Patent ID: 6751733
Filing Date: 2004-06-15
Classification: G06F,H04L

Abstract:
A remote authentication system in which an authentication server, an application server, and a user terminal are connected to a network and authenticates a user using the user terminal, wherein the authentication server includes a public key and a secret key each encrypted using a public key encryption method, in which the public key is announced, and the secret key is concealed;wherein at least one biometrics acquisition apparatus is connected to the user terminal; wherein the biometrics acquisition apparatus: encrypts user's biometrics information, acquired at the time of authentication, with a common key in a common key encryption method; acquires date and time information, creates a message digest by connecting the date and time information with the common key, and further encrypts the message digest with the common key; acquires the public key of the authentication server, which the user assigns, and encrypts the common key with the public key of the authentication server; and transfers the encrypted biometrics information, the encrypted common key and date and time information, and the encrypted message digest, as authentication information to the user terminal; wherein the user terminal and the application server transfer the authentication information to the authentication server; and wherein the authentication server: decodes user's biometrics information with the common key acquired by decoding the authentication information, using the secret key; authenticates the user with the biometrics information; creates and encrypts the result of the authentication and a message digest of the result of the authentication; and transfers the result of the authentication and the message digest of the result to the application server.