Authentication server, authentication system, authentication method, and program

• US 9,654,291 B2
• Filed: 07/03/2013
• Issued: 05/16/2017
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: At Communications Company Limited
• Original Assignee: At Communications Company Limited
• Inventors: Toyoizumi, Hiroshi, Azuma, Youichi
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US14/773,718
• Publication Number:
  US 20160036589A1
• Time in Patent Office: 1,413 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

In an authentication system, a mobile communication client transmits to an authentication server a bit signal that includes an image capture bit sequence obtained by capturing an image of a self-aware two-dimensional code having authentication information embedded in a correction area, and a number bit sequence that indicates a serial number of an authentication application program being stored in storage. The authentication server authenticates the user of the mobile communication client and the self-aware two-dimensional code. Subsequently, the authentication server transmits designated information expressed by the self-aware two-dimensional code to the mobile communication client, on the condition that the user and the self-aware two-dimensional code are successfully authenticated. Consequently, the mobile communication client is able to acquire the designated information expressed by the self-aware two-dimensional code.

Claims

1. An authentication server connected via a network to a communication client that generates a bit signal by capturing an image of a two-dimensional code, the two-dimensional code being provided with an information area that expresses designated information with a cell distribution pattern, and a correction area that expresses correction information for correcting errors with a cell distribution pattern, wherein one part of the correction area is substituted with the exclusive OR of a first correction bit sequence generated from the one part, and a second correction bit sequence generated from a part different from the one part of the correction area, the authentication server comprising:

bit signal receiving means that receives the bit signal transmitted from the communication client via the network;

decoding means that decodes the bit signal received by the bit signal receiving means to acquire the designated information and the correction information;

error detecting means that uses the correction information acquired by the decoding means to detect the exclusive OR of the first correction bit sequence and the second correction bit sequence as error;

two-dimensional code authenticating means that authenticates the two-dimensional code by determining whether or not the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting means matches the second correction bit sequence included in the correction information; and

information transmitting means that, when the two-dimensional code authenticating means obtains an authentication result of both matching, transmits the designated information acquired by the decoding means to the communication client via the network.

2. The authentication server according to claim 1, wherein

the bit signal receiving means receives the bit signal of the two-dimensional code having one part of the correction area substituted with the exclusive OR of the first correction bit sequence and an encrypted bit sequence obtained by encrypting the second correction bit sequence, and

the two-dimensional code authenticating means authenticates the two-dimensional code by determining whether or not a decrypted bit sequence, obtained by decrypting the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting means according to a scheme corresponding to the encryption, matches the second correction bit sequence included in the correction information.

3. The authentication server according to claim 2, wherein

the bit signal receiving means receives the bit signal of the two-dimensional code having one part of the correction area substituted with the exclusive OR of the first correction bit sequence and an encrypted bit sequence obtained by encrypting the second correction bit sequence according to an asymmetrical encryption scheme, and

the two-dimensional code authenticating means authenticates the two-dimensional code by determining whether or not a decrypted bit sequence, obtained by decrypting the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting means according to a scheme corresponding to the asymmetrical encryption scheme, matches the second correction bit sequence included in the correction information.

4. The authentication server according to claim 3, wherein

the bit signal receiving means receives the bit signal of the two-dimensional code having one part of the correction area substituted with the exclusive OR of the first correction bit sequence and an encrypted bit sequence obtained by encrypting the second correction bit sequence according to an elliptic curve encryption scheme, and

the two-dimensional code authenticating means authenticates the two-dimensional code by determining whether or not a decrypted bit sequence, obtained by decrypting the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting means according to a scheme corresponding to the elliptic curve encryption scheme, matches the second correction bit sequence included in the correction information.

5. The authentication server according to claim 1, further comprising:

identification information registering means that registers identification information able to specify a user of the communication client; and

user authenticating means that authenticates the user by determining whether or not the identification information registering means has registered a match with the identification information included in the bit signal and transmitted from the communication client;

wherein the information transmitting means transmits the designated information acquired by the decoding means to the communication client via the network when the two-dimensional code authenticating means obtains an authentication result of both matching, and in addition the user authenticating means obtains an authentication result of identification information being registered.

6. An authentication system comprising:

an authentication server connected via a network to a communication client that generates a bit signal by capturing an image of a two-dimensional code, the two-dimensional code being provided with an information area that expresses designated information with a cell distribution pattern, and a correction area that expresses correction information for correcting errors with a cell distribution pattern, wherein one part of the correction area is substituted with the exclusive OR of a first correction bit sequence generated from the one part, and a second correction bit sequence generated from a part different from the one part of the correction area, the authentication server comprising;

bit signal receiving means that receives the bit signal transmitted from the communication client via the network;

decoding means that decodes the bit signal received by the bit signal receiving means to acquire the designated information and the correction information;

error detecting means that uses the correction information acquired by the decoding means to detect the exclusive OR of the first correction bit sequence and the second correction bit sequence as error;

two-dimensional code authenticating means that authenticates the two-dimensional code by determining whether or not the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting means matches the second correction bit sequence included in the correction information; and

information transmitting means that, when the two-dimensional code authenticating means obtains an authentication result of both matching, transmits the designated information acquired by the decoding means to the communication client via the network; and

the communication client connected to the authentication server via the network;

wherein the communication client includes

bit signal generating means that generates the bit signal by capturing an image of the two-dimensional code,

bit signal transmitting means that transmits the bit signal generated by the bit signal generating means to the authentication server via the network, and

information receiving means that, by receiving the designated information transmitted by the information transmitting means, acquires the designated information expressed by the two-dimensional code.

7. An authentication method conducted by an authentication server connected via a network to a communication client that generates a bit signal by capturing an image of a two-dimensional code, the two-dimensional code being provided with an information area that expresses designated information with a cell distribution pattern, and a correction area that expresses correction information for correcting errors with a cell distribution pattern, wherein one part of the correction area is substituted with the exclusive OR of a first correction bit sequence generated from the one part, and a second correction bit sequence generated from a part different from the one part of the correction area, the authentication method comprising:

a bit signal receiving step that receives, in the authentication server, the bit signal transmitted from the communication client via the network;

a decoding step that decodes, via the authentication server, the bit signal received by the bit signal receiving step to acquire the designated information and the correction information;

an error detecting step that uses, via the authentication server, the correction information acquired by the decoding step to detect the exclusive OR of the first correction bit sequence and the second correction bit sequence as error;

a two-dimensional code authenticating step that authenticates, via the authentication server, the two-dimensional code by determining whether or not the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting step matches the second correction bit sequence included in the correction information; and

an information transmitting step that, when the two-dimensional code authenticating step obtains an authentication result of both matching, transmits, from the authentication server, the designated information acquired by the decoding step to the communication client via the network.

8. A system comprising an authentication server and a memory storing instructions, wherein the server is communicatively coupled to the memory and is also connected via a network to a communication client that generates a bit signal by capturing an image of a two-dimensional code, the two-dimensional code being provided with an information area that expresses designated information with a cell distribution pattern, and a correction area that expresses correction information for correcting errors with a cell distribution pattern, wherein one part of the correction area is substituted with the exclusive OR of a first correction bit sequence generated from the one part, and a second correction bit sequence generated from a part different from the one part of the correction area, the instructions, which when executed, cause the authentication server to:

receive the bit signal transmitted from the communication client via the network;

decode the bit signal received by the bit signal receiving procedure to acquire the designated information and the correction information;

use the correction information acquired by the decoding procedure to detect the exclusive OR of the first correction bit sequence and the second correction bit sequence as error;

authenticate the two-dimensional code by determining whether or not the exclusive OR of the first correction bit sequence included in the correction information and the error detected by the error detecting procedure matches the second correction bit sequence included in the correction information; and

after obtaining an authentication result of both matching, transmit the designated information acquired by the decoding procedure to the communication client via the network.