Wireless authentication system and wireless authentication method

• US 9,609,512 B2
• Filed: 10/09/2014
• Issued: 03/28/2017
• Est. Priority Date: 10/09/2014
• Status: Active Grant

• Current Assignee: Userstar Information System Co., Ltd.
• Original Assignee: Userstar Information System Co., Ltd.
• Inventors: Tseng, Yin-Hung, Lin, Chung-Ming, Liu, Sheng-Chang
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): LAKHIA, VIRAL S
• Application Number:
  US14/510,169
• Publication Number:
  US 20150026783A1
• Time in Patent Office: 901 Days
• Field of Search: 713/155, 713/168, 713/184, 726/6, 726/19, 380/44
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A wireless authentication system includes an execution end device and a control end device. When the execution end device and the control end device receive an activation signal, the execution end device generates a time related random code, and transmits the time related random code to the control end device; and the control end device generates a comparison authentication code according to the time related random code, a fixed password and a variable password. When the execution end device determines that the comparison authentication code corresponds to a set of data stored in the execution end device, the execution end device performs a predetermined operation, and the variable password is changed.

Claims

1. A wireless authentication system for a protected device with memory, comprising:

an execution end device, which is arranged for connecting to the protected device for unlocking the protected device, comprising;

a first wireless module for receiving an activation signal; and

a first control unit coupled to the first wireless module, wherein the first control unit comprises means for generating a time related random code when the first wireless module receives the activation signal; and

a control end device comprising;

a second wireless module wirelessly linked to the first wireless module; and

a second control unit coupled to the second wireless module, wherein the first control unit transmits the time related random code to the second wireless module via the first wireless module;

wherein when the second wireless module receives the activation signal and the time related random code, the second control unit generates a comparison authentication code according to the time related random code, a fixed password and a variable password, and wherein the second control unit transmits the comparison authentication code to the first wireless module via the second wireless module; and

wherein when the comparison authentication code corresponds to a set of data stored in the execution end device, the first control unit is arranged for performing a predetermined operation to unlock the protected device, and the variable password is changed,

wherein the set of data comprises the time related random code, the fixed password and the variable password stored in the execution end device, the first control unit is further configured to decrypt the comparison authentication code in order to obtain a decrypted time related random code, a decrypted fixed password and a decrypted variable password, and when the first control unit determines that the decrypted time related random code, the decrypted fixed password and the decrypted variable password respectively correspond to the time related random code, the fixed password and the variable password stored in the execution end device, the first control unit is arranged for performing the predetermined operation to unlock the protected device.

2. The wireless authentication system of claim 1, wherein the fixed password is pre-stored in the execution end device and the control end device, the variable password is pre-stored in an external memory and the control end device, and the external memory is coupled to the execution end device.

3. The wireless authentication system of claim 1, wherein the variable password is pre-stored in the execution end device and the control end device, the fixed password is pre-stored in an external memory and the control end device, and the external memory is coupled to the execution end device.

4. The wireless authentication system of claim 1, wherein the time related random code comprises a first time information, wherein the first control unit is further configured to determine whether transmission time of the comparison authentication code expires according to the first time information and receiving time of the comparison authentication code.

5. A wireless authentication method for a protected device with memory, comprising the steps of:

providing an execution end device, which is connected to the protected device for unlocking the protected device, comprising a first wireless module and a first control unit coupled to the first wireless module;

providing a control end device comprising a second wireless module and a second control unit coupled to the second wireless module;

transmitting an activation signal to the first wireless module and the second wireless module;

when the first wireless module receives the activation signal, the first control unit generating a time related random code, and transmitting the time related random code to the second wireless module via the first wireless module;

when the second wireless module receives the activation signal and the time related random code, the second control unit generating a comparison authentication code according to the time related random code, a fixed password and a variable password, and transmitting the comparison authentication code to the first wireless module via the second wireless module;

the first control unit determining whether the comparison authentication code corresponds to a set of data stored in the execution end device;

and when the first control unit determines that the comparison authentication code corresponds to the set of data stored in the execution end device, the first control unit executing a predetermined operation to unlock the protected device, and the variable password being changed;

wherein the set of comprises the time related random code, the fixed password and the variable password stored in the execution end device, wherein the wireless authentication method further comprising;

the first control unit decrypting the comparison authentication code in order to obtain a decrypted time related random code, a decrypted fixed password and a decrypted variable password, wherein when the first control unit determines that the decrypted time related random code, the decrypted fixed password and the decrypted variable password respectively correspond to the time related random code, the fixed password and the variable password stored in the execution end device, the first control unit is arranged for performing the predetermined operation to unlock the protected device.

6. The wireless authentication method of claim 5, wherein the time related random code comprises a first time information, wherein the first control unit is further configured to determine whether transmission time of the comparison authentication code expires according to the first time information and receiving time of the comparison authentication code.

7. The wireless authentication method of claim 5, wherein the variable password is changed by the first control unit or the second control unit, the wireless authentication method further comprises the first control unit transmitting the changed variable password to the second wireless module via the first wireless module, or the second control unit transmitting the changed variable password to the first wireless module via the second wireless module.

8. The wireless authentication method of claim 5, further comprising:

generating at least one backup comparison authentication code;

storing the at least one backup comparison authentication code in a cloud server and the execution end device;

when an electronic device successfully logs in the cloud server, the cloud server transmitting a packet comprising the at least one backup comparison authentication code to the electronic device;

the electronic device transmitting the packet to the execution end device;

the first control unit determining whether the at least one backup comparison authentication code in the packet corresponds to the at least one backup comparison authentication code stored in the execution end device; and

when the first control unit determines that the at least one backup comparison authentication code in the packet corresponds to the at least one backup comparison authentication code stored in the execution end device, the first control unit performing a predetermined operation.

9. The wireless authentication method of claim 8, wherein the packet further comprises an international mobile equipment Identity (IMEI) number of the control end device, the wireless authentication method further comprises the first control unit determining whether the international mobile equipment Identity number in the packet corresponds to a predetermined international mobile equipment Identity number stored in the execution end device.