Method for PC client security authentication

• US 7,418,727 B2
• Filed: 06/07/2002
• Issued: 08/26/2008
• Est. Priority Date: 09/29/2001
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Xiaolan, Gan, Quan, Lin, Haitao, Chen, Shuiyang
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): GERGISO, TECHANE
• Application Number:
  US10/491,093
• Publication Number:
  US 20040255158A1
• Time in Patent Office: 2,272 Days
• Field of Search: 726/5, 713/168, 380/258
• US Class Current: 726/5
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A security authentication for PC client is provided according to the present invention, wherein said method includes: PC client sends a registry request to a server with a user ID and a password; The server makes first authentication based on the user ID and password, if the authentication succeeds, a field used for re-authentication will be created and returned to the PC client through an authentication successful message; When initiating a call, the PC client transmits the user ID and the field used for re-authentication acquired when registered to media gateway controller; The media gateway controller transfers the user ID and field used for re-authentication to the server, which makes second authentication according to the user ID and the field used for the second authentication, if the authentication fails, the call will be rejected, otherwise the call will be accepted and returns information of the called subscriber. The present invention successfully associates call and subscriber registry together, preferably solves security problems of the having registered legal PC subscriber and largely improves security performance when the subscriber uses the resources.

Claims

1. A security authentication method for a PC client, comprising:

sending by the PC client a registry request to a user server with a user ID and a password;

performing, by the user server, a first authentication based on the user ID and the password, if the first authentication being successful, creating a field used for re-authentication and returning the field to the PC client through an authentication successful message;

when initiating a call each time, transmitting, by the PC client, the user ID and the field returned by the user server as well as a calling number and a called number to a service server;

transferring, by the service server, a request for re-authentication including the user ID and the field as well as the calling number and the called number to the user server each time the service server receives a call from the PC client;

performing, by the user server, a second authentication based on the user ID and the field each time the user server receives the request for re-authentication, and if the second authentication fails, rejecting the call, otherwise accepting the call and returning information of a called subscriber to the service server; and

accepting, by the service server after the second authentication, the call and establishing the call.

2. The security authentication method according to claim 1, wherein a random variable produced by the user server is stored in the field used for re-authentication.

3. The security authentication method according to claim 1, wherein an encrypted key produced by the user server is stored in the field used for re-authentication.

4. The security authentication method according to claim 1, wherein said user ID is an account number of the subscriber.

5. The security authentication method according to claim 1, wherein said user ID is a service number of the subscriber.