초록 ▼

A console-based multi-user authentication process allows multiple users of a game console to be authenticated together in a single request/reply exchange with an authentication entity. The results of which is the possession of a single ticket that can be used to prove authenticity of multiple authen

A console-based multi-user authentication process allows multiple users of a game console to be authenticated together in a single request/reply exchange with an authentication entity. The results of which is the possession of a single ticket that can be used to prove authenticity of multiple authentication principals to one or more online services. Also described is a handshake process that can be used to initially establish an authentication account for each game console, in which the account creation server can trust that a genuine game console is making the request.

대표청구항 ▼

The invention claimed is: 1. A computer-readable storage medium comprising computer-executable instructions that, when executed, perform operations comprising: receive a request from a game console, the request containing an identity string that includes a game console identity X, a game title iden

The invention claimed is: 1. A computer-readable storage medium comprising computer-executable instructions that, when executed, perform operations comprising: receive a request from a game console, the request containing an identity string that includes a game console identity X, a game title identity G, multiple user identities (U1, H1), . . . , (UU, HU), wherein the multiple user identities are U1, U2, . . . UU and associated values are H1, H2, . . . , HU derived from the user's key and an identity A of an online service, as follows: Request =[X, G, A, (U1, H1), . . . , (UU, HU)]; and submit the request to a ticket issuing entity over a network; generate a ticket containing the identity string and a session key KXA together encrypted with a key KA associated with the online service, as follows: TicketA =EKA[KXA, X, G, A, U1, U2, . . . UU]; and return the ticket to the game console, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request. 2. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to generate the request to further include at least one of a time that the ticket is generated and a time length before expiration of the ticket. 3. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to encrypt the session key KXA with a key associated with the game console and send the encrypted session key to the game console. 4. A method comprising computer-executable stored instructions executed on a central processing unit of a game console, the method comprising:: receive a request from a game console, the request containing an identity string that includes a game console identity X, a game title identity G, multiple user identities (U1, H1), . . . , (UU, HU), wherein the multiple user identities are U1, U2, . . . UU and associated values are H1, H2, . . . , HU derived from the user's key and an identity A of an online service, as follows: Request =[X, G, A, (U1, H1), . . . , (UU, HU)]; and submit the request to a ticket issuing entity over a network; generate a ticket containing the identity string and a session key KXA together encrypted with a key KA associated with the online service, as follows: TicketA =EKA[KXA, X, G, A, U1,U2,. . . UU]; and return the ticket to the game console, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request. 5. The method as recited in claim 4, further comprising computer-executable instructions that, when executed, direct the game console to generate the request to further include at least one of a time that the ticket is generated and a time length before expiration of the ticket. 6. The method as recited in claim 4, further comprising computer-executable instructions that, when executed, direct the game console to encrypt the session key KXA with a key associated with the game console and send the encrypted session key to the game console. 7. A system comprising: a memory; a processor coupled to the memory to perform the functions to: receive a request from a game console, the request containing an identity string that includes a game console identity X, a game title identity G, multiple user identities (U1, H1), . . . , (UU, HU), wherein the multiple user identities are U1, U2, . . . UU and associated values are H1, H2, . . . , HU derived from the user's key and an identity A of an online service, as follows: Request =[X, G, A, (U1, H1), . . . , (UU, HU)]; and submit the request to a ticket issuing entity over a network; generate a ticket containing the identity string and a session key KXA together encrypted with a key KA associated with the online service, as follows: TicketA =EKA[KXA, X, G, A, U1,U2, . . . UU]; and return the ticket to the game console, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request. 8. The system as recited in claim 7, further comprising to direct the game console to generate the request to further include at least one of a time that the ticket is generated and a time length before expiration of the ticket. 9. The system as recited in claim 7, further comprising to direct the game console to encrypt the session key KXA with a key associated with the game console and send the encrypted session key to the game console.