Authenticating method of communicating connection, gateway apparatus using authenticating method, and communication system using authenticating method

• US 9,374,350 B2
• Filed: 02/13/2012
• Issued: 06/21/2016
• Est. Priority Date: 03/10/2011
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Song, Kwan-woo, Lee, Dong-ik
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US13/372,041
• Publication Number:
  US 20120233468A1
• Time in Patent Office: 1,590 Days
• Field of Search: 713/171, 726/12, 726/2, 726/4
• US Class Current: 1/1
• CPC Class Codes: H04L 12/28 characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks] wireless communication networks H04W ; arrangements for dividing the transmission path H04W40/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 72/04 Wireless resource allocation

Abstract

An authenticating method of communicating connection between a terminal and a gateway apparatus, the method including transmitting authentication information and first intrinsic identification information that is intrinsic identification information of the terminal from the terminal to the gateway apparatus and requesting the authentication; authenticating the communicating connection by using at least one of the first intrinsic identification information and the authentication information; and when the authenticating is successful, generating at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus, thereby increasing communication security between the terminal and the gateway apparatus.

Claims

1. An authentication method of a gateway apparatus, the method comprising:

receiving, from a terminal, first intrinsic identification information that is intrinsic identification information of the terminal;

authenticating the communicating connection by using the first intrinsic identification information;

when the authenticating is successful, generating at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus;

transmitting, to the terminal, encrypted connection information for accessing the gateway apparatus and the at least one authentication key;

receiving, from the terminal, a request of monitored information; and

transmitting, to the terminal, encrypted monitored information,

wherein the monitored information includes intrusion information indicating whether intrusion into a home occurs.

2. The method of claim 1, wherein the first intrinsic identification information comprises a media access control (MAC) address of the terminal, and

wherein the second intrinsic identification information comprises a MAC address of the gateway apparatus.

3. The method of claim 1, further comprising:

matching the at least one authentication key with the terminal, and storing the at least one authentication key matched with the terminal in the gateway apparatus; and

storing the at least one authentication key in the terminal.

4. The method of claim 1, wherein the gateway apparatus and the terminal transit data to each other by using the at least one authentication key.

5. The method of claim 1, wherein the receiving the request of the monitored information comprises:

receiving the first intrinsic identification information from the terminal;

authenticating the terminal by using the first intrinsic identification information; and

when the authenticating is successful, transmitting the monitored information.

6. The method of claim 5, further comprising receiving the detection result of a security situation from a detecting device included in the same home as the gateway apparatus.

7. The method of claim 5, wherein the receiving the first intrinsic identification information comprises receiving the first intrinsic identification information, which is encrypted using the at least one authentication key.

8. The method of claim 1, wherein the receiving the encrypted monitored information comprises encrypting the monitored information by using the at least one authentication key.

9. The method of claim 1, further comprising decrypting the encrypted monitored information by using the at least one authentication key, in the terminal.

10. The method of claim 1, wherein the at least one authentication key comprises:

a first authentication key for encrypting data to be transmitted; and

a second authentication key for decrypting received data.

19. The method of claim 1, wherein the gateway apparatus generates the at least one authentication key by combining the first intrinsic identification information with the second intrinsic identification information.

11. A gateway apparatus comprising:

an authentication processor to receive first intrinsic identification information that is intrinsic identification information of a terminal from the terminal and authenticate communicating connection by using the first intrinsic identification information;

an authentication key generator to, when the authenticating is completed and successful, generate at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus;

a communication interface to transmit encrypted connection information for accessing the gateway apparatus and the at least one authentication key to the terminal; and

a controller to control the communication interface so as to transmit encrypted monitored information, when the terminal transmits transmit and receive a request of monitored information,

wherein the monitored information includes intrusion information indicating whether intrusion into a home occurs.

12. The gateway apparatus of claim 11, wherein the first intrinsic identification information comprises a media access control (MAC) address of the terminal, and

wherein the second intrinsic identification information comprises a MAC address of the gateway apparatus.

13. The gateway apparatus of claim 11, further comprising a detection result processor to receive the detection result of a security situation from a detecting device included in the same home as the gateway apparatus and to monitor the security situation.

14. The gateway apparatus of claim 13, wherein the communication unit receives the first intrinsic identification information for requesting the monitored information by the detection result processor, and

the controller authenticates the terminal by using the first intrinsic identification information and controls the communication interface so as to transmit the encrypted monitored information to the terminal when the authenticating is successful.

15. The gateway apparatus of claim 14, wherein the controller encrypts the monitored information by using the at least one authentication key.

16. The gateway apparatus of claim 14, wherein the communication interface receives the encrypted first intrinsic identification information from the terminal, and the controller decrypts the first intrinsic identification information by using the at least one authentication key.

17. The gateway apparatus of claim 11, further comprising a storage to match and store the at least one authentication key matched with the terminal.

18. A communication system comprising a mobile terminal and a gateway apparatus,

wherein the mobile terminal transmits first intrinsic identification information that is intrinsic identification information of the terminal from the terminal to the gateway apparatus and requests the authentication of communication connection between the mobile terminal and the gateway apparatus, and

wherein the gateway apparatus authenticates the communicating connection by using the first intrinsic identification information, generates at least one authentication key by using at least one of the first intrinsic identification information and second intrinsic identification information that is intrinsic identification information of the gateway apparatus, when the authenticating is completed and successful, transmits encrypted connection information for accessing the gateway apparatus and the at least one authentication key to the terminal, and transmits encrypted monitored information which includes intrusion information indicating whether intrusion into a home occurs, when the terminal requests monitored information.