Server and system for transmitting certificate stored in fixed terminal to mobile terminal and method using the same

• US 8,032,753 B2
• Filed: 11/02/2007
• Issued: 10/04/2011
• Est. Priority Date: 11/23/2006
• Status: Expired due to Fees

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Kim, Seung-Hyun, Cho, Yeong-Sub, Chung, Kyo Il, Choi, Dae-Seon, Jin, Seung-Hun, Cho, Sang-Rae, Noh, Jong-Hyouk
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US11/934,620
• Publication Number:
  US 20080126797A1
• Time in Patent Office: 1,432 Days
• Field of Search: None
• US Class Current: 713/175
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Provided is a certificate transmission server transmitting a certificate stored in a fixed terminal to a mobile terminal, a system including the same, and a method using the same. The method includes forming a security channel to the mobile terminal and performing authentication of the mobile terminal, forming a security channel to the fixed terminal and performing authentication of the fixed terminal, and if the authentication of the mobile terminal and the fixed terminal is successful, receiving the certificate from the fixed terminal and transmitting the certificate to the mobile terminal. Accordingly, authentication of a mobile terminal and a fixed terminal can be performed by a certificate transmission server, and the certificate can be transmitted by establishing a safe communication channel.

Claims

1. A method of transmitting a certificate stored in a fixed terminal to a mobile terminal by a certificate transmission server, the method comprising:

(a) forming a security channel to the mobile terminal and performing authentication of the mobile terminal;

(b) forming a security channel to the fixed terminal and performing authentication of the fixed terminal; and

(c) if the authentication of the mobile terminal and the fixed terminal is successful, receiving the certificate directly from the fixed terminal and transmitting the certificate to the mobile terminal,

wherein for the authentication of the fixed terminal, the fixed terminal transmits to the certificate transmission server the same authentication code as the certificate transmission server has issued to the mobile terminal.

2. The method of claim 1, wherein (a) comprises:

receiving private information of a user which uses the mobile terminal and is able to have access to the fixed terminal from the mobile terminal;

verifying the private information, and if the authentication of the mobile terminal is successful, generating an authentication code for the mobile terminal; and

transmitting the authentication code to the mobile terminal.

3. The method of claim 1, wherein (b) comprises receiving an authentication code and private information from the fixed terminal and performing the authentication of the fixed terminal.

4. The method of claim 1, wherein the certificate received from the fixed terminal and transmitted to the mobile terminal is selected by a user which uses the mobile terminal and is able to have access to the fixed terminal from among certificates stored in the fixed terminal.

5. The method of claim 1, further comprising:

the mobile terminal generating a public key for encryption communication with the fixed terminal after the transmitting of the certificate to the mobile terminal is occurred;

the mobile terminal encrypting the public key using the certificate;

the certificate transmission server receiving the encrypted public key from the mobile terminal and transmitting it to the fixed terminal;

the fixed terminal decrypting the encrypted public key using a private key;

the fixed terminal encrypting the private key using the decrypted public key;

the certificate transmission server receiving the encrypted private key from the fixed terminal and transmitting it to the mobile terminal; and

the mobile terminal decrypting the encrypted private key using the public key and storing the decrypted private key.

6. A method of receiving a certificate stored in a fixed terminal by a mobile terminal, the method comprising:

(a) connecting to a designated certificate transmission server;

(b) transmitting private information of a user which uses the mobile terminal in order to receive authentication of the user performed by the certificate transmission server; and

(c) if the authentication of the user is successful, receiving the certificate from the certificate transmission server which has received the certificate directly from the fixed terminal,

wherein for the authentication of the fixed terminal, the fixed terminal transmits to the certificate transmission server the same authentication code as the certificate transmission server has issued to the mobile terminal.

7. The method of claim 6, wherein (a) comprises accessing the certificate transmission server using one of certificate transmission server addresses stored in the mobile terminal or a certificate transmission server address directly input by a user.

8. The method of claim 6, wherein (c) comprises receiving and storing an authentication code to be used for authentication of the fixed terminal from the certificate transmission server.

9. A certificate transmission server for transmitting a certificate stored in a fixed terminal to a mobile terminal, the certificate transmission server comprising:

a first authentication unit receiving private information of a user which uses the mobile terminal and is able to have access to the fixed terminal from the mobile terminal, performing authentication of the mobile terminal, and forming a security channel to the mobile terminal;

a second authentication unit performing authentication of the fixed terminal based on the private information of the user and an authentication code;

an authentication code generator generating an authentication code exclusive to the mobile terminal if the authentication of the mobile terminal is successful and transmitting the authentication code to the mobile terminal; and

a certificate transceiver receiving the certificate directly from the fixed terminal and transmitting the certificate to the mobile terminal if the authentication of the mobile terminal and the fixed terminal is successful,

wherein for the authentication of the fixed terminal, the fixed terminal transmits to the certificate transmission server the same authentication code as the certificate transmission server has issued to the mobile terminal.

10. The certificate transmission server of claim 9, wherein the certificate received from the fixed terminal and transmitted to the mobile terminal is selected by the user from among certificates stored in the fixed terminal.

11. A system for transmitting a certificate stored in a fixed terminal to a mobile terminal, the system comprising:

the mobile terminal;

the fixed terminal transmitting a certificate selected by a user which uses the mobile terminal is able to have access to the fixed terminal from among certificates stored therein to a certificate transmission server; and

the certificate transmission server performing authentication of the mobile terminal and the fixed terminal and transmitting the certificate received directly from the fixed terminal to the mobile terminal,

wherein for the authentication of the fixed terminal, the fixed terminal transmits to the certificate transmission server the same authentication code as the certificate transmission server has issued to the mobile terminal.

12. The system of claim 11, wherein the certificate transmission server comprises:

a first authentication unit receiving private information of the user from the mobile terminal, performing authentication of the mobile terminal, and forming a security channel to the mobile terminal;

a second authentication unit performing authentication of the fixed terminal based on the private information of the user and an authentication code;

an authentication code generator generating an authentication code exclusive to the mobile terminal if the authentication of the mobile terminal is successful and transmitting the authentication code to the mobile terminal; and

a certificate transceiver receiving the certificate from the fixed terminal and transmitting it to the mobile terminal if the authentication of the mobile terminal and the fixed terminal is successful.