Method and system for authenticating a user by means of an application

摘要

A user may be authenticated by an application. The user may be in possession of a user-specific card, which may store a user ID (UID), an operator ID (SID), and a plurality of application IDs (AIDn), and other related data. The card may provide data for implementing a plurality of security steps, performed individually or in combination, as chosen depending on a desired security level and/or the application. In a first security step, the application may read from the card the user ID (UID) from the card. In a second security step, the application may read out the operator ID (SID) and forward it to a server of an operator, which may then verify the operator ID (SID). In a third security step, the application may read out and verify its corresponding application ID (AIDn). The application may request additional information for the user from the server, using the user ID (UID).

主权项

1. A method, comprising:
authenticating a user based on a user-specific card, wherein the user is in possession of the card, the authenticating comprising:
reading out from the card and authenticating by an application, a user ID (UID) that is stored in the card;reading out from the card by the application an operator ID (SID) that is stored in the card, and forwarding the operator ID (SID) to a server of a particular operator;verifying by the server the operator ID (SID); andcommunicating by the server a result of the verification of the operator ID (SID) to the application.