METHOD FOR AUTHENTICATING A DEVICE

• US 20160182481A1
• Filed: 12/04/2015
• Published: 06/23/2016
• Est. Priority Date: 12/19/2014
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Audsin, Dev Pramil, Ahmad, Zaheer, Qureshi, Mobeen, Wary, Jean-Philippe
• Granted Patent: US 10,476,856 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Present system relates to a method for authenticating a first device, the method being executed by a second device, the second device comprising a database, the database storing a profile associated to a user of the first device, the second device using the profile of the user to generate a first challenge comprising a question and a corresponding response for authentication of the first device, the method comprising, upon successful authentication of the first device using the first challenge, the steps of collecting contextual information from the first device and updating the profile associated to the user of the first device with the received contextual information for a subsequent generation of a second challenge for authentication of the first device.

Claims

1. A method for authenticating a first device, the method being executed by a second device, the second device comprising a database, the database storing a profile associated to a user of the first device, the second device using the profile of the user to generate a first challenge comprising a question and a corresponding response for authentication of the first device, the method comprising, upon successful authentication of the first device using the first challenge, the steps of:

collecting contextual information from the first device,

updating the profile associated to the user of the first device with the received contextual information for a subsequent generation of a second challenge for authentication of the first device.

2. The method according to claim 1, the method comprising a preliminary step of generating a challenge upon reception of a request for authentication.

3. The method according to claim 1, the generating of the challenge comprising a question and a corresponding response being based at least on contextual information received during the previous updating of the profile.

4. The method according to claim 1, the receiving a further message from the first device comprising a preliminary step of requesting contextual information from the first device.

10. The method according to claim 2, the generating of the challenge comprising a question and a corresponding response being based at least on contextual information received during the previous updating of the profile.

11. The method according to claim 2, the receiving a further message from the first device comprising a preliminary step of requesting contextual information from the first device.

12. The method according to claim 3, the receiving a further message from the first device comprising a preliminary step of requesting contextual information from the first device.

5. A server comprising a database, the database storing a profile associated to a user of a first device, the server being adapted for:

using the profile of the user to generate a first challenge comprising a question and a corresponding response for authentication of the first device,

upon authentication of the first device, collecting contextual information from the first device,

updating the profile associated to the user of the first device with the received contextual information for a subsequent generation of a second challenge for authentication of the first device.

6. An application program embodied on a non-transitory computer readable medium and arranged to execute a method for authenticating a first device, the method being executed by a second device, the second device comprising a database, the database storing a profile associated to a user of the first device, the second device using the profile of the user to generate a first challenge comprising a question and a corresponding response for authentication of the first device, the method comprising, upon successful authentication of the first device using the first challenge, the steps of:

collecting contextual information from the first device,

updating the profile associated to the user of the first device with the received contextual information for a subsequent generation of a second challenge for authentication of the first device.

7. The application program according to claim 6, the method further comprising a preliminary step of generating a challenge upon reception of a request for authentication.

8. The application program according to claim 6, the generating of the challenge comprising a question and a corresponding response being based at least on contextual information received during the previous updating of the profile.

9. The application program according to claim 6, the receiving a further message from the first device comprising a preliminary step of requesting contextual information from the first device.