Code-based authorization of mobile device

摘要

A system and method for authenticating mobile communications devices. The method comprises: generating a code corresponding to a user configured to be rendered on a rendering device to produce a rendered code, the rendered code being readable by a mobile communications device having a code reading device, the rendered code comprising a secret token; storing the secret token along with information identifying the user on a first storage device; providing the code to the user; receiving, at the authentication server, a setup message from the mobile device, the message includes a device identifier and the secret token; comparing the received secret token and the secret token stored on the first storage device; if the received secret token matches the secret token stored on the first storage device, storing, on a second storage device, information identifying the user and a trusted device value corresponding to the device identifier.

主权项

1. A method of authenticating a mobile communications device for access to secure web services, the method comprising:
storing a credential associated with information identifying a user on a first storage device associated with an authentication server; generating, at the authentication server, a Quick Response (QR) code corresponding to a user and comprising the credential; providing the QR code for rendering in a form that is readable by a first electronic device having a code reading device, the first electronic device being used by the user, wherein the providing of the QR code includes sending, by the authentication server, the QR code to a second electronic device; and receiving, at the authentication server, at least one authentication message from the first electronic device, the at least one authentication message comprising the credential and authentication information, wherein the first electronic device obtained the credential from the QR code.