COMMUNICATION APPARATUS, SERVER APPARATUS, RELAY APPARATUS, CONTROL APPARATUS, AND COMPUTER PROGRAM PRODUCT

• US 20130205378A1
• Filed: 12/19/2012
• Published: 08/08/2013
• Est. Priority Date: 02/03/2012
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Oba, Yoshihiro, Terashimai, Yoshiki
• Application Number:
  US13/719,914
• Publication Number:
  US 20130205378A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication

Abstract

According to an embodiment, a communication apparatus is connected to a server apparatus that issues first authentication information used in communication. The communication apparatus includes a receiving unit configured to receive an execution instruction to execute a bootstrap authentication process of issuing the first authentication information. The bootstrap authentication process includes validation of capability information indicating a capability of the communication apparatus. The communication apparatus also includes a first authentication processing unit configured to execute the bootstrap authentication process with the server apparatus based on second authentication information including the capability information, when the receiving unit receives the execution instruction.

Claims

1. A communication apparatus connected to a server apparatus that issues first authentication information used in communication, comprising:

a receiving unit configured to receive an execution instruction to execute a bootstrap authentication process of issuing the first authentication information, the bootstrap authentication process including validation of capability information indicating a capability of the communication apparatus; and

a first authentication processing unit configured to execute the bootstrap authentication process with the server apparatus based on second authentication information including the capability information when the receiving unit receives the execution instruction.

2. The communication apparatus according to claim 1, wherein

the first authentication processing unit receives the first authentication information from the server apparatus when the bootstrap authentication process for the communication apparatus results in success, and

the communication apparatus further comprises a second authentication processing unit configured to execute a communication authentication process of communicating with an external apparatus with the external apparatus based on the received first authentication information.

3. The communication apparatus according to claim 1, wherein the second authentication information includes authentication information for identify-based encryption (IBE).

4. The communication apparatus according to claim 3, wherein the second authentication information includes the capability information in an ID of the IBE.

5. The communication apparatus according to claim 3, wherein the second authentication information includes a valid period in an ID of the IBE.

6. The communication apparatus according to claim 1, wherein the first authentication processing unit executes the bootstrap authentication process in conformity with one of IBE-based mutual authentication (IMA) protocol, extensible authentication protocol-IMA (EAP-IMA), and a protocol for carrying authentication for network access (PANA).

7. The communication apparatus according to claim 1, wherein the second authentication information includes a symmetric key or a digital certificate.

8. A server apparatus connected to a communication apparatus, comprising:

a receiving unit configured to receive an execution instruction to execute a bootstrap authentication process of issuing first authentication information used in communication by the communication apparatus, the bootstrap authentication process including validation of capability information indicating a capability of the communication apparatus; and

an authentication processing unit configured to execute the bootstrap authentication process with the communication apparatus based on second authentication information acquired from the communication apparatus when the receiving unit receives the execution instruction, the second authentication information including the capability information.

9. The server apparatus according to claim 8, wherein the authentication processing unit transmits the first authentication information to the communication apparatus when the bootstrap authentication process for the communication apparatus in the authentication processing unit results in success.

10. A relay apparatus connected to an electronic apparatus and a server apparatus that issues first authentication information used in communication, comprising:

a receiving unit configured to receive an execution instruction to execute a bootstrap authentication process of issuing the first authentication information, the bootstrap authentication process being executed between the server apparatus and an electronic apparatus and including validation of capability information indicating a capability of the electronic apparatus; and

a relay unit configured to relay the bootstrap authentication process executed between the server apparatus and the electronic apparatus based on second authentication information including the capability information when the receiving unit receives the execution instruction.

11. The relay apparatus according to claim 10, wherein

the receiving unit further receives an execution instruction to execute a bootstrap authentication process of issuing third authentication information used in communication between the relay apparatus and the server apparatus, and

the relay apparatus further comprises:

an authentication processing unit configured to execute the bootstrap authentication process of issuing the third authentication information with the server apparatus based on fourth authentication information when the receiving unit receives the execution instruction of the bootstrap authentication process of issuing the third authentication information; and

a transmitting unit configured to transmit an execution instruction to execute the bootstrap authentication process of issuing the first authentication information to the server apparatus by the communication established based on the third authentication information.

12. A control apparatus connected to a communication apparatus, comprising:

an authentication processing unit configured to execute a communication authentication process including validation of capability information with the communication apparatus based on authentication information including the capability information indicating a capability of the communication apparatus.

13. A computer program product comprising a computer-readable medium containing a program executed by a processor of a communication apparatus connected to a server apparatus that issues first authentication information used in communication, the program causing the computer to execute:

receiving an execution instruction to execute a bootstrap authentication process of issuing the first authentication information, the bootstrap authentication process including validation of capability information indicating a capability of the communication apparatus; and

executing the bootstrap authentication process with the server apparatus based on second authentication information including the capability information when the receiving the execution instruction.

14. A computer program product comprising a computer-readable medium containing a program executed by a processor of a server apparatus connected to a communication apparatus, the program causing the computer to execute:

receiving an execution instruction to execute a bootstrap authentication process of issuing first authentication information used in communication by the communication apparatus, the bootstrap authentication process including validation of capability information indicating a capability of the communication apparatus; and

executing the bootstrap authentication process with the communication apparatus based on second authentication information acquired from the communication apparatus when receiving the execution instruction, the second authentication information including the capability information.

15. A computer program product comprising a computer-readable medium containing a program executed by a processor of a relay apparatus connected to an electronic apparatus and a server apparatus that issues first authentication information used in communication, the program causing the computer to execute:

receiving an execution instruction to execute a bootstrap authentication process of issuing the first authentication information, the bootstrap authentication process being executed between the server apparatus and the electronic apparatus and including validation of capability information indicating a capability of the electronic apparatus; and

relaying the bootstrap authentication process executed between the server apparatus and the electronic apparatus based on second authentication information including the capability information when receiving the execution instruction.

16. A computer program product comprising a computer-readable medium containing a program executed by a processor of a control apparatus connected to a communication apparatus, the program causing the computer to execute:

a communication authentication process including validation of capability information with the communication apparatus based on authentication information including the capability information indicating a capability of the communication apparatus.