TERMINAL FOR STRONG AUTHENTICATION OF A USER

• US 20110040972A1
• Filed: 03/16/2009
• Published: 02/17/2011
• Est. Priority Date: 04/21/2008
• Status: Active Grant

• Current Assignee: Jonathan Jacob Attia
• Original Assignee: Estem Limited
• Inventors: Pinot, Bernard, Attia, Jonathan
• Granted Patent: US 9,094,207 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

The invention relates to a terminal (3) for the strong authentication of a user, comprising:—a reader (31, 34) of a user'"'"'s authentication parameters;—a receiver of a geolocation signal (33);—an interface (37) for communication with another apparatus;—and a processor (38), extracting the date and time of the geolocation signal, generating encrypted data comprising authentication parameters read by the reader and the date and time extracted, and ordering the transmission of said encrypted data by way of the communication interface (37).

Claims

1. Terminal for strong authentication (3) of a user characterized in that it comprises:

a reader (31, 34) of a user'"'"'s authentication parameters;

a receiver of a geolocation signal (33);

an interface for communications (37) with another apparatus;

a processor (38) extracting the date and time of the geolocation signal, generating encrypted data comprising parameters of authentication read by the reader and the extracted date and time, and controlling the transmission of said encrypted data by means of the communications interface (37).

2. Terminal (3) according to claim 1, wherein the processor (38) extracts the position of the terminal from the geolocation signal and includes the extracted position in the encrypted data.

3. Terminal according to claim 1, comprising a non-volatile memory storing a symmetrical encryption key, the processor generating encrypted data by using this symmetrical encryption key.

4. Terminal according to claim 3, comprising:

a storage memory (35) accessible by means of the communications interface (37);

a control interface through which a user can command the end of a session for using the terminal;

the processor (38) commanding the erasure of the storage memory at the end of each session of use.

5. Terminal according to claim 4, storing applications for the interpretation of different types of files stored in the storage memory (35), the processor (38) being capable of executing these operations, capable of generating an image of the contents of an interpreted file and capable of transmitting this image by means of the communications interface.

6. Terminal according to claim 5, wherein the reader of authentication parameters is a fingerprint reader

7. Terminal according to claim 6, wherein the reader of authentication parameters is a retinal print reader

8. Terminal according to claim 7, wherein the reader of authentication parameters is a keyboard, the terminal furthermore comprising a chip card reader.

9. Terminal according to claim 8, wherein the communications interface is a wireless communications interface.

10. Terminal according to claim 9, wherein the receiver is configured to receive a GPS signal.