Method of registering smart phone when accessing security authentication device and method of granting access permission to registered smart phone

• US 9,025,769 B2
• Filed: 08/03/2011
• Issued: 05/05/2015
• Est. Priority Date: 05/25/2011
• Status: Active Grant

• Current Assignee: Suprema Incorporated
• Original Assignee: Suprema Incorporated
• Inventors: Choi, Yeon Gil, Lee, Seong Jik, Lee, Jae Won
• Primary Examiner(s): EDWARDS, LINGLAN E
• Application Number:
  US13/197,121
• Publication Number:
  US 20120300927A1
• Time in Patent Office: 1,371 Days
• Field of Search: 380/247, 380/249, 713/155, 713/182, 726 2- 7
• US Class Current: 380/247
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

A method for registering a Smartphone when accessing security authentication device and a method for access authentication of a registered Smartphone are provided. When a Smartphone based application searches for a device and attempts an access to the found device, the search and access for the device is limited according to a result of authentication using an activation code.

Claims

1. A method of registering a Smartphone to access a security authentication device in a management server, the method comprising:

generating an activation code comprising a first cryptic code and a second cryptic code, the first cryptic code being generated by encrypting an International Mobile Equipment Identity (IMEI) assigned to the Smartphone using a key that is shared only between the management server and the security authentication device, and the second cryptic code being generated by encrypting the first encrypted code with a password received from the Smartphone; and

registering the activation code by distributing the first cryptic code to the Smartphone and distributing the second cryptic code to the security authentication device,

wherein the activation code comprises a list of searchable devices that the Smartphone is able to search for and access and the generating of the activation code comprises setting an authorization range of searchable devices based on the activation code.

2. The method of claim 1, wherein the security authentication device comprises at least one of an admission terminal and an entry control device.

3. The method of claim 1, wherein the first encrypted code includes additional information about the Smartphone including at least one of an Integrated circuit card identifier (ICCID), a Subscriber Identity Module Serial Number (SSN), or an Unique Device Identifier (UDID).

4. The method of claim 1, wherein the generating of the activation code is achieved through a block cipher of performing a symmetric key cipher operation in a block unit.

5. The method of claim 1, wherein the generating of the activation code comprises:

generating the first cryptic code by encrypting the IMEI assigned to the Smartphone by use of an internally-defined key; and

generating the second cryptic code by encrypting the first cryptic code by use of an activation code password that is received from the Smartphone.

6. The method of claim 5, wherein the internally-defined key is changeable by a management program, or transmitted from the management program to the security authentication device and then changed by the security authentication device.

7. The method of claim 5, wherein the internally-defined key is shared only between a management server and the security authentication device.

8. The method of claim 5, wherein the method of registering the Smartphone further comprises

authenticating the updated activation code by requesting the activation code password from the Smartphone, in response to the activation code being updated.

9. The method of claim 1, wherein the generating of the activation code comprises:

receiving the IMEI, which is used to generate the activation code, from the Smartphone;

requesting an activation code password from the Smartphone and receiving the requested activation code password;

generating the first cryptic code by encrypting the IMEI assigned to the Smartphone by use of an internally-defined key; and

generating the second cryptic code by encrypting the first cryptic code by use of the activation code password that is received from the Smartphone.

10. The method of claim 9, wherein the internally-defined key is changeable by a management program, or transmitted from the management program to the security authentication device and then changed by the security authentication device.

11. The method of claim 9, further comprises

authenticating the updated activation code by requesting the activation code password from the Smartphone, in response to the activation code being updated.

12. A method of authenticating a Smartphone at a security authentication device, the method comprising:

generating an activation code of the Smartphone, the activation code comprising a first cryptic code that includes an International Mobile Equipment Identity (IMEI) assigned to the Smartphone being encrypted with a key that is available only to the security authentication device;

requesting an activation code password from the Smartphone and receiving the requested activation code password;

generating a second cryptic code that comprises the first cryptic code encrypted with the activation code password; and

authenticating the activation code by transmitting the second cryptic code to the security authentication device,

wherein the activation code comprises a list of searchable devices that the Smartphone is able to search for and access and the generating of the activation code comprises setting an authorization range of searchable devices based on the activation code.

13. The method of claim 12, wherein the first cryptic code is generated by encrypting the IMEI assigned to the Smartphone by use of an internally-defined key;

and

the second cryptic code is generated by encrypting the first cryptic code with the activation code password.

14. The method of claim 13, wherein the internally-defined key is changeable by a management program of or transmitted from the management program to the security authentication device and then changed by the security authentication device.

15. The method of claim 13, wherein the first cryptic code corresponds to a code that is distributed from a management sever to the Smartphone, and the second cryptic code corresponds to a code that is distributed from the management server to the security authentication device.

16. The method of claim 12, wherein the requesting and receiving of the activation code password from the Smartphone comprises:

expiring the activation code if the number of password input attempts exceeds a limit.

17. The method of claim 12, wherein the further authenticating of the activation code comprises:

transmitting the activation code password to the security authentication device through the Smartphone application; and

at the security authentication device, authenticating the activation code if the transmitted activation code password is identical to a stored activation code password.

18. A method to register a Smartphone at a security authentication device in a management server, the method comprising:

generating an activation code comprising a first cryptic code and a second cryptic code

generating the first cryptic code by encrypting an International Mobile Equipment Identity (IMEI) assigned to the Smartphone using a key that is shared only between the management server and the security authentication device;

generating the second cryptic code by encrypting the first encrypted code with a password received from the Smartphone; and

distributing the first cryptic code to the Smartphone and distributing the second cryptic code to the security authentication device,

wherein the security authentication device comprises at least one of an admission terminal and an entry control device, and

wherein the activation code comprises a list of searchable devices that the Smartphone is able to search for and access and the generating of the activation code comprises setting an authorization range of searchable devices based on the activation code.

19. A method of granting an authentication to a Smartphone to access a security authentication device, the method comprising:

generating an activation code of the Smartphone, the activation code comprising a first cryptic code that includes an International Mobile Equipment Identity (IMEI) assigned to the Smartphone being encrypted with a key that is available only to the security authentication device;

requesting an activation code password from the Smartphone and receiving the requested activation code password;

generating a second cryptic code that comprises the first cryptic code that is encrypted with the activation code password; and

authenticating the activation code by transmitting the second cryptic code to the security authentication device,

wherein the security authentication device comprises at least one of an admission terminal and an entry control device, and

wherein the activation code comprises a list of searchable devices that the Smartphone is able to search for and access and the generating of the activation code comprises setting an authorization range of searchable devices based on the activation code.