Authentication system and method thereof for wireless networks

• US 8,188,857 B2
• Filed: 10/24/2007
• Issued: 05/29/2012
• Est. Priority Date: 08/16/2007
• Status: Active Grant

• Current Assignee: Industrial Technology Research Institute
• Original Assignee: Industrial Technology Research Institute
• Inventors: Chen, Yu-Tso, Shih, Teng-Jui, Chiou, Shin-Yan
• Primary Examiner(s): Mehmood, Jennifer
• Assistant Examiner(s): RUSHING, MARK S
• Application Number:
  US11/877,682
• Publication Number:
  US 20090045943A1
• Time in Patent Office: 1,679 Days
• Field of Search: 340/539.11, 340/539.1, 340/531, 340/500, 340/5.6, 340/5.2, 340/5.1, 340/825, 340/5.8, 235/375, 235/381
• US Class Current: 340/539.11
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An authentication system for a wireless network is disclosed. The authentication system includes a card, a card reader, an end-user device, and a wireless access device. The card reader is coupled to the wireless access device. The card records a data, and the card reader reads the data recorded in the card. The wireless access device receives the data read by the card reader and performs authentication between the wireless access device and the end-user device according to the data.

Claims

1. An authentication system for a wireless network, comprising:

a card, recording a first data;

a first card reader, reading the first data recorded in the card;

an end-user device, requiring a wireless access service via a wireless network;

a wireless access device, coupled to the first card reader via a non-wireless network, for receiving the first data read by the first card reader, performing authentication between the end-user device and the wireless access device via the wireless network, and providing the wireless access service to the end-user device according to the authentication; and

a second card reader, coupled to the end-user device, for reading the first data recorded in the card and transmitting the first data to the end-user device, wherein after the first card reader reads the first data, the first card reader generates a second data and writes the second data into the card, and the first card reader further transmits the second data and the first data to the wireless access device;

the second card reader reads the first data and the second recorded in the card and transmits the first data and the second data to the end-user device;

the wireless access device transmits the second data to the end-user device for authentication via the wireless network; and

the end-user device transmits the first data to the wireless access device for authentication via the wireless network.

2. The authentication system according to claim 1, wherein the wireless access device and the end-user device are connected to each other through a fixed service set identifier (SSID).

3. The authentication system according to claim 1, wherein the wireless access device and the end-user device are connected to each other through a dynamically produced SSID.

4. The authentication system according to claim 1, wherein the card is embedded in the end-user device.

5. The authentication system according to claim 1, wherein the card is a contact card, and the first card reader is a contact card reader.

6. The authentication system according to claim 1, wherein the second card reader is embedded in the end-user device.

7. The authentication system according to claim 1, wherein the card is a contact less card, the first card reader is a first inductive card reader, and the second card reader is a second inductive card reader.

8. The authentication system according to claim 1, wherein the card is a contact card, the first card reader is a first contact card reader, and the second card reader is a second contact card reader.

9. The authentication system according to claim 1, wherein the end-user device transmits the first data to the wireless access device via the wireless network in order to perform authentication between the end-user device and the wireless access device.

10. The authentication system according to claim 1, wherein the second data is a random number.

11. The authentication system according to claim 1 further comprising:

an authentication server, coupled to the wireless access device;

wherein the wireless access device queries a corresponding user authentication data from the authentication server according to the first data recorded in the card and compares the user authentication data and a data input by the end-user device so as to perform authentication between the end-user device and the wireless access device.

12. The authentication system according to claim 1, wherein the wireless access device comprises at least one WiFi access device.

13. The authentication system according to claim 1, wherein the authentication system may be applied to a GSM, GPRS, WiFi, WiMAX, 3G, or 4G wireless communication system.

14. The authentication system according to claim 1, wherein the authentication system may be applied to a video push-casting system, an exhibition system, an access control system, or a payment system.

15. An authentication method for a wireless network, comprising:

reading a first data recorded in a card by using a first card reader;

transmitting the first data to a wireless access device via a non-wireless network;

reading the first data recorded in the card by using a second card reader;

transmitting the first data to the end-user device;

writing a second data into the card by using the first card reader when the first card reader finishes reading the first data;

transmitting the second data and the first data to the wireless access device by using the first card reader;

reading the first data and the second data recorded in the card by using the second card reader;

transmitting the first data and the second data to the end-user device by using the second card reader;

transmitting the second data to the end-user device for authentication via the wireless network by using the wireless access device;

transmitting the first data to the wireless access device for authentication via the wireless network by using the end-user device;

performing authentication between the wireless access device and an end-user device via a wireless network, wherein the end-user device requires the wireless access device for a wireless access service via the wireless network; and

providing the wireless access service to the end-user device according to the authentication.

16. The authentication method according to claim 15 further comprising:

calculating a common encryption key for performing a secured communication by using the wireless access device and the end-user device if the authentication between the wireless access device and the end-user device succeeds; and

terminating the network connection or restarting the network connection if the authentication between the wireless access device and the end-user device fails.

17. The authentication method according to claim 15, wherein the wireless access device and the end-user device are connected to each other through a fixed SSID.

18. The authentication method according to claim 15, wherein the wireless access device and the end-user device are connected to each other through a dynamically produced SSID.

19. The authentication method according to claim 15 further comprising:

transmitting the first data to the wireless access device via the wireless network by using the end-user device in order to perform authentication between the end-user device and the wireless access device.

20. The authentication method according to claim 15 further comprising:

providing an authentication server;

querying a corresponding user authentication data from the authentication server according to the first data recorded in the card by using the wireless access device; and

comparing the user authentication data and a data input by the end-user device via the wireless network by using the wireless access device, so as to perform authentication between the end-user device and the wireless access device.

21. The authentication method according to claim 15, wherein the authentication method may be applied to a GSM, GPRS, WiFi, WiMAX, 3G, or 4G wireless communication system.

22. The authentication method according to claim 15, wherein the authentication method may be applied to a video push-casting system, an exhibition system, an access control system, or a payment system.