Method for obtaining at least one item of user authentication data

• US 6,112,078 A
• Filed: 02/20/1997
• Issued: 08/29/2000
• Est. Priority Date: 02/23/1996
• Status: Expired due to Term

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Mobile Phones UK Limited (Nokia Corporation)
• Inventors: Kurki, Teemu, Sormunen, Toni
• Primary Examiner(s): Hunter, Daniel S.
• Assistant Examiner(s): Gantt, Alan T.
• Application Number:
  US08/803,418
• Time in Patent Office: 1,286 Days
• Field of Search: 455/411, 455/466, 455/426, 380/25
• US Class Current: 455/411
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/3558 Preliminary personalisation for transfer to user
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 17/16 for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A method for obtaining at least one item of user specific data, wherein the user specific data is obtained at least partly by using paging or a short message service.

Claims

1. A method for obtaining at least one item of user specific authentication data, wherein the user specific authentication data is used for forming a connection to an information service having a service provider, which method comprises the steps of:

sending a request for transmission of new user specific authentication data from the user to the information service provider to enable the user to initially form a connection to the information service,

processing the request at the service provider to form the new user specific authentication data in accordance with information in the request,

sending a reply message including the new user specific authentication data to the user, and

receiving the reply message with the user specific authentication data at the user,

and wherein the user specific authentication data is obtained at least partly by using paging or a short message service, and further comprising the steps of;

including address information in the request for transmission of the user specific authentication data in accordance with which the reply message is to be sent, and

verifying the address information in the reply message before sending the user specific authentication data to the user.

2. The method according to claim 1, wherein the user specific authentication data is sent as a short message which is received by a paging terminal of the user.

3. The method according to claim 2, wherein the request for transmitting the user specific authentication data is sent as a short message.

4. The method according to claim 2, wherein the request for transmitting the user specific authentication data is sent by a method known as such.

5. The method according to claim 4, wherein the request for transmitting the user specific authentication data is made by making a telephone call to the telephone exchange of the information service provider, and making the request by dictating or by voice-frequency signals formed by touching the telephone keys.

6. The method according to claim 1, wherein the user specific authentication data is used in forming a connection to the information service, and which method further comprises:

sending a subscription request from the user to the information service provider, wherein the subscription request comprises one or more items of user specific authentication data, and

receiving the subscription data sent by the information service provider, and

wherein the user specific authentication data is sent to the information service provider as a short message.

7. The method according to claim 6, wherein a short message is sent by the paging terminal of the user.

8. The method according to claim 1, wherein the user specific authentication data is used in forming a connection to an information service, and which method further comprises:

sending a subscription request from the user to the information service provider, wherein the subscription request comprises one or more items of user specific data, and

receiving the subscription data sent by the information service provider, wherein the request for subscription of user specific authentication data is made by making a telephone call to the telephone exchange of the information service provider, and making the request by dictating or using voice-frequency signals formed by touching the telephone keys.

9. The method according to claim 1, wherein the user specific authentication data is used to form a connection to the information service, and which method further comprises:

sending a subscription request from the user to the information service provider, wherein the subscription request comprises one or more items of user specific authentication data, and

receiving the subscription data sent by the information service provider, wherein the subscription request is transmitted by using electronic mail or by using the www page of the information service provider.

10. The method according to claim 2, wherein the paging terminal of the user is a mobile station.

11. The method according to claim 10, wherein the mobile station is a cellular system mobile station, such as a GSM mobile station.

12. The method according to claim 10, wherein the mobile station of the user is a paging device, such as a long distance paging device.

18. The system according to claim 1, wherein the step of sending a request for transmission of the user specific authentication data from the user to the information service provider comprises sending said request in enciphered form.

13. A system for obtaining at least one item of user specific authentication data, wherein the user specific authentication data is used for forming a connection to an information service having a service provider, which system comprises:

means for sending a request for transmission of new user specific authentication data from the user to the information service provider to enable the user to initially form a connection to the information service,

means for processing the request at the service provider to form the new user specific authentication data in accordance with information in the request,

means for sending a reply message including the new user specific authentication data to the user, and

means for receiving the reply message with the user specific authentication data at the user,

and wherein the system further comprises;

means for obtaining user specific authentication data by using at least partly paging or a short message service,

means for including address information in the request for transmission of the user specific authentication data in accordance with which the reply message is to be sent, and

means for verifying the address information in the reply message before sending the user specific authentication data to the user.

14. The system according to claim 13, wherein the means for obtaining user specific authentication data comprise a paging terminal.

15. The system according to claim 14, wherein the paging terminal is a mobile station.

16. The system according to claim 15, wherein the mobile station is a cellular system mobile station, such as a GSM mobile station.

17. The system according to claim 15, wherein the mobile station is a paging device, such as a long distance paging device.

19. The system according to claim 13, wherein the means for sending a request for transmission of the user specific authentication data from the user to the information service provider comprises means for sending said request in enciphered form.