REMOTE USER AUTHENTICATION USING NFC

• US 20110212707A1
• Filed: 11/04/2009
• Published: 09/01/2011
• Est. Priority Date: 11/04/2008
• Status: Abandoned Application

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Mahalal, Ilan
• Application Number:
  US13/127,283
• Publication Number:
  US 20110212707A1
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

The invention relates to a system (S) comprising a first authenticating entity (MOB_OP_SRV) and a portable communication device (MP) equipped with an NFC antenna (MP_A), and comprising means (SIM) to authenticate the user of the portable communication device (MP) to the first authenticating entity (MOB_OP_SRV), The system (S) further comprises a second authenticating entity (3RD_PTY_SRV), and a portable authentication device (SC) equipped with an NFC antenna (SC_A). The portable authentication device (SC) stores authentication credentials (3RD_PTY_K) for authenticating the user to the second authenticating entity (3RD_PTY_SRV), The portable communication device (MP) comprises means to authenticate the user to the second authenticating entity (3RD_PTY_SRV) by communicating with the portable authentication device (SC) through the NFC antennas (NAP_A; SC_A). The invention also relate to a portable communication device (MP) and to a method for authenticating a user to an authenticating entity (3RD_PTY_SRV).

Claims

1. A system (S) comprising

a first authenticating entity (MOB_OP_SRV), and

a portable communication device (MP) equipped with an NFC antenna (MP_A), and comprising means (SIM) to authenticate the user of the portable communication device (MP) to the first authenticating entity (MOB_OP_SRV),

a second authenticating entity (3RD_PTY_SRV), and

a portable authentication device (SC) equipped with an NFC antenna (SC_A), wherein the portable authentication device (SC) stores authentication credentials (3RD_PTY_K) for authenticating the user to the second authenticating entity (3RD_PTY_SRV), the system (S) being characterized in that the portable communication device (MP) comprises means to authenticate the user to the second authenticating entity (3RD_PTY_SRV) by communicating with the portable authentication device (SC) through the NFC antennas (MP_A, SC_A).

2. The system (S) according to claim 1, wherein the means (SIM) for authenticating the user to the first authenticating entity (MOB_OP_SRV) comprise first authentication credendtials (MOB_OP_K).

3. The system (S) according to claim 2, wherein the first authentication credentials (MOB_OP_K) are stored in a first portable authentication device (SIM) included in the portable communication device (MP).

4. The system (S) according to any previous claim, wherein the first authenticating entity (MOB_OP_SRV) is a server of a mobile network operator managing a mobile network to which the portable communication device (MP) is connectable.

5. The system (S) according to claim 1, 2 or 3, wherein the second authenticating entity (3RD_PTY_SRV) is a server of a third party distinct from the mobile network operators managing the networks to which the portable communication device (MP) is connectable.

6. The system according to claim 1, 2 or 3, wherein the portable communication device (MP) comprises means to power the portable authentication device (SC) through the NFC antennas (MP_A, SC_A).

7. The system according to claim 1, 2 or 3, wherein the portable communication device (MP) comprises means for digitally signing user data, and wherein said means comprise using an asymmetric private key stored in the portable authentication device (SC).

8. A portable communication device (MP) equipped with an NFC antenna (MP_A), and including a means (SIM) to authenticate the user of the portable communication device (MP) to a first authenticating entity (MOB_OP_SRV), comprising means to authenticate the user to a second authenticating entity (3RD_PTY_SRV) by communicating with a portable authentication device (SC) of the user through the NFC antenna (MP_A), wherein the portable authentication device (SC) is equipped with an NFC antenna (SC_A), and stores authentication credentials (3RD_PTY_K) for authenticating the user to the second authenticating entity (3RD_PTY_SRV).

9. A method for authenticating a user to an authenticating entity (3RD_PTY_SRV), wherein the method comprises providing the user with a portable authentication device (SC) equipped with an NFC antenna (SC_A), wherein the portable authentication device (SC) stores authentication credentials (3RD_PTY_K) for authenticating the user to the authenticating entity (3RD_PTY_SRV), wherein, the user having a portable communication device (MP) is equipped with an NFC antenna (MP_A), and the portable communication device (MP) is set to authenticate the user to the authenticating entity (3RD_PTY_SRV) by communicating with the portable authentication device (SC) through the NFC antennas (MP_A, SC_A).

10. The method according to claim 9, wherein the fact that the portable communication device (MP) is the portable communication device of the user is materialized by the fact that the portable communication device (MP) comprises first authentication credentials (MOB_OP_K) for authenticating the user to a first authenticating entity (MOB_OP_SRV).

11. The method according to claim 10, wherein the first authentication credentials (MOB_OP_K) are stored in a first portable authentication device (SIM) included in the portable communication device (MP).

12. The method according to claim 10 or 11, wherein the first authenticating entity (MOB_OP_SRV) is a server of a mobile network operator managing a mobile network to which the portable communication device (MP) is connected.

13. The _method according to claims 9 to 11, wherein the authenticating entity (3RD_PTY_SRV) is a server of a third party distinct from the mobile network operator managing the network to which the portable communication device (MP) is connected.

14. The method according to any of claims 9 to 11, wherein the portable communication device (MP) is set to power the portable authentication device (SC) through the NFC antennas (MP_A, SC_A).

15. The method according to any of claims 9 to 11, wherein the portable communication device (MP) is set to digitally sign user data by using an asymmetric private key stored in the portable authentication device (SC).