Method of authenticating user and system for authenticating user

• US 6,515,575 B1
• Filed: 06/16/1999
• Issued: 02/04/2003
• Est. Priority Date: 06/16/1998
• Status: Expired due to Fees

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Kataoka, Kenji
• Primary Examiner(s): Horabik, Michael
• Assistant Examiner(s): Nguyen, Nam V
• Application Number:
  US09/333,926
• Time in Patent Office: 1,329 Days
• Field of Search: 340/5.54, 340/5.8, 340/5.81, 340/5.82, 340/5.85, 340/5.86, 340/825.29, 340/5.1, 340/5.2, 340/5.21, 340/5.22, 340/5.28, 340/5.3
• US Class Current: 340/5.8
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04M 1/67 by electronic means
• CPC Class Codes: H04M 1/725 Cordless telephones user interfaces specially adapted therefor H04M1/724

Abstract

There is provided a method of authenticating a portable data-communication terminal user in a system comprising a portable data-communication terminal and a device for authenticating a user both including a transceiver for making radio-communication to each other, the method including the steps of (a) transmitting and receiving user-authentication data between the portable data-communication terminal and the user-authenticating device to thereby carry out check as to whether the portable data-communication terminal is far away from the user-authenticating device by a distance equal to or smaller than a first distance within which the transceiver can make radio-communication between the portable data-communication terminal and the user-authenticating device, and (b) allowing the portable data-communication terminal to carry out a predetermined operation only when the portable data-communication terminal is authenticated to be located within the first distance from the user-authenticating device. In accordance with the method, only when an authorized user having both the portable data-communication terminal and the user-authenticating device uses the portable data-communication terminal, the portable data-communication terminal is allowed to carry out a certain operation. Hence, it is possible to prevent a third party from using the portable data-communication terminal without permission of the user.

Claims

1. A method of authenticating a portable data-communication terminal user in a system comprising a host, a portable data-communication terminal and a user authenticating device for authenticating a user, the portable data-communication terminal and said user authenticating device each including a transceiver for making radio-communication to each other, said method comprising:

(a) transmitting and receiving user-authentication data between said portable data-communication terminal and said user-authenticating device to thereby carry out check as to whether said portable data-communication terminal is far away from said user-authenticating device by a distance equal to or smaller than a first distance within which said transceiver can make radio-communication between said portable data-communication terminal and said user-authenticating device; and

(b) allowing said portable data-communication terminal to carry out a predetermined operation only when said portable data-communication terminal is authenticated to be located within said first distance from said user-authenticating device.

2. The method as set forth in claim 1, wherein said user-authentication data is code data inherent to a user.

3. The method as set forth in claim 1, wherein said portable data-communication terminal has a function of logging in a host device by transmitting log-in data to said host device, and whether log-in of said portable data-communication terminal to said host device is allowed is determined in accordance with a result of said check.

4. The method as set forth in claim 3, wherein said log-in data is stored in advance in a memory equipped in said portable data-communication terminal, and said log-in data is read out of said memory, and transmitted to said host device.

5. The method as set forth in claim 3, wherein said log-in data is comprised of first data including an account, used for identifying a user, and second data including a pass word, used for authenticating a user.

6. The method as set forth in claim 1, wherein said check is carried out only when a predetermined request is input into said portable data-communication terminal.

7. The method as set forth in claim 6, wherein after said check has been carried out once, said check is repeatedly carried out in a fixed interval.

8. The method as set forth in claim 1, wherein said portable data-communication terminal transmits an authentication requesting signal including data about random number to said user-authenticating device, said user-authenticating device receiving said authenticating requesting signal produces a response signal including said data about random number and authentication data stored in said user-authenticating device, and transmits the thus produced response signal to said portable data-communication terminal, and said portable data-communication terminal receiving said response signal extracts said authentication data from said response signal, and compares the thus extracted authentication data with authentication data stored in said portable data-communication terminal.

9. The method of claim 1, further comprising determining whether said user-authentication data authenticates said user-authenticating device.

10. The method of claim 9, wherein said determining is based upon a comparison of user-authentication data stored by said user-authenticating device and user-authentication data stored on said portable data-communication terminal.

11. A system for authenticating a user, comprising:

(a) a portable terminal which makes data-communication including a memory to store authentication data of itself therein, and a radio-transceiver to make radio-communication for transmitting and receiving said authentication data; and

(b) a device which authenticates a user including a memory to store authentication data of itself therein, and a radio-transceiver to make radio-communication for transmitting and receiving said authentication data,

said portable data-communication terminal and said user-authenticating device transmitting and receiving said authentication data therebetween to thereby carry out check as to whether said portable data-communication terminal is far away from said user-authenticating device by a distance equal to or smaller than a first distance within which said radio-transceivers can make radio-communication between said portable data-communication terminal and said user-authenticating device,

said portable data-communication terminal being allowed to carry out a communication with a host only when said portable data-communication terminal is authenticated to be located within said first distance from said user-authenticating device.

12. The system as set forth in claim 11, wherein said user-authenticating device includes a radio-transmitter to transmit authentication data of itself to said portable data-communication terminal in radio, and wherein said portable data-communication terminal includes a radio-receiver to receive said authentication data transmitted from said user-authenticating device, and a comparator to compare the thus received authentication data to authentication data of said portable data-communication terminal.

13. The system as set forth in claim 12, wherein said portable data-communication terminal includes a radio-transmitter to transmit a request for authentication to said user-authenticating device in radio, and wherein said user-authenticating device includes a radio-receiver to receive said request transmitted from said portable data-communication terminal.

14. The system as set forth in claim 13, wherein said portable data-communication terminal includes a timer which monitors whether authentication data is received from said user-authenticating device within a predetermined period of time after said request has been transmitted to said user-authenticating device.

15. The system as set forth in claim 12, wherein said radio-transmitter of said portable data-communication terminal transmits a random output for making radio-communication with said user-authentication device.

16. The system as set forth in claim 12, wherein said portable data-communication terminal includes:

(a) a random number generator;

(b) a comparative data producer which produces comparative data, based on said authentication data received from said memory and a random number transmitted from said random number, and transmits the thus produced comparative data to said comparator.

17. The system as set forth in claim 12, wherein said radio-transmitter of said user-authentication device transmits a random output for making radio-communication with said portable data-communication terminal.

18. The system as set forth in claim 11, wherein said portable data-communication terminal has a function of logging in a host device by transmitting log-in data to said host device, and includes a memory storing said long-in data therein, and an access controller transmitting said log-in data to said host device.

19. The system as set forth in claim 18, wherein said portable data-communication terminal includes a second timer measuring a certain period of time after said portable data-communication terminal has been allowed to log in to said host device, said check being carried out in every said certain period of time.

20. The system as set forth in claim 19, wherein said certain period of time is variable.