Terminal communication system

• US 7,962,744 B2
• Filed: 04/18/2002
• Issued: 06/14/2011
• Est. Priority Date: 04/19/2001
• Status: Expired due to Fees

• Current Assignee: Advanced Navigation & Positioning Corporation, NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamamoto, Masaaki, Hiramatsu, Yoshiaki, Washio, Satoshi
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US10/275,932
• Publication Number:
  US 20030110374A1
• Time in Patent Office: 3,344 Days
• Field of Search: None
• US Class Current: 713/155
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Portable terminal MS downloads coupon data and public key KEYP2 of IP server 20 from IP server 20. Service terminal T obtains from IP server 20, a server certificate to which a digital signature is applied by secret key KEYS2. One to one local communication by infrared radiation is performed between portable terminal MS and service terminal T. At this point, portable terminal MS decrypts a server certificate by utilizing public key KEYP2 of IP server 20. Then, portable terminal MS communicates specified data after authenticating the identity of service terminal T.

Claims

1. A terminal communication method, comprising:

obtaining, at a portable terminal, specified data from a server not via a service terminal;

obtaining, at the service terminal from a certificate authority, a server certificate encrypted by a secret key of the certificate authority, the server certificate indicating certification of the service terminal, the service terminal being a device different from the server;

receiving, at the portable terminal, a communication application from the server not via the service terminal, the communication application comprising a public key of the certificate authority and a program for performing local communication with the service terminal,

obtaining, at the portable terminal, the server certificate from the service terminal;

verifying, at the portable terminal, the server certificate on the basis of the public key of the certificate authority included in the communication application; and

when the service terminal is authenticated by the portable terminal on the basis of the server certificate, transmitting, from the portable terminal to the service terminal, the specified data using local communication without a network by executing the program, in the communication application, to authenticate the portable terminal and perform local communication with the service terminal.

2. A terminal communication method according to claim 1, further comprising:

obtaining, at the portable terminal from the certificate authority, a client certificate encrypted by the secret key of the certificate authority;

obtaining, at the service terminal, the client certificate from the portable terminal,

verifying, at the service terminal, the client certificate on the basis of the public key of the certificate authority, and

performing, at the service terminal, local communication with the portable terminal in a case that a positive authentication result is obtained.

3. A terminal communication method according to claim 1, wherein:

the portable terminal performs communication with the server via a radio communication network.

4. A terminal communication method according to claim 1, wherein:

the portable terminal decrypts the server certificate by utilizing the public key of the certificate authority to determine authenticity of the service terminal.

5. A terminal communication method according to claim 2, wherein:

the service terminal decrypts the client certificate by utilizing the public key of the certificate authority to determine authenticity of the portable terminal.

6. A terminal communication method according to claim 1, wherein:

communication between the portable terminal and the service terminal is performed by infrared radiation communication or close distance radio communication.

7. A terminal communication method according to claim 1, wherein:

communication between the portable terminal and the service terminal is encrypted communication.

8. A terminal communication method according to claim 1, wherein:

the server functions as the certificate authority, or the certificate authority functions as the server.

11. A terminal communication method according to claim 1, wherein the specified data comprises music data.

12. A terminal communication method according to claim 1, wherein the specified data comprises image data.

13. A terminal communication method according to claim 1, wherein the specified data is selected from the group consisting of concert tickets and train tickets.

14. A terminal communication method according to claim 1, wherein the specified data comprises transaction data.

15. A terminal communication method according to claim 14, wherein the transaction data is selected from the group consisting of money data, issue data for issuing tickets, obtainment data for obtaining game programs, and coupon data.

21. A terminal communication method according to claim 1, wherein the portable terminal is only able to transmit the specified data from the portable terminal by executing the program in the communication application that was transmitted by the server.

23. A terminal communication method according to claim 1, wherein the communication application must be executed in order for the specified data to be transmitted from the portable terminal.

24. A terminal communication method according to claim 23, wherein the communication application limits transmission of the specified data to one or more local communications and prohibits transmission of the specified data via any network.

29. A terminal communication method according to claim 1, wherein the service terminal is an entity separated from the portable terminal and the server.

9. A portable terminal, comprising:

first receiving means that obtains specified data from a server not via a service terminal;

second receiving means that obtains a server certificate from a service terminal that holds an encrypted server certificate on the basis of a secret key of a certificate authority, the server certificate indicating certification of the service terminal, the service terminal being a device different from the server;

third receiving means that receives from the server not via the service terminal, a communication application for performing the process to transmit the specified data to the service terminal, the communication application comprising a public key of the certificate authority and a program for performing local communication with the service terminal;

verifying means that verifies the server certificate on the basis of a public key of the certificate authority included in the communication application; and

when the verifying means verifies the server certificate of the service terminal, transmitting means that transmits the specified data to the service terminal by executing the program, in the communication application, to authenticate the portable terminal and perform local communication with the service terminal.

10. A portable terminal, according to claim 9, further comprising:

fourth receiving means that receives from the certificate authority, a client certificate certifying authenticity of the portable terminal.

16. A portable terminal according to claim 9, wherein the specified data comprises music data.

17. A portable terminal according to claim 9, wherein the specified data comprises image data.

18. A portable terminal according to claim 9, wherein the specified data is selected from the group consisting of concert tickets and train tickets.

19. A portable terminal according to claim 9, wherein the specified data comprises transaction data.

20. A portable terminal according to claim 19, wherein the transaction data is selected from the group consisting of money data, issue data for issuing tickets, obtainment data for obtaining game programs, and coupon data.

22. A portable terminal according to claim 9, wherein the portable terminal is only able to transmit the specified data from the portable terminal by executing the program in the communication application that was transmitted by the server.

25. A portable terminal according to claim 9, wherein the communication application must be executed in order for the specified data to be transmitted from the portable terminal.

26. A terminal communication method according to claim 25, wherein the communication application limits transmission of the specified data to one or more local communications and prohibits transmission of the specified data via any network.

27. A terminal communication method, comprising:

obtaining, at a portable terminal, specified data from a server not via a service terminal;

obtaining, at the service terminal from a certificate authority, a server certificate encrypted by a secret key of the certificate authority, the server certificate indicating certification of the service terminal, the service terminal being a device different from the server;

receiving, at the portable terminal, a local communication program and a public key of the certificate authority from the server not via the service terminal, the local communication program required to be executed in order transmit the specified data from the portable terminal to the service terminal, the local communication program limiting transmission of the specified data to one or more local communications and prohibiting transmission of the specified data via any network, the public key of the certificate authority being associated with the local communication program;

obtaining, at the portable terminal, the server certificate from the service terminal;

verifying, at the portable terminal, the server certificate on the basis of the public key of the certificate authority; and

when the service terminal is authenticated by the portable terminal on the basis of the server certificate, executing the local communication program in order to authenticate the portable terminal, to limit transmission of the specified data from the portable terminal to the service terminal using only the local communication, and to prohibit transmission of the specified data using any network.

28. A terminal communication method according to claim 27, wherein the portable terminal receives a communication application, the communication application comprising the local communication program and the public key of the certificate authority.