MULTI-USER STRONG AUTHENTICATION TOKEN

摘要

Apparatus, methods and systems to secure remotely accessible applications using authentication devices are disclosed. More in particular apparatus, methods and systems are disclosed for thwarting overlay attacks against authentication applications for displaying transaction data and for generating signatures over these transaction data.

主权项

1. A method to secure a user's interaction with a remotely accessible computer-based application, the method comprising performing at a personal computing device the steps of:
obtaining transaction data; displaying the obtained transaction data on a display of the personal computing device for review by the user, wherein an authentication application that is running on the personal computing device displays the obtained transaction data in a transaction data presentation area of the display of the personal computing device; obtaining a dynamic credential associated with the transaction data; making the dynamic credential available for verification; and ensuring at the personal computing device that no window of another application that is running on the personal computing device can partially or entirely hide or obscure the authentication application's transaction data presentation area.