Authentication device, system and method

Patent metadata

Field	Value
Publication number	US-9386017-B2
Application number	US-201414270495-A
Country	US
Kind code	B2
Filing date	May 6, 2014
Priority date	May 23, 2013
Publication date	Jul 5, 2016
Grant date	Jul 5, 2016

Abstract

An authentication device includes: a memory; and a processor coupled to the memory and configured to: when a registration request including authentication information to be used during authentication is received from a terminal device, generate registration information using the authentication information and key information and store the registration information in the memory, and when an authentication request including input information to be handled as the target of the authentication is received from the terminal device, generate a result of the authentication based on the input information, the registration information, and the key information, and transmit the result of the authentication to the terminal device.

First claim

What is claimed is:

1. An authentication device comprising:
a memory; and
a hardware processor coupled to the memory and configured to:
when a registration request including authentication information to be used during authentication is received from a terminal device, generate registration information using the authentication information and key information and store the registration information into the memory, and
when an authentication request including input information to be handled as a target of the authentication is received from the terminal device, compare the registration information with the input information, generate an authentication result by applying the key information to a comparison result between the registration information and the input information, and transmit the authentication result to the terminal device,
wherein the registration information is generated by encrypting the authentication information with the key information,
wherein the encrypting is performed using a computation method in which the encrypting is reset by performing the further encrypting two times with the same key information,
wherein the registration information is a result of an exclusive OR of the authentication information and the key information,
wherein the comparison result is a result of an exclusive OR of the input information and the registration information, and
wherein the authentication result is a result of an exclusive OR of the comparison result and the key information.

2. The authentication device according to claim 1 , wherein the authentication information, input information, and the key information are binary data.

3. An authentication system comprising:
a determination device including a first memory and a first processor configured to:
when a registration request including authentication information to be used during authentication is received from a terminal device, generate registration information using the authentication information and key information and transmits the registration information, and
when a comparison result between the registration information and input information to be handled as a target of the authentication is received, generate an authentication result by applying the key information to the comparison result, and transmit the authentication result to the terminal device; and
a management device including a second memory and a second processor configured to:
when the registration information is received from the determination device, store the registration information into the second memory, and
when an authentication request including the input information is received from the terminal device, compute the comparison result between the input information and the registration information and transmit the comparison result to the determination device,
wherein the registration information is generated by encrypting the authentication information with the key information,
wherein the encrypting is performed using a computation method in which the encrypting is reset by performing the further encrypting two times with the same key information,
wherein the registration information is a result of an exclusive OR of the authentication information and the key information,
wherein the comparison result is a result of an exclusive OR of the input information and the registration information, and
wherein the authentication result is a result of an exclusive OR of the comparison result and the key information.

4. An authentication method, comprising:
receiving, by a hardware processor, a registration request including authentication information to be used during authentication from the terminal device;
generating by the hardware processor, registration information using the authentication information and key information;
storing the registration information into a memory;
receiving, by the hardware processor, an authentication request including input information to be handled as a target of the authentication from the terminal device;
comparing, by the hardware processor, the registration information with the input information;
generating, by the hardware processor, an authentication result by applying the key information to a comparison result between the registration information and the input information; and
transmitting, by the hardware processor, the result of the authentication to the terminal device,
wherein the registration information is generated by encrypting the authentication information with the key information, and
wherein the encrypting is performed using a computation method in which the encrypting is reset by performing the further encrypting two times with the same key information,
wherein the registration information is a result of an exclusive OR of the authentication information and the key information,
wherein the comparison result is a result of an exclusive OR of the input information and the registration information, and
wherein the authentication result is a result of an exclusive OR of the comparison result and the key information.

5. The authentication method according to claim 4 , wherein the authentication information, input information, and the key information are binary data.

Assignees

• Fujitsu Ltd

Inventors

• Sakemi Yumi
• Izu Tetsuya
• Takenaka Masahiko
• Yasuda Masaya

Classifications

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title