METHOD OF AND SYSTEM FOR GAINING SECURE ACCESS TO A SERVICE

• US 20140041003A1
• Filed: 07/19/2013
• Published: 02/06/2014
• Est. Priority Date: 08/01/2012
• Status: Abandoned Application

• Current Assignee: Secunet Security Networks Aktiengesellschaft (Giesecke & Devrient GmbH)
• Original Assignee: Secunet Security Networks Aktiengesellschaft (Giesecke & Devrient GmbH)
• Inventors: WAPPENSCHMIDT, Armin
• Application Number:
  US13/946,352
• Publication Number:
  US 20140041003A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

In order to gain secure access to a service in a defined trustworthy environment holding at least one network component a password is saved in the network component. Then a user device is introduced into the trustworthy environment, and it contacts the network component device and retrieves the password saved in the network component. The device then communicates the password to the service, which in turn is enabled for the user device if a password stored in the service matches the password that has been communicated by the user device to the service.

Claims

1. A method of gaining secure access to a service in a defined trustworthy environment holding at least one network component, the method comprising the steps of:

saving a password in the network component;

introducing a user device into the trustworthy environment;

contacting the network component with the user device and retrieving the password saved in the network component;

communicating the password from the user device to the service; and

enabling the service for the user device if a password stored in the service matches the password that has been communicated by the user device to the service.

2. The method defined in claim 1, wherein

the trustworthy environment is defined based on a reference data set, and

the reference data set contains at least one data set from the group consisting of position data, LAN data, Bluetooth data, network addresses, GSM wireless data, meteorological data.

3. The method defined in claim 2, further comprising the step of:

comparing the reference data set defining the trustworthy environment with integration data supplied by the network component in order to locate the network component in the trustworthy environment, and

considering the network component to belong to the trustworthy environment only if a specified maximum deviation between the reference data set and the integration data falls below a predetermined value.

4. The method defined in claim 2, further comprising the steps of:

comparing the reference data set defining the trustworthy environment with entry data from the user device in order to introduce the user device into the trustworthy environment; and

considering the user device to belong exclusively to the trustworthy environment only if a specified maximum deviation between the reference data set and the entry data falls below a predetermined value.

5. The method defined in claim 1, further comprising the step of:

the network component refusing to allow the user device to retrieve the password stored in the network component if the user device is located outside the trustworthy environment.

6. The method defined in claim 1, further comprising the step of:

the network component refusing to allow the user device to retrieve the password stored in the network component if the network component is located outside the trustworthy environment.

7. The method defined in claim 1, wherein at least two and preferably a plurality of network components is/are in the trustworthy environment, the method further comprising the step of:

storing respective parts of the password in each of the at least two network components of the trustworthy environment.

8. The method defined in claim 7, further comprising the step of:

the user device retrieving the respective parts of the password from the network components in which the parts of the password are stored.

9. The method defined in claim 8, further comprising the steps of:

combining the parts of the password retrieved by the user device to form the password in the user device.

10. A system for controlling access to a service in a defined trustworthy environment holding at least one network component, system comprising:

at least one network component in the defined trustworthy environment holding a password;

a user device that can be introduced into or integrated into the trustworthy environment;

means for communicating between the user device integrated into the trustworthy environment and the network to component;

means in the user device for retrieving the password in the network component and for communicating the password to the service; and

means in the service for enabled use by the user device if a password stored in the service matches the password that has been communicated by the user device.

11. The system defined in claim 10, wherein the trustworthy environment is preferably a private network.

12. The system defined in one of claims 10, wherein the network component is a passive network component.

13. The system defined in one of claims 10, wherein the network component is an active network component.

14. The system defined in claim 10, wherein the user device is a network-capable device.

15. The system defined in claim 10, wherein the password contains an address of a network component that is in the trustworthy environment.