| 主权项 |
1. A method for enforced biometric authentication of a user by means of a challenge/response procedure with a mobile station that comprises a display, at least one camera, at least one microphone, at least one loudspeaker and an interface that is connectable to an authentication server via a communications network comprising the steps of
a) enrolment of the user by capturing and storing biometric data together with further data required for the identification of the user in a database; b) authenticating the user before performing a transaction by: b1) setting up a communication channel between the mobile station and the authentication server; b2) forwarding a challenge from the authentication server to the mobile station; b3) the mobile station recording a response sequence expressed by the user in reply to the challenge and recording simultaneously ambient signals or a response of the ambience, such as ambient optical and acoustical signals; b4) the mobile station forwarding the recorded response sequence and the ambient signals to the authentication server; b5) the authentication server evaluating the recorded response sequence based on related biometric data retrieved from the database and verifying whether the user corresponds to the enrolled user; b6) the authentication server evaluating the ambient signals and identifying signal changes within the ambient signals; and b7) the authentication server determining whether the identified signal changes represent a logical sequence of events in the user's vicinity. |
