METHOD FOR AUTHENTICATING A USER ACCESSING A REMOTE SERVER FROM A COMPUTER

• US 20100263033A1
• Filed: 08/27/2008
• Published: 10/14/2010
• Est. Priority Date: 10/29/2007
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Rangoni, Gabriel, Sion, Jerome, Lafargue, Edouard
• Granted Patent: US 8,423,782 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

The invention relates to a method for authenticating a user accessing a remote server from a computer. The method comprises connecting to the remote server from the computer; logging into the remote server using a user-specific identifier; authenticating the remote server in the computer; sending an unpredictable message from the remote server to the computer; establishing communication between the remote server and a terminal belonging to the user; authenticating the remote server in the terminal; authenticating the terminal in the remote server; inviting the user to enter the unpredictable message in the terminal; using the terminal to send the message entered by the user in the terminal to the remote server; and if the message entered by the user in the terminal matches the unpredictable message, authenticating the user in the remote server.

Claims

1. A method for authenticating a user accessing a remote server from a computer, said method comprising:

connecting to said remote server from said computer;

logging into said remote server using a user-specific identifier;

authenticating said remote server in said computer;

sending an unpredictable message from said remote server to said computer;

establishing communication between said remote server and a terminal belonging to said user;

authenticating said remote server in said terminal;

authenticating said terminal in said remote server;

inviting said user to enter said unpredictable message in said terminal;

using said terminal to send the message entered by said user in said terminal to said remote server;

if the message entered by said user in said terminal matches said unpredictable message, authenticating said user in said remote server.

2. A method according to claim 1, wherein said authentications are performed via the SSL protocol.

3. A method according to claim 1, wherein said terminal is a mobile terminal including a TCP/IP SIM card.

4. A method according to claim 3, wherein said mobile terminal is a mobile telephone.

5. A method according to claim 3, wherein said mobile terminal is a PDA.

6. A method according to claim 1, wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.

7. A method according to claim 2, wherein said terminal is a mobile terminal including a TCP/IP SIM card.

8. A method according to claim 7, wherein-said mobile terminal is a mobile telephone.

9. A method according to claim 7, wherein said mobile terminal is a PDA.

10. A method according to claim 2, wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.

11. A method according to claim 3, wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.

12. A method according to claim 4, wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.

13. A method according to claim 5, wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.