| 摘要 |
In an approach for authenticating a user computer, connectable to a mobile network, a computer retrieves an attribute credential, the attribute credential certifying a set of user attributes and a device identifier for identifying the user computer to the mobile network. The computer requests a location credential, the location credential certifying a device identifier and location data indicating a current location of the user computer determined by the mobile network. Additionally, the computer produces an authentication token comprising the attribute credential, the location credential, the location data, and a proof for proving that the device identifier in the attribute credential equals the device identifier in the location credential. Furthermore, the computer sends the authentication token for authentication. |
| 主权项 |
1. A computer-implemented method for authenticating a user computer, connectable to a mobile network, the method comprising:
retrieving, by one or more computing devices, an attribute credential, the attribute credential certifying a set of user attributes and a device identifier for identifying the user computer to the mobile network; requesting, by one or more computing devices, a location credential, the location credential certifying a device identifier and location data indicating a current location of the user computer determined by the mobile network; producing, by one or more computing devices, an authentication token comprising the attribute credential, the location credential, the location data and a proof for proving that the device identifier in the attribute credential equals the device identifier in the location credential; sending, by one or more computing devices, the authentication token for authentication of the user computer; and producing, by one or more computing devices, a blinded attribute credential by randomized blinding of the attribute credential, wherein the authentication token includes the blinded attribute credential and wherein the proof verifies possession by the user computer of the attribute credential in the blinded attribute credential. |
