Patent ID: 8656164
Filing Date: 2014-02-18
Classification: H04L

Abstract:
1. An authentication system comprising: a user node adapted to be used by a user; a plurality of service nodes each configured to provide a service corresponding to a domain to which a service node belongs; an authentication database storage unit; an authentication unit; a user information database storage unit; and a key distribution unit, wherein said authentication database storage unit is configured to store an authentication database in which a secret key of said user node is preliminarily registered for each domain, the secret key of said user node being configured to differ according to a domain, said user information database storage unit being configured to store a user information database in which an account used for associating a domain with said user node is registered, said user node being configured to send a domain change request to said key distribution unit via an information communication network in order to request changing from a current domain to which said user node belongs to a desired domain to which said user node intends to belong, said key distribution unit being configured to, upon receiving the domain change request from said user node, check whether or not the user information database stores the account associating the desired domain with said user node, said key distribution unit being configured to, upon acknowledging that the user information database stores the account associating the desired domain with said user node, obtain the secret key of said user node associated with the desired domain by use of the authentication database stored in said authentication database storage unit, and send the obtained secret key to said user node via the information communication network, and said authentication unit being configured to, after said user node obtains the secret key corresponding to the desired domain, create a session key used for encryption communication between said user node and said service node belonging to the desired domain within the desired domain, and encrypt the created session key with the secret key corresponding to the desired domain, and send the encrypted session key to said user node via the information communication network.