METHOD AND APPARATUS FOR TRANSFERRING DATA

• US 20120227096A1
• Filed: 02/28/2012
• Published: 09/06/2012
• Est. Priority Date: 03/04/2011
• Status: Abandoned Application

• Current Assignee: Intercede Limited
• Original Assignee: Intercede Limited
• Inventors: Edwards, Christopher Paul
• Application Number:
  US13/407,057
• Publication Number:
  US 20120227096A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067

Abstract

A method and apparatus for transferring data to a mobile device is described. Authentication information associated with a user is received and used to authenticate the user. A one-time-use password is determined and an identity of a mobile device and/or a mobile device operator is verified. Encrypted data is transmitted to the mobile device, where the encryption is based, at least in part, on the one-time-use password. On receipt of the password at the mobile device, the data may be decrypted for use by the mobile device.

Claims

1. A method of transferring data to a mobile device, comprising:

receiving authentication information associated with a user and authenticating the user based on the authentication information;

determining a one-time use password;

verifying an identity of a mobile device and/or a mobile device operator; and

transmitting encrypted data from a server computer to the mobile device, the encryption based, at least in part, on the password.

2. The method of claim 1, wherein the authentication information is received from a client computer.

3. The method of claim 1, comprising receiving the password at the server computer.

4. The method of claim 1, wherein the identity of the mobile device is verified by sending a message to the mobile device.

5. The method of claim 4, wherein the message comprises a reference value and the method comprises receiving a response message from the mobile device based at least partly on the response value.

6. The method of claim 1, wherein the data is security data.

7. The method of claim 1, further comprising:

receiving, at the mobile device, the password and decrypting the data for use by the mobile device.

8. A system for sending data to a mobile device, the system comprising a server and wherein the server is arranged to:

receive authentication data associated with a user and to authenticate the user based on the authentication data;

determine a one-time-use password;

verify an identity of a mobile device and/or mobile device operator;

transmit encrypted data to the mobile device, the data being encrypted based, at least in part, on the password.

9. The system of claim 8, wherein the authentication information is at least partly received from a user.

10. The system of claim 9, wherein the authentication information is received from a client computer.

11. The system of claim 8, wherein the server is further arranged to output the one time use password to a user.

12. The system of claim 11, wherein the server is arranged to output the password on a display device or to communicate the password to another device for outputting the password to the user.

13. The system of claim 8, wherein the server is arranged to verify the identity of the mobile device by sending a message to the mobile device.

14. The system of claim 13, wherein the server is arranged to generate a reference value and to include the reference value in the message.

15. The system of claim 8, wherein the server is arranged to encrypt the data based, at least in part, on the password.

16. The system of claim 8, wherein the data is security data.

17. The system of claim 16, wherein the server is arranged to obtain the security data based on a user profile associated with the user.

18. The system of claim 16, wherein the security data comprises one or more keys and/or certificates.

19. The system of claim 8, further comprising a mobile device.

20. One or more tangible device-readable media with device-executable instructions that, when executed by a computing system, direct the computing system to perform steps comprising

receiving authentication information associated with a user and authenticating the user based on the authentication information;

determining a one-time use password;

verifying an identity of a mobile device and/or a mobile device operator; and

transmitting encrypted data to the mobile device, the encryption based, at least in part, on the password.