WO2010052332A1 - Method and system protecting against identity theft or replication abuse - Google Patents
Method and system protecting against identity theft or replication abuse Download PDFInfo
- Publication number
- WO2010052332A1 WO2010052332A1 PCT/EP2009/064897 EP2009064897W WO2010052332A1 WO 2010052332 A1 WO2010052332 A1 WO 2010052332A1 EP 2009064897 W EP2009064897 W EP 2009064897W WO 2010052332 A1 WO2010052332 A1 WO 2010052332A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- user
- computer
- passcode
- information
- session
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/42—User authentication using separate channels for security data
- G06F21/43—User authentication using separate channels for security data wireless channels
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
- G06F21/35—User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly
Definitions
- the present invention relates to a method and system for computer- implemented access authorisation for authorising user-access to a target component of a computer system.
- the invention relates to such a method and system that prevents - or at least reduces the risk of - identity theft and/or identity theft through replication.
- target component of a computer system is intended to refer to any entity of a computer system to which user-access may be granted based on an authentication scheme.
- target components include a computer or group of computers, a computer network, a communications network, one or more computer programs executed on a data processing system, functionality of one or more computer programs, computer resources, such as drivers, memory, computer peripherals, data stored in a memory, services provided by a computer, etc.
- Traditional means of giving access make use of a user identification and a password.
- a fraudulent 3rd party intercepts the communication between the user and a network, computer system or program when the user logs into said network, computer system or program. Once intercepted, the fraudulent 3rd party either establishes a parallel process and log into the same network, computer system or program as the user or simply acts as a middle-man and passes the user actions on to the said network, computer system or network for identity theft purposes.
- One method for securing users against such attacks is to ensure that a second means of authentication is deployed.
- Such second means are also referred to as a second factor of authentication.
- the first generations of these solutions used a hardware device called a token that the user would carry with him/her everywhere.
- the method also seen as soft-tokens or sms- delivered token codes uses the method of a pre-issued passcode that is valid for a period of time or until used.
- SMS Short Message System
- Text Messaging a passcode typically to a user's cell phone or, in an alternative implementation, the user will access a central server that then opens the system for the user's ID and password login process to be authorized. It is a problem of some current approaches that they use a separated login process where the SMS code is entered at the same time as the user ID and password, thus enabling phishing and similar methods for compromising credentials.
- the current implementations of these solutions also use pre-issued passcodes that are valid for a period of time or until used further, thus exposing them to man-in- the-middle attacks.
- US 2007/0136573 discloses a system and method for authentication using at least one multiple multi-factor authentication.
- This prior art method relies on the presence and use of a trusted computer, and this prior art document does not disclose any method for establishing such a trusted computer such that the process for establishing the trusted computer is protected against man-in- the-middle attacks. It thus remains a problem to provide increased security against man-in-the middle attacks without the need for a trusted computer.
- embodiments of the method and system disclosed herein combine a real-time, session specific two-factor authentication method combined with personal knowledge of the user by including contextual information gathered during the login process in a message sent to the user.
- the second and first user interfaces may be the same user interface.
- the second user interface is different from the first user interface, e.g. different windows presented to the user (e.g. by the same or different software programs), different physical interfaces such as different displays, different message gateway such as an instant message system etc., the security of the system is further improved.
- the second user system which will also be referred to as the second factor device, may be a communications device different from the first user system, e.g. a cellular phone, a pager, or other communications equipment carried by the user.
- the first and second user systems may be embodied as the same device adapted to implement two separate user interfaces, e.g. a first user interface in the form of a login program providing a user interface for entering user authentication information, and a second user-interface, e.g. a user interface of an instant messaging program or other program for receiving and displaying messages.
- the first and second communications networks may be different networks, the same network, or they may partly use the same and partly different networks.
- the second communications network may be a network suitable for communicating real-time messages, e.g. a short text message system, an instant messaging system, or the like; therefore, the second communications network will also be referred to as message network.
- the first communications network may be any suitable type of communications network, e.g. a computer network such as local area network (LAN), a wireless local area network (WLAN), a wide area network (WAN), an internet, a telecommunications network such as a cellular communications network, e.g. based on a GSM, GPRS, EDGE, UTMS, HSDPA, WIMAX standard or any other suitable network.
- real-time session-specific one-time passcode is intended to refer to a passcode that is generated in real-time during the login session with which it is associated, i.e. the session for which the passcode is session- specific. Hence, the passcode is not pre-generated or otherwise in existence before the corresponding login session is initiated.
- the passcode is session- specific, i.e. associated to one specific login session; preferably the passcode is unique for that session.
- the passcode is a one-time code, i.e. only valid for a single login.
- Embodiments of the method and system described herein may be implemented by a computer system, computer program and message gateway for authenticating a user when said user accesses a computer system, computer program or network.
- Embodiments of the method and system described herein may use a session-specific message-based authentication process using at least two different factors/means of authentication: A first factor is known to the user, e.g. in the form of a user identification and a password, and a second factor is held by or accessible to the user e.g. in the form of a networked message-receiving device such as a conventional cell phone, pager, etc., or a computer program executed on a computer such as an instant messaging program.
- Embodiments of the method and system described herein send a passcode message to the networked message-receiving device, e.g. by means of a real-time message-based method, where the message contains the generated real-time session-specific one-time passcode and contextual information gathered during the login process from e.g. the first communications network and/or the computer or other device used as first user system.
- the contextual information may be any suitable information that allows a user to detect that a login attempt has happened from another entity than the user's own, as such an attempt may indicate that an identity theft or identity replication event is likely happening.
- suitable contextual information include a computer identifier of a computer used as a first user system for performing the login process, at least approximate regional information about a location of the first user system from which the login attempt originates, thus enabling the user to assess, whether the computer performing the login process is the user's own computer or likely to be a fraudulent 3rd party computer performing a so-called man-in-the-middle attack.
- the contextual identification information gathered during the login process from e.g. the computer or device or network used during the login may include an approximate regional location, e.g. based on an internet protocol address or global positioning coordinates from a cell phone or a unique data item determined from a combination the two, or the Internet browser's version, the operation system's language etc.
- the authentication system may send a message containing the contextual information and a real-time session-specific onetime passcode to the second user system, e.g. to a second factor device assigned to the user.
- the login window of the first user- interface changes to a new, second window where the real-time session- specific one-time passcode sent to the second factor device can be entered. Once this is entered and validated the login entity is granted access.
- the login system i.e. the first user system
- the login system may also display the contextual information gathered during the login process or other information that is only known to the owner of the ID and password credentials and not the entity attempting to fraudulently steal the identity.
- the contextual information may be displayed in the second login screen used to enter the real-time session-specific one-time passcode sent over a separate message-based network, ensuring that the user can identify if it is a different computer that is actually logging into the system, which would be the case in a man-in-the-middle attack, where a third party person has intercepted the login process and is attempting to copy the said users personal information typically in the form of a login ID and password when the said user is prompted to enter the credentials.
- an embodiment of the method and system described herein may send a set of pre-issued passcodes to the user in advance.
- the second login window would show the gathered contextual information and a request to the user to enter a combination of one or more pre-issued passcodes that, when entered in the proper combination creates a session specific code that, once validated, grants the user access.
- FIG. 1 is a block diagram illustrating an exemplary embodiment of the invention.
- FIG. 1 is a block diagram illustrating an embodiment of the method and system disclosed herein.
- fig. 1 depicts an architecture diagram employing a computer-implemented user-authentication system (4) for providing an intended authorised user (1 ) access to a target component (14) of a computer system while preventing access by unauthorized users.
- the target component (14) may be a computer program, a computer or other data processing system, a computer network, or any other computer-accessible entity requiring authentication.
- the user- authentication system (4) provides the functionality of a traditional 2-factor authentication system based on SMS unlike a hardware token held by a user containing a code generator and a hardware display as seen by RSA or a soft token generator running on a cell phone showing the one-time passcode token in a cell phone display or a regular message based code that is pre- issued and valid for a period of time.
- the realtime session-specific one-time passcode system (4) generates a unique onetime passcode for each specific login session only valid for that particular login session containing contextual information about that session.
- the first factor usually a username and password, is validated by the authentication system (6).
- the authentication system (6) is described in more detail below.
- the system also collects contextual information so that the intended authorised user can verify if he has been fraud from an unauthorized user, ex. from an attack commonly named man-in-the-middle. This is typically done via the network (11 ) connected to the system (2) that is attempting to logon.
- the contextual information is after the first factor has been validated presented to the user via either the same system (2) or via a second system via second network ex. system (13) via network (12).
- the user- authentication system (4) can be integrated within an existing 2-factor authentication system to provide functionality regarding the collection of contextual information and the presentation to the intended authorised user
- the authentication system (6) is usually separated from the user- authentication system (4) and provides validation of the username and password.
- Ex. of authentication system (6) could be Microsoft Active Directory server, or a system holding information regarding username and password in an application like home banking.
- systems (4) and (6) are shown as separate systems, it alternatively will be possible that they may be implemented on the same computer and even by the same software application whereby the authentication system (6) and the real-time session-specific one-time passcode system is embedded in one and same application as seen in integrate universal access appliances in a format whereby the two programs works integrated where the message based authentication system (4) handles the entire login process but passes the User ID and password logic real time or cached to a backend authentication system (6) but offering a single user login experience managed by the message based authentication system (4).
- the interfaces (5 and 7) between system (4) and system (6) will typically be traditional computer networks like Ethernet, Internet etc.
- the first private or public communications network (11 ) may be any suitable type of communications network, e.g. a computer network such as local area network (LAN), a wireless local area network (WLAN), a wide area network (WAN), an internet, a telecommunications network such as a cellular communications network, e.g. based on a GSM, GPRS, EDGE, UTMS, HSDPA, WIMAX standard or any other suitable network.
- the process is initiated by the user (1 ) requesting access (15) to the target computer via a user system (2), e.g. a computer such as a PC or any other data processing system connectable to the first communications network (11 ).
- the user system (2) initially performs a login process, e.g.
- the login process queries the user for a user name and password or other authentication information.
- the login process further collects additional contextual information about at least one of the user system (2) and the first communications network (11 ) from/via which access is requested, or information collected within the target component (14) or authentication system (6).
- the contextual information collected may be any information collectable by the login process that conveys user-verifiable information about a context of the login operation.
- the contextual information may be information about a property of the user system and/or a property of the first communications network and/or the like.
- Suitable information about the user system may be information about one or more hardware properties, e.g. manufacturer of the user system, type of processor, amount of available memory, and/or one or more software properties, e.g. type and/or version of operating system.
- Other suitable information about a property of the user system includes information suitable for determining the geographic location of the user system, e.g. language settings of the operating system, language settings of the Internet browser, the type of Internet browser, the IP-address of the user system (2), the route of the network traffic, a GPs coordinate collected or similar.or derived information from such collected information, eg such as a location calculated based on GPS coordinates or approximate location based on the IP address.
- the contextual information may be suitable to uniquely identify the user system, this is not a requirement for the method described herein; for example, the contextual information may merely include information about the user system, such as the country, region, city or other information about the geographic location of the user system, or the manufacturer of the user system, and/or the like. Hence, based on such information, the user may still be able to judge whether the integrity of the login process is likely to have been compromised, e.g. by a man-in-the-middle attack.
- the request (3) is routed via the computer-implemented user-authentication system (4) to the authentication system (6) for a corporate user ID directory validation of the user's credentials, e.g. user name and password.
- the request (3) includes information required for the verifying the user's credentials, a session ID (e.g. a session cookie) identifying the login session, and the contextual information collected by the login process.
- the session ID may be generated by the authentication system to ensure that all incoming data packets with that session ID are associated to the correct login session.
- computer- implemented user-authentication system (4) generates a unique message alert containing: • The contextual information gathered during the login process from ex. the computer (2), device (2), target system (14) or network (3,11 ); • A one-time passcode (OTP) (8), e.g. a password or another suitable form of code or another suitable real-time session specific one-time second means of authentication, generated in real-time by the authentication system.
- the one-time password is session specific, i.e. linked to and only valid for a specific session ID.
- the user Upon receipt of the message, the user identifies and verifies the contextual information included in the message. If the user can verify the contextual information as being valid, the user enters at least the received real-time session-specific one-time pass code (15) into the user system (2).
- the user system (2) When deploying a real-time session-specific one time passcode, the user system (2) sends a message (16) including the entered OTP (8) or other second means of authentication over the first private or public communications network (11 ) to the computer-implemented user- authentication system (4).
- the computer-implemented user-authentication system (4) matches the received OTP with the originally sent real-time session-specific one-time passcode and/or with the session ID, and if there is a match, the user system (2) is granted access to the target component (14) to which initial access was requested.
- the user system (2) can also display the contextual information in a second window as an alternative means to send contextual information to the user via the first network and computer interface.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- General Physics & Mathematics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Information Transfer Between Computers (AREA)
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
- Storage Device Security (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
Claims
Priority Applications (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CA2742705A CA2742705C (en) | 2008-11-10 | 2009-11-10 | Method and system protecting against identity theft or replication abuse |
US13/128,303 US8893243B2 (en) | 2008-11-10 | 2009-11-10 | Method and system protecting against identity theft or replication abuse |
EP09760503.4A EP2359290B8 (en) | 2008-11-10 | 2009-11-10 | Method and system protecting against identity theft or replication abuse |
DK09760503.4T DK2359290T3 (en) | 2008-11-10 | 2009-11-10 | PROCEDURE AND SYSTEM FOR PROTECTION AGAINST IDENTITY THEFT OR REPLICATION ABUSE |
JP2011535132A JP2012508410A (en) | 2008-11-10 | 2009-11-10 | Method and system for protecting against unauthorized use using identity theft or duplication |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DKPA200801547 | 2008-11-10 | ||
DKPA200801547 | 2008-11-10 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2010052332A1 true WO2010052332A1 (en) | 2010-05-14 |
Family
ID=41572489
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/EP2009/064897 WO2010052332A1 (en) | 2008-11-10 | 2009-11-10 | Method and system protecting against identity theft or replication abuse |
Country Status (8)
Country | Link |
---|---|
US (1) | US8893243B2 (en) |
EP (1) | EP2359290B8 (en) |
JP (2) | JP2012508410A (en) |
CA (1) | CA2742705C (en) |
DK (1) | DK2359290T3 (en) |
MY (1) | MY178936A (en) |
PL (1) | PL2359290T3 (en) |
WO (1) | WO2010052332A1 (en) |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20110314549A1 (en) * | 2010-06-16 | 2011-12-22 | Fujitsu Limited | Method and apparatus for periodic context-aware authentication |
WO2013009280A2 (en) * | 2011-07-11 | 2013-01-17 | Maxwell Ryan Lee | Method of cryptology to authenticate, deny, and disinform |
WO2013014482A1 (en) * | 2011-07-27 | 2013-01-31 | Chleon Automotive Ltd. | Secure data authentication system and method |
CN103329584A (en) * | 2010-12-06 | 2013-09-25 | 格马尔托股份有限公司 | Method for transmitting a SIM application of a first terminal to a second terminal |
JP2014002435A (en) * | 2012-06-15 | 2014-01-09 | Digital Forest Inc | Authentication code issuing system and authentication system |
WO2014202718A1 (en) | 2013-06-20 | 2014-12-24 | Sms Passcode A/S | Method and system protecting against identity theft or replication abuse |
US9408066B2 (en) | 2010-12-06 | 2016-08-02 | Gemalto Inc. | Method for transferring securely the subscription information and user data from a first terminal to a second terminal |
Families Citing this family (28)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8359278B2 (en) | 2006-10-25 | 2013-01-22 | IndentityTruth, Inc. | Identity protection |
US9357384B2 (en) * | 2009-02-09 | 2016-05-31 | International Business Machines Corporation | System and method to support identity theft protection as part of a distributed service oriented ecosystem |
US9652802B1 (en) | 2010-03-24 | 2017-05-16 | Consumerinfo.Com, Inc. | Indirect monitoring and reporting of a user's credit data |
EP2676197B1 (en) | 2011-02-18 | 2018-11-28 | CSidentity Corporation | System and methods for identifying compromised personally identifiable information on the internet |
US8819793B2 (en) | 2011-09-20 | 2014-08-26 | Csidentity Corporation | Systems and methods for secure and efficient enrollment into a federation which utilizes a biometric repository |
US11030562B1 (en) | 2011-10-31 | 2021-06-08 | Consumerinfo.Com, Inc. | Pre-data breach monitoring |
JP5763592B2 (en) * | 2012-06-27 | 2015-08-12 | 株式会社野村総合研究所 | Authentication system and authentication device |
CN103581120B (en) | 2012-07-24 | 2018-04-20 | 阿里巴巴集团控股有限公司 | A kind of method and apparatus for identifying consumer's risk |
US10367642B1 (en) * | 2012-12-12 | 2019-07-30 | EMC IP Holding Company LLC | Cryptographic device configured to transmit messages over an auxiliary channel embedded in passcodes |
US8812387B1 (en) | 2013-03-14 | 2014-08-19 | Csidentity Corporation | System and method for identifying related credit inquiries |
US9516018B1 (en) * | 2013-03-15 | 2016-12-06 | Microstrategy Incorporated | Credential technology |
KR102506826B1 (en) * | 2014-05-13 | 2023-03-06 | 엘리먼트, 인크. | System and method for electronic key provisioning and access management in connection with mobile devices |
US9836594B2 (en) | 2014-05-19 | 2017-12-05 | Bank Of America Corporation | Service channel authentication token |
US9306930B2 (en) | 2014-05-19 | 2016-04-05 | Bank Of America Corporation | Service channel authentication processing hub |
US10339527B1 (en) | 2014-10-31 | 2019-07-02 | Experian Information Solutions, Inc. | System and architecture for electronic fraud detection |
US10652739B1 (en) | 2014-11-14 | 2020-05-12 | United Services Automobile Association (Usaa) | Methods and systems for transferring call context |
US9648164B1 (en) | 2014-11-14 | 2017-05-09 | United Services Automobile Association (“USAA”) | System and method for processing high frequency callers |
US20160275301A1 (en) * | 2015-03-17 | 2016-09-22 | Dots Communication, Inc. | Information sharing control |
US11151468B1 (en) | 2015-07-02 | 2021-10-19 | Experian Information Solutions, Inc. | Behavior analysis using distributed representations of event data |
WO2017004593A1 (en) * | 2015-07-02 | 2017-01-05 | Dots Communication, Inc. | Information sharing control |
US10164971B2 (en) * | 2015-10-22 | 2018-12-25 | Oracle International Corporation | End user initiated access server authenticity check |
WO2017066844A1 (en) * | 2015-10-23 | 2017-04-27 | Alcolizer Pty Ltd | A mind-altering substance testing system |
US10122719B1 (en) * | 2015-12-31 | 2018-11-06 | Wells Fargo Bank, N.A. | Wearable device-based user authentication |
US10522137B2 (en) | 2017-04-20 | 2019-12-31 | Google Llc | Multi-user authentication on a device |
US10699028B1 (en) | 2017-09-28 | 2020-06-30 | Csidentity Corporation | Identity security architecture systems and methods |
US10896472B1 (en) | 2017-11-14 | 2021-01-19 | Csidentity Corporation | Security and identity verification system and architecture |
US10965659B2 (en) * | 2018-11-09 | 2021-03-30 | International Business Machines Corporation | Real-time cookie format validation and notification |
CN110430043B (en) * | 2019-07-05 | 2022-11-08 | 视联动力信息技术股份有限公司 | Authentication method, system and device and storage medium |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1107089A1 (en) * | 1999-12-11 | 2001-06-13 | Connectotel Limited | Strong authentication method using a telecommunications device |
GB2379040A (en) * | 2001-08-22 | 2003-02-26 | Int Computers Ltd | Controlling user access to a remote service by sending a one-time password to a portable device after normal login |
Family Cites Families (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5881226A (en) * | 1996-10-28 | 1999-03-09 | Veneklase; Brian J. | Computer security system |
CA2410431A1 (en) | 2000-05-24 | 2001-11-29 | Gavin Walter Ehlers | Authentication system and method |
JP2002032692A (en) * | 2000-07-17 | 2002-01-31 | Pioneer Electronic Corp | Method for providing information service |
WO2002084456A2 (en) | 2001-04-12 | 2002-10-24 | Netdesigns Limited | User identity verification system |
JP2003281448A (en) | 2002-03-25 | 2003-10-03 | Nippon Telegr & Teleph Corp <Ntt> | Anonymous merchandise purchase system for purchasing merchandise by user authentication using mobile device having internet access function |
JP3678417B2 (en) | 2002-04-26 | 2005-08-03 | 正幸 糸井 | Personal authentication method and system |
JP3820477B2 (en) | 2002-12-10 | 2006-09-13 | 日本電信電話株式会社 | User authentication method by browser phone mail, user authentication server, user authentication method of authentication server, user authentication program of authentication server, and recording medium recording the program |
GB2397731B (en) | 2003-01-22 | 2006-02-22 | Ebizz Consulting Ltd | Authentication system |
JP2005078452A (en) | 2003-09-01 | 2005-03-24 | Sony Corp | Access control method and server |
JP2005209083A (en) | 2004-01-26 | 2005-08-04 | Japan Telecom Co Ltd | Service system, and communication system and communication method using the same |
JP2007026039A (en) | 2005-07-15 | 2007-02-01 | Hitachi Information Technology Co Ltd | Authentication system, authentication method and authentication program |
JP2007102777A (en) | 2005-10-04 | 2007-04-19 | Forval Technology Inc | User authentication system and method therefor |
US20070136573A1 (en) | 2005-12-05 | 2007-06-14 | Joseph Steinberg | System and method of using two or more multi-factor authentication mechanisms to authenticate online parties |
JP2007328381A (en) | 2006-05-09 | 2007-12-20 | Ids:Kk | Authentication system and method in internet banking |
-
2009
- 2009-11-10 MY MYPI2011001850A patent/MY178936A/en unknown
- 2009-11-10 CA CA2742705A patent/CA2742705C/en active Active
- 2009-11-10 JP JP2011535132A patent/JP2012508410A/en active Pending
- 2009-11-10 DK DK09760503.4T patent/DK2359290T3/en active
- 2009-11-10 WO PCT/EP2009/064897 patent/WO2010052332A1/en active Application Filing
- 2009-11-10 PL PL09760503T patent/PL2359290T3/en unknown
- 2009-11-10 EP EP09760503.4A patent/EP2359290B8/en active Active
- 2009-11-10 US US13/128,303 patent/US8893243B2/en active Active
-
2014
- 2014-10-07 JP JP2014206183A patent/JP2015039214A/en active Pending
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1107089A1 (en) * | 1999-12-11 | 2001-06-13 | Connectotel Limited | Strong authentication method using a telecommunications device |
GB2379040A (en) * | 2001-08-22 | 2003-02-26 | Int Computers Ltd | Controlling user access to a remote service by sending a one-time password to a portable device after normal login |
Cited By (19)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20110314549A1 (en) * | 2010-06-16 | 2011-12-22 | Fujitsu Limited | Method and apparatus for periodic context-aware authentication |
US9301145B2 (en) | 2010-12-06 | 2016-03-29 | Gemalto Sa | UICCs embedded in terminals or removable therefrom |
US9690950B2 (en) | 2010-12-06 | 2017-06-27 | Gemalto Sa | Method for exporting data of a Javacard application stored in a UICC to a host |
US9408066B2 (en) | 2010-12-06 | 2016-08-02 | Gemalto Inc. | Method for transferring securely the subscription information and user data from a first terminal to a second terminal |
US9462475B2 (en) | 2010-12-06 | 2016-10-04 | Gemalto Sa | UICCs embedded in terminals or removable therefrom |
US9326146B2 (en) | 2010-12-06 | 2016-04-26 | Gemalto Inc. | Method for downloading a subscription in an UICC embedded in a terminal |
US10242210B2 (en) | 2010-12-06 | 2019-03-26 | Gemalto Sa | Method for managing content on a secure element connected to an equipment |
US9294919B2 (en) | 2010-12-06 | 2016-03-22 | Gemalto Sa | Method for exporting on a secure server data comprised on a UICC comprised in a terminal |
US9946888B2 (en) | 2010-12-06 | 2018-04-17 | Gemalto Sa | System for managing multiple subscriptions in a UICC |
US9817993B2 (en) | 2010-12-06 | 2017-11-14 | Gemalto Sa | UICCs embedded in terminals or removable therefrom |
US9760726B2 (en) | 2010-12-06 | 2017-09-12 | Gemalto Sa | Method for remotely delivering a full subscription profile to a UICC over IP |
CN103329584A (en) * | 2010-12-06 | 2013-09-25 | 格马尔托股份有限公司 | Method for transmitting a SIM application of a first terminal to a second terminal |
US9532223B2 (en) | 2010-12-06 | 2016-12-27 | Gemalto Sa | Method for downloading a subscription from an operator to a UICC embedded in a terminal |
WO2013009280A3 (en) * | 2011-07-11 | 2013-06-27 | Maxwell Ryan Lee | Method of cryptology to authenticate, deny, and disinform |
WO2013009280A2 (en) * | 2011-07-11 | 2013-01-17 | Maxwell Ryan Lee | Method of cryptology to authenticate, deny, and disinform |
WO2013014482A1 (en) * | 2011-07-27 | 2013-01-31 | Chleon Automotive Ltd. | Secure data authentication system and method |
JP2014002435A (en) * | 2012-06-15 | 2014-01-09 | Digital Forest Inc | Authentication code issuing system and authentication system |
US10911443B2 (en) | 2013-06-20 | 2021-02-02 | Entrust Datacard Denmark A/S | Method and system protecting against identity theft or replication abuse |
WO2014202718A1 (en) | 2013-06-20 | 2014-12-24 | Sms Passcode A/S | Method and system protecting against identity theft or replication abuse |
Also Published As
Publication number | Publication date |
---|---|
US20110302641A1 (en) | 2011-12-08 |
PL2359290T3 (en) | 2017-09-29 |
JP2015039214A (en) | 2015-02-26 |
CA2742705A1 (en) | 2010-05-14 |
CA2742705C (en) | 2017-09-12 |
DK2359290T3 (en) | 2017-07-17 |
EP2359290A1 (en) | 2011-08-24 |
MY178936A (en) | 2020-10-23 |
EP2359290B8 (en) | 2017-08-09 |
EP2359290B1 (en) | 2017-05-10 |
JP2012508410A (en) | 2012-04-05 |
US8893243B2 (en) | 2014-11-18 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US8893243B2 (en) | Method and system protecting against identity theft or replication abuse | |
EP2314046B1 (en) | Credential management system and method | |
CN101227468B (en) | Method, device and system for authenticating user to network | |
US8990356B2 (en) | Adaptive name resolution | |
EP3011713B1 (en) | Method and system protecting against identity theft or replication abuse | |
US8533791B2 (en) | System and method for second factor authentication services | |
US8893251B2 (en) | System and method for embedded authentication | |
US7770002B2 (en) | Multi-factor authentication | |
EP3346660B1 (en) | Authentication information update method and device | |
US20050021975A1 (en) | Proxy based adaptive two factor authentication having automated enrollment | |
US8474014B2 (en) | Methods for the secure use of one-time passwords | |
US20100199086A1 (en) | Network transaction verification and authentication | |
Bicakci et al. | Mobile authentication secure against man-in-the-middle attacks | |
JP2013527708A (en) | Flexible quasi-out-of-band authentication structure | |
KR20170121683A (en) | User centric authentication mehtod and system | |
CN100512107C (en) | Security identification method | |
EP2514135B1 (en) | Systems and methods for authenticating a server by combining image recognition with codes | |
JP2008171087A (en) | Authentication system, and authentication program | |
KR20080109580A (en) | Server certification system and method thereof | |
KR20080083077A (en) | Apparatus and method for authentication by using one time password | |
EP3582469B1 (en) | Authentication using a mobile network operator system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 09760503 Country of ref document: EP Kind code of ref document: A1 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2742705 Country of ref document: CA |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2011535132 Country of ref document: JP |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
REEP | Request for entry into the european phase |
Ref document number: 2009760503 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2009760503 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 13128303 Country of ref document: US |