Radio communication device and user authentication method for use therewith

• US 20010036273A1
• Filed: 03/01/2001
• Published: 11/01/2001
• Est. Priority Date: 04/28/2000
• Status: Active Grant

• Current Assignee: 2BCom LLC (Markman Advisors LLC)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Yoshizawa, Junichi
• Granted Patent: US 6,928,166 B2
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

To allow flexible security level switching according communication situations, a password holding section holds a plurality of device authentication passwords, for example, a temporary password and a private password. The temporary password is valid only under a certain situation and the private password has a high level of confidentiality to increase the device security. A password management section allows the user to add a new password to the password holding section and delete an existing password therefrom. A password selecting section selects the most suitable password for current connection from among passwords in the password holding section according to a user event, information acquired by an external factor acquisition section, and information from a time control section. The selected password is output to a password checking section.

Claims

1. An authentication processing apparatus of a radio communication which authenticates a device, the apparatus comprising:

means for selecting a security level from a plurality of security levels in accordance with a condition of the radio communication;

means for receiving a request for an authentication and authentication information from the device;

means for checking whether the received information from the device is valid or not depending on the selected security level; and

means for sending a response of the check result which authenticates or rejects the device thereto.

2. An authentication processing apparatus according to

claim 1

, wherein said authentication information includes a PIN(Personal Identification Number) code.

3. An authentication processing apparatus according to

claim 2

, further comprising mean for storing a link-key comprising said PIN code and an unique ID of said device.

4. An authentication processing apparatus according to

claim 1

, further comprising means for acquiring an external factor which is associated with said security level.

5. An authentication processing apparatus according to

claim 1

, further comprising means for detecting a connection-break from the device and changing over said security level in response to the connection-break.

6. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

password selecting means for selecting an appropriate password from the password holding means according to a current communication condition; and

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device.

7. The radio communication device according to

claim 6

, wherein said password selecting means selects a password according to information from a password file.

8. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

password management means for entering a new password into the password holding means and deleting an existing password in the password holding means;

password selecting means for selecting an appropriate password from the password holding means according to current communication situations; and

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device.

9. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

password selecting means for selecting an appropriate password from the password holding means according to current communication situations;

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device; and

connection break detecting means for detecting radio communication conditions and, upon detecting a connection break as a result of the device having moved to the outside of a communication service area, notifying the password selecting means of the connection break,

the password selecting means usually choosing the second password as an authentication password, using the first password at the time of occurrence of a request by a user at another device as the authentication password, and reusing the second password after the connection set up by the authentication procedure using the first password has been broken.

10. The radio communication device according to

claim 9

, wherein the connection break detecting means includes means for setting parameters containing timer values and receiving sensitivity for recognizing the connection break.

11. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

external factor acquisition means;

password selecting means for selecting an authentication password from the password holding means on the basis of information acquired by the external factor acquisition means; and

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device.

12. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

password selecting means for selecting an appropriate password from the password holding means according to current communication situations;

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device; and

time control means for counting time to provide management information on a set time to the password selecting means,

the password selecting means usually choosing the second password as an authentication password, using the first password at the time of occurrence of a request by a user at another device as the authentication password, and setting the second password as the authentication password at the expiration of the time set by the time management means.

13. A radio communication device having a password unique to it and adapted for authenticating another device by use of the password, comprising:

password holding means for holding at least a first password intended for temporary use and a second password intended for regular use;

password selecting means for selecting an appropriate password from the password holding means according to current communication situations; and

password checking means for checking a password sent from another device with the password selected by the password selecting means to thereby authenticate the another device,

each of devices as slave stations recognizing information unique to a device as a master station, selecting one of the first and second passwords in a state where it can communicate with the master station, and selecting the other password in a state where it cannot communicate with the master station.

14. An authentication processing method of a radio communication which authenticates a device, the method comprising the steps of:

selecting a security level from a plurality of security levels in accordance with a condition of the radio communication;

receiving a request for an authentication from the device;

receiving authentication information from the device;

checking whether the received information from the device is valid or not depending on the selected security level; and

sending a response of the check result which authenticates or rejects the device thereto.

15. An authentication processing method according to

claim 14

, wherein said authentication information includes a PIN(Personal Identification Number) code.

16. An authentication processing method according to

claim 15

, further comprising the step of storing a link-key comprising said PIN code and an unique ID of said device.

17. An authentication processing method according to

claim 14

, further comprising the step of acquiring an external factor which is associated with said security level.

18. A radio communication method communicating with a device, the method comprising the steps of:

storing a first password intended for temporary use and a second password intended for regular use;

selecting the first password depending on a variable security level;

receiving a request for a connection from the device;

receiving a password for an authentication from the device;

checking whether the received password from the device and the selected first password correspond or not;

sending a response of the check result which authenticates or rejects the device thereto;

performing a low-security-level communication with the authenticated device based on the connection; and

changing over, when the communication is terminated, said security level to higher one than that of said first password and selecting said second password.

19. A radio communication method according to

claim 18

, wherein said second password includes a PIN (Personal Identification Number) code.

20. A radio communication method according to

claim 19

, further comprising the step of storing a link-key comprising said PIN code and an unique ID of said device.

21. A radio communication method according to

claim 18

, further comprising the step of acquiring an external factor which is associated with said security level.