×

Authenticating system, authenticating method, and authenticating program

  • US 8,180,054 B2
  • Filed: 01/17/2008
  • Issued: 05/15/2012
  • Est. Priority Date: 01/25/2007
  • Status: Active Grant
First Claim
Patent Images

1. An authenticating system for, with a client apparatus and a server apparatus connected via a communication line, executing an authentication of a user of said client apparatus by employing a hash algorithm, wherein:

  • said client apparatus comprises;

    an authenticating information inputter for inputting authentication information including identification information and a password of the user;

    a client-side hash value creator for creating a first hash value from said authentication information by employing a first hash algorithm that corresponds to a first hash algorithm identifier transmitted from said server apparatus, and creating a second hash value from said first hash value and a random number transmitted from said server apparatus by employing said first hash algorithm; and

    an authentication request manager for transmitting authentication request information for causing said server apparatus to start an authenticating process to said server apparatus, receiving said random number and said first hash algorithm identifier from said server apparatus, transmitting said identification information of the user input from said authentication information inputter and said second hash value to said server apparatus, and receiving an authentication result from said server apparatus; and

    said server apparatus comprises;

    a user information storage in which user information has been stored that includes a second hash algorithm identifier that respectively corresponds for each said identification information of the user, and a third hash value pre-created from the authentication information including said identification information and said password of the user by employing a second hash algorithm that corresponds to this hash algorithm identifier;

    a random number creator for creating a random number;

    a server-side hash value creator for creating a hash value; and

    an authentication information manager for, upon receipt of said authentication request information from said client apparatus, causing said random number creator to create a random number, and transmitting said random number and said first hash algorithm identifier to said client apparatus, and for, upon receipt of said identification information of the user and said second hash value from said client apparatus, acquiring user information, which corresponds to this received identification information of the user, from said user information storage, determining whether or not said second hash algorithm identifier, which is included in said acquired user information, coincides with said first hash algorithm identifier, causing said server-side hash value creator to create a fourth hash value from a third hash value, which is included in said acquired user information, and said random number by employing said first hash algorithm in a case where it coincides, determining whether or not said second hash value coincides with said fourth hash value, transmitting the authentication result indicating that the authentication is successful to said client apparatus in a case where it coincides, and transmitting the authentication result indicating that the authentication is unsuccessful to said client apparatus in a case where it does not coincide; and

    the authentication system allows a change of a hash algorithm in the server apparatus, and then a gradual change of corresponding hash algorithms in a plurality of client apparatuses one by one, without changing corresponding hash algorithms of all client apparatuses at once,wherein;

    said authentication information manager in said server apparatus transmits said second hash algorithm identifier to said client apparatus as hash algorithm change request information in a case of having determined that said second hash algorithm identifier does not coincides with said first hash algorithm identifier;

    said authentication request manager in said client apparatus, upon receipt of said second hash algorithm identifier, causes said authentication information inputter to re-input said identification information, a password, and a new password of the user, causes said client-side hash value creator to create a new third hash value from said identification information and said password of the user, which were re-input, by employing said second hash algorithm, to create a new fourth hash value from said new third hash value and said random number by employing said first hash algorithm, and further to create a fifth hash value from said identification information and said new password of the user, which were re-input, by employing said first hash algorithm, and transmits said identification information of the user, said new fourth hash value, and said fifth hash value to said server apparatus; and

    said authentication information manager in said server apparatus, upon receipt of said identification information of the user, said new fourth hash value, and said fifth hash value, causes said server-side hash value creator to create a fourth hash value from the third hash value, which is included in said acquired user information, and said random number by employing said first hash algorithm, determines whether or not said fourth hash value coincides with said new fourth hash value, updates said second hash algorithm identifier and said third hash value that correspond to said identification information of the user in said user information storage into said first hash algorithm identifier and said fifth hash value, respectively, to transmit the authentication result indicating that the authentication is successful to said client apparatus in a case where it coincides, and transmits the authentication result indicating that the authentication is unsuccessful to said client apparatus in a case where it does not coincide.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×