SYSTEM AND METHOD FOR PERSONAL AUTHENTICATION USING A MOBILE DEVICE

• US 20120096277A1
• Filed: 04/19/2010
• Published: 04/19/2012
• Est. Priority Date: 04/20/2009
• Status: Abandoned Application

• Current Assignee: Alter Core SL
• Original Assignee: Alter Core SL
• Inventors: Perez Soria, José Maria
• Application Number:
  US13/265,497
• Publication Number:
  US 20120096277A1
• Time in Patent Office: Days
• US Class Current: 713/179
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A system and method is for personal authentication with respect to a service provider using a mobile device. The method includes providing the user of the mobile device (2) with a two-dimensional code (1), the information contained in a two-dimensional code (1) including encrypted original data which includes an encrypted session key for certifying the user with respect to the service provider; the mobile device (2) obtaining an image containing the two-dimensional code (1) via an image capturing system; the mobile device (2) obtaining the two-dimensional code (1) from the image; the two-dimensional code (1) being converted into a character code. The mobile device (2) obtains the original data including the dynamic session key for authenticating the user before the service provider from the character code, by applying a decryption process.

Claims

1. A personal authentication method before a service provider using a mobile device, said mobile device having image capturing means, the method comprising:

providing the user of the mobile device with a two-dimensional code;

the mobile device obtaining an image containing the two-dimensional code via image capturing means;

the mobile device obtaining the two-dimensional code from said image;

the two-dimensional code being converted into a character code;

wherein the information contained in said two-dimensional code includes encrypted original data comprising an encrypted dynamic session key for authenticating the user before the service provided;

wherein the information contained in the two-dimensional code is encrypted by public-key cryptography;

the mobile device applying a decryption process on said character code to obtain the dynamic session key for authenticating the user before the service provider.

2. The method according to claim 1, wherein the two-dimensional code is previously generated by the service provider applying an encryption process on the original data comprising the dynamic session key and a subsequent conversion of the characters obtained into a two-dimensional code.

3. The method according to claim 1, wherein the two-dimensional code is double encrypted, encrypted with the user'"'"'s public key and the private key of the service provider, wherein decryption process comprises:

obtaining, from the character code, the encrypted original data including the encrypted dynamic session key;

decrypting the original data with the service provider public key;

decrypting the previous result with the mobile device user'"'"'s private key, obtaining the original data including the dynamic session key.

4. The method according to the claim 1, wherein the process for generating the two-dimensional code is performed by the service provider and comprises:

randomly generating a dynamic session key;

encrypting the original data including said dynamic session key with the user'"'"'s public key;

encrypting the result with the service provider private key;

performing a two-dimensional encoding of the previous result, obtaining the two-dimensional code including the encrypted original data which in turn comprise the encrypted dynamic session key.

5. The method according to claim 1, further comprising:

showing the obtained dynamic session key to the user on the display of his/her mobile device;

introducing the obtained dynamic session key in a terminal in charge of allowing the authentication for the service provider.

6. The method according to claim 1, further comprising:

the mobile device establishing a secure connection with a server of the service provider;

the mobile device sending information for the user authentication, including in said information at least the obtained dynamic session key.

7. The method according to claim 1, wherein the decryption process is performed by a cryptographic card connected to the mobile device.

8. The method according to claim 1, wherein the encrypted original data contained in the two-dimensional code may further comprises some of the following data:

reference to the service or product;

reference to the service provider;

operation amount;

date and time of the operation;

service provider webpage address.

9. Personal authentication system before a service provider using a mobile device, said mobile device having image capturing means, the system comprising:

said mobile device configured for;

obtaining, through the image capturing means and from a two-dimensional code provided to the mobile device user an image containing said two-dimensional code;

obtaining from said image the two-dimensional code;

converting the two-dimensional code into a character code;

a service of the service provider configured to generate the two-dimensional code;

wherein the information contained in the two-dimensional code includes encrypted original data comprising an encrypted dynamic session key for authenticating the user before the service provider;

wherein the information contained in the two-dimensional code is encrypted by means of public-key cryptography;

the mobile device being configured for;

applying a decryption process on said character code to obtain the dynamic session key for authenticating the user before the service provider.

10. The system according to claim 9, wherein a server of the service provider is configured to generate the two-dimensional code through an encryption process on the original data comprising the dynamic session key and a conversion of the characters obtained into a two-dimensional code.

11. The system according to claim 9, wherein the two-dimensional code is double encrypted, encrypted with the user'"'"'s public key and the private key of the service provider, wherein the mobile device is configured, within the decryption process, to:

obtain, from the character code, the encrypted original data including the encrypted dynamic session key;

decrypt the original data with the service provider public key;

decrypt the previous result with the mobile device user'"'"'s private key, obtaining the original data including the dynamic session key.

12. The system according to claim 10, wherein the server of the service provider is configured, within the process for generating the two-dimensional code, to:

randomly generate a dynamic session key;

encrypt the original data including said dynamic session key with the user'"'"'s public key;

encrypt the result with the service provider private key;

perform a two-dimensional encoding of the previous result, obtaining the two-dimensional code including the encrypted original data which in turn comprise the encrypted dynamic session key.

13. The system according to claim 10, comprising a terminal in charge of allowing the authentication for the service provider, with display means configured to show the two-dimensional code to the user and with data entering means configured to allow the entering of dynamic the session key to obtain the user authentication.

14. The system according to claim 10, wherein the mobile device is additionally configured to:

establish a secure connection with a server of the service provider;

send information for the authentication of the user, including in said information at least the dynamic session key obtained.

15. The system according to claim 10, wherein the mobile device is configured to perform the decryption process through a cryptographic card connected to the mobile device.