Patent ID: 6615353
Filing Date: 2003-09-02
Classification: G06F,H04L

Abstract:
An authentication method using a one time authentication code, and comprising the steps of:in advance of a current authentication request, writing in a reusable particular storage means disposed in an operating section, authentication purpose information comprising: a changeable user identification parameter, an unchangeable unique parameter assigned to said particular storage means, and a changeable access parameter which includes date and time and sequence number of a prior authentication request using said particular storage means, so that no separate input mechanism is required to supply input data for personal identification at time of an authentication request, wherein said particular storage means is interchangeable with a plurality of similar storage means with each storage means having an unchangeable unique different parameter assigned thereto and also having stored therein other parameters similar to those stored in said particular storage means, and with the same one of said changeable user identification parameter being written into one or more of said plurality of storage means; storing in a control section authentication purpose information comprising said changeable user indentification parameter, said unchangeable unique parameter assigned to said particular storage means; and said changeable access parameter including date and time and sequence number of said prior authentication request; requesting current authentication without use of an input mechanism to input data for personal identification at time of requesting authentication by reading said authentication purpose information from said particular storage means; creating a one time current authentication code from said authentication purpose information read from said particular storage means, said authentication purpose information comprising said changeable user indentification parameter, said unchangeable unique parameter assigned to said particular storage means, and said changeable access parameter including date and time and sequence number of a prior authentication request, and using a first specific function based on priorly stored information; sending said one time current authentication code and said user identification parameter from said operating section to said control section; creating in said control section a current checking code from said one time current authentication code and said user identification parameter sent from said operating section and using a second special function based on priorly stored information including date and time and sequence number of a prior authentication request from the same particular storage means and corresponding to said user identification parameter; updating said access parameter with respect to date and time and sequence number of said current authentication request for the corresponding unchangeable unique parameter assigned to said particular storage means and corresponding to said user identification parameter; storing in said control section said updated access parameter; comparing said one time current authentication code and said current checking code for authentication; sending results of authentication back to said operating section; and providing said particular storage means with an updated access parameter identifying the updated date and time and sequence number of the current authentication request, whereby security is maintained keeping the unique parameter assigned to a particular storage means in a form which cannot be accessed by any outside means.