using the IC card when the user first communicates with the network access entity, a step of commonly holding authentication information in both the user and the network access entity if the initial authentication achieves success, and a step of executing a re-authentication using the commonly held authentication information without using the IC card when the user communicates again with the same network access entity within a predetermined period of time after the last authentication.

Claims

1. A method of authenticating between a user and a network access entity using an IC card, comprising the steps of:

executing an initial authentication using the IC card when the user first communicates with the network access entity;

commonly holding authentication information in both the user and the network access entity if the initial authentication achieves success; and

executing a re-authentication using said commonly held authentication information without using the IC card when the user communicates again with the same network access entity within a predetermined period of time after the last authentication,

wherein said initial authentication is an authentication using a public key cryptographic technique, and wherein said re-authentication is an authentication using a secret key cryptographic technique.

2. The method as claimed in claim 1, wherein said initial authentication is executed when the user has no previous authentication information in said network access entity, and said re-authentication is executed when the user has said previous authentication information in said network access entity.

3. The method as claimed in claim 1, wherein said initial authentication is executed instead of the re-authentication when the predetermined period of time has passed after the last authentication.

4. The method as claimed in claim 1, wherein said authentication information is encrypted and the encrypted authentication information is sent between the user and the network access entity.

5. The method as claimed in claim 1, wherein said authentication information is updated to have different values at each time and the updated authentication information is sent between the user and the network access entity.

6. A system for authenticating between a user and a network access entity using an IC card, comprising:

means for executing an initial authentication using the IC card when the user first communicates with the network access entity;

means for commonly holding authentication information in both the user and the network access entity if the initial authentication achieves success; and

means for executing a re-authentication using said commonly held authentication information without using the IC card when the user communicates again with the same network access entity within a predetermined period of time after the last authentication,

wherein said initial authentication is an authentication using a public key cryptographic technique, and wherein said re-authentication is an authentication using a secret key cryptographic technique.

7. The method as claimed in claim 6, wherein said initial authentication is executed when the user has no previous authentication information in said network access entity, and said re-authentication is executed when the user has said previous authentication information in said network access entity.

8. The system as claimed in claim 6, wherein said initial authentication is executed instead of the re-authentication when the predetermined period of time has passed after the last authentication.

9. The system as claimed in claim 6, wherein said authentication information is encrypted and the encrypted authentication information is sent between the user and the network access entity.

10. The system as claimed in claim 6, wherein said authentication information is updated to have different values at each time and the updated authentication information is sent between the user and the network access entity.