Method and system for authenticating a user by means of an application

摘要

Methods and systems are provided for authentication of a user, such as using a user-specific card, which may provide data for implementing a plurality of security steps in an electronic device (e.g., using a particular application running therein), performed individually or in combination, such as depending on a desired security level and/or the application. The user-specific card may store a user identifier, an operator identifier, and a plurality of application identifiers, and other related data. The user identifier may be read from the user-specific card and may be authenticated. The operator identifier may be read from the user-specific card and may then be forwarded to a server of an operator, which may then verify the operator identifier. Further, additional information for the user may be requested from the server. An application identifier may be read from the user-specific card and may be verified.

主权项

1. A method, comprising:
in an electronic device:
reading out from a user-specific card a user identifier that is stored in the user-specific card;authenticating the user identifier;reading out from the user-specific card an operator identifier that is stored in the user-specific card;forwarding the operator identifier to a server of a particular operator; andreceiving from the server a result of a verification of the operator identifier.