Communication processing method and system relating to authentication information

• US 7,823,187 B2
• Filed: 09/18/2006
• Issued: 10/26/2010
• Est. Priority Date: 06/07/2006
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Morikawa, Hiroaki, Tanaka, Kosuke, Sato, Ryuichi, Iriyama, Yasuomi
• Primary Examiner(s): LaForgia; Christian
• Assistant Examiner(s): Jackson; Jenise E
• Application Number:
  US11/522,696
• Publication Number:
  US 20080022356A1
• Time in Patent Office: 1,499 Days
• Field of Search: 726/1, 726/2, 713183-184, 713/171
• US Class Current: 726/1
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

This invention is to safely and surely distribute authentication information to users or user terminals. This method includes: requesting authentication using predetermined authentication information for an access destination via a network; receiving a notification indicating an authentication failure from the access destination; acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and requesting the authentication using the acquired currently valid authentication information for the access destination via the network. Thus, by supposing that a failure in the authentication occurs, and by causing the user side to present the data to indicate own legitimacy for the authentication information manager, the currently valid authentication information is distributed, for example, after the encryption.

Claims

1. A computer, comprising:

an authentication request unit to request authentication using predetermined authentication information for an access destination via a network;

a unit to receive notification indicating an authentication failure from said access destination; and

an acquiring unit to acquire currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and to store the acquired currently valid authentication information into a storage device, and

wherein said authentication request unit requests said authentication using said acquired currently valid authentication information for said access destination via said network, and

said acquiring unit transmits a session key request to said authentication information manager, receives said session key from said authentication information manager, generates a digest corresponding to said session key by a predetermined digest function, and transmits said digest to said authentication information manager, and

when said digest is judged by said authentication information manager to be legitimate, said acquiring unit receives said currently valid authentication information from said authentication information manager.

3. The communication processing method as set forth in claim 1, wherein said transmitting said session key comprises:

requesting said authentication using said predetermined authentication information for said authentication information manager via said network.

4. The communication processing method as set forth in claim 1, further comprising:

receiving notification of an authentication success based on said currently valid authentication information from said access destination; and

storing said currently valid authentication information into an authentication information storage.

2. A communication processing method, comprising:

requesting authentication using predetermined authentication information for an access destination via a network;

receiving notification indicating an authentication failure from said access destination;

acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and

requesting said authentication using said acquired currently valid authentication information for said access destination via said network, and

wherein said acquiring comprises;

transmitting a session key request to said authentication information manager;

receiving said session key from said authentication information manager;

generating a digest corresponding to said session key by a predetermined digest function, and transmitting said digest to said authentication information manager; and

when said digest is judged by said authentication information manager to be legitimate, receiving said currently valid authentication information from said authentication information manager.

5. A computer system, comprising:

a processing server to carry out an authentication processing by predetermined authentication information;

an authentication information manager to hold authentication information used in said authentication processing carried out by said processing server in an authentication information storage, and to distribute said authentication information to a client terminal that uses said authentication information; and

a client terminal to use said authentication information and accesses said processing server, and

wherein after new registration or update of said authentication information used in said authentication processing carried out by said processing server occurs, said processing server notifies said client terminal of an authentication failure when an authentication request is received from said client terminal, and

said authentication information manager transmits newly registered or updated currently valid authentication information to said client terminal when data indicating legitimacy of said client terminal is received from said client terminal, and

said data indicating said legitimacy of said client terminal is a value of a predetermined digest function for a session key given from said authentication information manager.

6. A non-transitory computer-readable storage medium storing a program for causing a computer to carry out a communication process comprising:

requesting authentication using predetermined authentication information for an access destination via a network;

receiving notification indicating an authentication failure from said access destination;

acquiring currently valid authentication information from an authentication information manager by transmitting data to indicate own legitimacy, and storing the acquired currently valid authentication information into a storage device; and

requesting said authentication using said acquired currently valid authentication information for said access destination via said network, and

wherein said acquiring comprises;

transmitting a session key request to said authentication information manager;

receiving said session key from said authentication information manager;

generating a digest corresponding to said session key by a predetermined digest function, and transmitting said digest to said authentication information manager; and

when said digest is judged by said authentication information manager to be legitimate, receiving said currently valid authentication information from said authentication information manager.