Patent ID: 8245040
Filing Date: 2012-08-14
Classification: H04L

Abstract:
1. A secret authentication system comprising: a client and a server authenticating the client, wherein the client comprises: a client authentication data memory that stores client authentication data M indicative of authenticity of the client, a client key data memory that stores client key data S encrypting the client authentication data M stored in the client authentication data memory, a client encrypter performing an operation on the client authentication data M stored in the client authentication data memory and the client key data S stored in the client key data memory so as to output client encrypted data M×S, and a client verification data generator generating client verification data F (S) through an operation converting the client key data S stored in the client key data memory using a one-way function; and a transmitter that transmits the client verification data F (S) and the client encrypted data M×S to the server; and the server comprises: a server authentication data storage that stores server authentication data M′ corresponding to each of the client authentication data M assigned to each client of a number of clients, a sever key data memory that stores server key data S′ corresponding to each of the client key data S assigned to each client of a number of clients, a server verification data generator generating server verification data F (S)′ through an operation converting the server key data S′ stored in the server key data memory using a one-way function identical to that used by the client verification data generator, a server key data checker comparing the server verification data F (S)′ generated by the server verification data generator to the client verification data F (S) received from the client, and verifying whether the client key data S matches the server key data S′, a server inverse operator generating the client authentication data M by multiplying the client encrypted data M×S by an inverse number S′ a server authentication data checker verifying whether the client authentication data M generated by the server inverse operator matches the server authentication data M′ stored in the server authentication data storage.