A METHOD OF AUTHENTICATING A USER OF A TERMINAL WITH A SERVICE PROVIDER

• US 20130263286A1
• Filed: 12/09/2011
• Published: 10/03/2013
• Est. Priority Date: 12/16/2010
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Le Rouzic, Jean-Pierre, Aillery, Nicolas, Bailleux, Benoit
• Granted Patent: US 10,275,580 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18

Abstract

A method of authenticating a user of a terminal referred of as a first terminal, and suitable for communicating with a service provider via a first communications network, the provider requesting an authentication of the user of the first terminal before providing a service to the first terminal, wherein the authentication of the user is based on user authentication performed with regard to a second terminal.

Claims

1. A method of authenticating a user of a terminal referred of as a first terminal, and suitable for communicating with a service provider via a first communications network, the method comprising the steps of the service provider requesting an authentication of the user of the first terminal before providing a service to the first terminal, and the authentication of the user is based on user authentication performed with regard to a second terminal.

2. The authentication method according to claim 1, wherein the first and second terminals are suitable for communicating via the first communications network, said second terminal being suitable for receiving data from the first terminal via a short-range second communications network, and the method comprises the following steps:

the second terminal receiving a request to deliver authentication data from the first terminal via the second network; and

transmitting authentication data from the second terminal via the first network.

3. The authentication method according to claim 2, wherein the request for authentication data issued by the first terminal includes a destination address on the first network to which the authentication data is to be sent.

4. The authentication method according to claim 2, wherein the step of requesting the delivery of authentication data is performed in a request step by the first terminal requesting a transaction identifier from an entity suitable for delivering transaction identifiers, and the data subsequently transmitted includes the transaction identifier.

5. The authentication method according to claim 4, wherein the first terminal is fitted with a signal emitter suitable for conveying data, and the second terminal receives the signals emitted by the emitter and from said emitted data, it extracts data indicating the destination to which the authentication data is to be sent.

6. The authentication method according to claim 5, wherein the signal is a graphic displayed on a screen and the second terminal includes a camera device for capturing the graphic.

7. A terminal suitable for using a service made available by a service provider after authentication, said terminal adapted for receiving a service via a communications network, and comprising means for requesting an authentication based on user authentication performed with regard to another terminal.

8. The terminal according to claim 7, the terminal adapted for communicating with said other terminal via the first network, the terminal also being suitable for transmitting data to said other terminal via a second network, the terminal comprising:

means for requesting authentication data to be provided to another terminal via the second network; and

means for receiving a service via the first network, which service is based on the requested authentication data.

9. The terminal according to claim 8, further comprising means for incorporating a destination address in the request for authentication data, which destination address is on the first network and is to have the authentication data sent thereto.

10. The terminal according to claim 9, further comprising:

means for requesting a transaction identifier from an entity suitable for delivering transaction identifiers; and

means for including said transaction identifier in the request to provide authentication data.

12. The terminal according to claim 9, said terminal adapted for communicating via at least one communications network and for receiving data from another terminal via a second network, the terminal comprising:

means for receiving a request to provide authentication data coming from another terminal over the second network; and

means for transmitting said authentication data via the first network in order to be used for authenticating the other terminal.

13. The terminal according to claim 12, further comprising means for extracting a destination address on the first network from said request to provide authentication data, and means for sending said authentication data to said destination address.

14. The terminal according to claim 13, further comprising means for extracting a transaction identifier from said request to provide authentication data and means for sending said transaction identifier over the first network.

15. A non-transitory computer program product for being performed on a terminal as defined in claim 7, the program comprising code instructions that, when the program is executed by a processor, perform an authentication step based on means for requesting an authentication based on user authentication performed with regard to another terminal.

11. A terminal suitable for communicating via at least one communications network and for receiving data via a second network, said terminal comprising:

means for requesting authentication of a user of the terminal; and

means for sending the resulting authentication data to another terminal for authentication purposes.

16. A non-transitory computer program product for being performed on a terminal as defined in claim 11, the program comprising code instructions that, when the program is executed by a processor, perform a step of authenticating a user of the terminal, and a step of sending the resulting authentication data to another terminal for authentication purposes.