Verfahren zur Authentisierung einer Benutzereinrichtung zur Sicherstellung einer gesicherten Kommunikation mit einem Server

Details

Veröffentlichungs-Nr.

EP3041185

Aktenzeichen

EP14307194

Anmeldetag

29. Dezember 2014

Veröffentlichung

6. Juli 2016

Rechtsraum

EP

IPC

H04L29/06G06F21/35H04W12/06

Abstract

The invention relates to a system comprising a user equipment, a server and a mobile device, wherein : - The user equipment sends a request for authentication to the server, said request for authentication comprising an identifier of a user of the user equipment and a first authenticating parameter of said user, - Based on the identifier of the user and the first authenticating parameter, the serve retrieves an encryption key associated to the user, - The server encrypts a second authenticating parameter associated to the user of the user equipment using the encryption key associated to the user of the user equipment, - The server encodes said encrypted second authenticating parameter in the form of a multi-dimensional code, - The server transmits said multi-dimensional code to the user equipment, - The user equipment displays said multi-dimensional code on a display of the user equipment; - the mobile device decodes the multi-dimensional code, and decrypts the second authenticating parameter using a decryption key associated to the user of the user equipment stored on the mobile device, - the user equipment detects on a user interface of the user equipment an input representing the decrypted second authenticating parameter displayed on a display of the mobile device, - the user equipment transmits a message to the server comprising the decrypted second authenticating parameter, - If the decrypted second authenticating parameter transmitted by the user equipment equals the second authenticating parameter stored in the server, the server establishes the secured communication session.

Anmelder

Firma

Orange

Land

🇫🇷 Frankreich

Fachgebiete