Nippon Telegraph and Telephone Corporation

Yoshinao Kikuchi

Yukio Tsuruoka

Kenji Takahashi

Kei Karasawa

Shintaro Mizuno

Tomoo Fukazawa

A secret information serveron a networkand a client apparatusconstitute an authentication information generating system. The secret information serverhas a function to confirm the validity of a user in accordance with user identification information received from the client apparatusand a function to hold the secret information database of each user and to send the secret information database of a user whose validity has been confirmed to the client apparatusof the user. The client apparatushas a main memoryhaving a domain A where an application or a main OS is executed and a domain B which has a program execution environment mutually independent of that for the domain A. The secret information database received from the secret information serveris saved in the domain B, and authentication information is generated by using the secret information database. Secret information required to generate the authentication information for user authentication is held securely at low cost.

Authentication information generating system, authentication information generating method, client apparatus, and authentication information generating program for implementing the method

An address allocated to a user by an authentication server is used as an IP address of a packet which is transmitted from a user terminal, preventing an illicit use if the IP address were eavesdropped. An authentication serverperforms an authentication of a user based on a user authentication information which is transmitted from the user terminal, and upon a successful authentication, allocates an address to the user terminal, and issues a ticket containing the address to be returned to the user terminal. The user terminal sets up the address contained in the ticket as a source address, and transmits the ticket to the application server, requesting a session to be established. After verifying that the ticket is authentic, the serverstores the ticket and establishes a session with the user terminal. The user terminal transmits a service request packet containing the source address to the serverutilizing the session. If the source address coincides with the address contained in the stored ticket, the serverprovides a service to the user.

Growing community of inventors

Tokyo, Japan

Yoshinao Kikuchi