Patent application EP18167938A (EP), filed 2015-04-23
Publication number: EP3373554A1
Title: AUTHENTICATION IN UBIQUITOUS ENVIRONMENT
Abstract: [0001]    In some embodiments, encrypted biometric data are stored in advance in a device that is possessed or carried by a user based on a public key certificate, and a user authentication (S703) is performed by a biometric matching in the device. A public key certificate matching the encrypted biometric data is used to perform a user authentication (S704,S705,S706,S707) for a transaction authorization in a service providing server. According to some embodiments, one time password, keystroke, dynamic signature, location information, and the like are employed as additional authentication factors to tighten the security of the first and second user authentications. According to some embodiments, an authentication mechanism including the first user authentication and the second user authentication is applied to control an access to the IoT device.
IPC codes: H04L  29/    06            A I
H04W  12/    04            A I
H04W  12/    08            A I
H04L   9/    40            A I
H04W  12/   041            A I
H04W  12/  0433            A I
H04W  12/   069            A I
Claims: number: 1
text: A method of authenticating a user in an authentication management system based on a public key certificate, the method performed by a portable device of the user, the portable device storing a private key in which a verification code including a biometric code is inserted and encrypted biometric data or an encrypted combination of pieces of biometric data from which the biometric code is derived, the method comprising:
number: 2
text: The method according to claim 1, wherein the verification code inserted in the private key further contains at least one of a first additional code derived from unique identity data assigned to the portable device, a second addition code derived from location information indicating a position where the authentication of the user is requested, a third additional code derived from unique identity data assigned to the user, a fourth additional code derived from characteristic information indicating behavior characteristics of the user, or a fifth additional code derived from device identity data assigned to an IoT, Internet of Things, device.
number: 3
text: The method according to claim 1, wherein the authentication information further contains an OTP, One Time Password, generated by an OTP generation module built in the portable device.
number: 4
text: The method according to claim 1, wherein the authentication information further contains time information on a time when the authentication information is transmitted.
number: 5
text: The method according to claim 1, wherein the authentication information further contains location information on a position where the authentication of the user is requested.
number: 6
text: The method according to claim 1, wherein the authentication information further contains time information on a time when the private key is generated.
number: 7
text: The method according to claim 1, wherein the transmitting includes transmitting the public key to the remote entity via a virtual private network.
number: 8
text: The method according to claim 1, wherein a destination URL, Uniform Resource Locator, of the virtual private network is contained in an extension field of the private key.
number: 9
text: The method according to claim 1, wherein the portable device includes a smartcard or a mobile communication terminal.
number: 10
text: A method of managing an authentication of a user in an authentication management system based on a public key certificate, the method performed by a remote entity connected to a portable device of the user via a network, the method comprising:
number: 11
text: A method of managing an authentication of a user in an authentication management system based on a public key certificate, the method performed by a public terminal configured to provide a predetermined service and a service providing server configured to manage the public terminal, the method comprising:
number: 12
text: The method according to claim 11, wherein the performing a registration of the user includes
generating including the service providing server generating a modified public key including a verification code from the public key, the modified public key configured to be used when the public terminal and the service providing server are in an offline state, and
transmitting including the service providing server transmitting the modified public key to the portable device.
number: 13
text: The method according to claim 12, further comprising:
Office action: search_report, dated 2018-09-12
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US6926203B1
ref_type: patent
severity: background
ref_id: US2010185864A1
ref_type: patent
severity: background
ref_id: US2012278614A1
ref_type: patent
severity: background
ref_id: US2014040146A1
ref_type: patent
severity: background
ref_id: US2010185864
ref_type: patent
severity: novelty_destroying
ref_id: US2012278614
ref_type: patent
severity: background
ref_id: US2014040146
ref_type: patent
severity: background
Final disposition: pending (2018-09-12)