Authentication of data communications

摘要

Methods and apparatus are provided for authenticating communications between a user computer and a server via a data communications network. A security device has memory containing security data, and security logic to use the security data to generate an authentication response to an authentication message received from the server in use. An interface device communicates with the security device. The interface device has a receiver for receiving from the user computer an authentication output containing the authentication message sent by the server to the user computer in use, and interface logic adapted to extract the authentication message from the authentication output and to send the authentication message to the security device. Includes a communications interface for connecting to the server via a communications channel bypassing the user computer. Either the security device or interface device sends the authentication response to the server via the communications channel bypassing the user computer.

主权项

1. An apparatus for authenticating communication between a user computer and a server via a data communications network, the apparatus comprising:
a security device having: a memory containing security data; and a security logic configured to use the security data to generate an authentication response to an authentication message received from the server in use; an interface device configured for data communication with the security device, the interface device having: a receiver configured to receive from the user computer an authentication output containing the authentication message sent by the server to the user computer in use; and an interface logic configured to extract the authentication message from the authentication output and to send the authentication message to the security device, the interface device configured to communicate with the server via a first communications channel; and a communications interface configured to connect to the server via a second communications channel bypassing the user computer, wherein one of the security device and interface device is configured to send the authentication response to the server via the communications channel; wherein the interface device is configured to interface between the security device and the user computer for communicating with the server via said first communications channel, and wherein said communications interface is configured for communicating with the server via the second communications channel which bypasses the user computer.