AUTHENTICATION SYSTEM PRESERVING SECRET DATA CONFIDENTIALITY

摘要

For authenticating a user of a communication device implementing a client application connected to an application server through a telecommunication network, the application server having sent a challenge to the client application to authenticate the user, a user device associated with the communication device establishes a connection with the client application that invites the user to enter secret data on a screen of the communication device, retrieves the challenge from the client application, prompts the user to enter secret data, calculates a response to the challenge, based on secret data entered by the user and the retrieved challenge, and sends the response to the client application that forwards the response to the application server.

主权项

1. A method for authenticating a user of a communication device implementing a client application connected to an application server through a telecommunication network, the application server having sent a challenge to the client application to authenticate the user, the method comprising the following steps in an user device that is associated with the communication device and that acts as a filter:
establishing a connection with the client application that invites the user to enter secret data on a screen of the communication device, retrieving the challenge from the client application, the challenge being sent to the user device by the client application or the challenge being displayed on a screen of the communication device, prompting the user to enter secret data, calculating a response to the challenge, based on secret data entered by the user and the retrieved challenge, sending the response to the client application that forwards the response to the application server.