Authentication system

摘要

The invention relates to an authentication system for a user possessing a means (3) for authentication at an authentication entity (1), said authentication means including a means (11) for storing at least one status variable and a single-use access-code generator (2) actuated upon a request of the user, said access code including at least one unpredictable portion and being transmitted to the authentication entity for validation, said validation authenticating the user at the authentication entity, characterised in that the status variable is updated in a random manner by and upon the initiative of the authentication means systematically and before any generation of a new access code, in that the generator is suitable for computing the access code using the status variable once it is updated, and in that the authentication entity is adapted for modifying the value of at least one internal status variable during the at least partial validation of the access code by using information previously known by the authentication entity as well as the unpredictable portion conveyed by the transmitted access code.

主权项

1. A system for authenticating a user comprising:
a part for authentication with an authentication entity, said authentication part comprising memory, coupled to a processor, for storing at least one state variable and a generator of a single-use access code that can be actuated at a user's request, said access code comprising at least one random part and being transmitted to the authentication entity for validation, said validation authenticating the user with the authentication entity, wherein said state variable is updated in a random manner by and on the initiative of said authentication part, systematically and prior to each generation of a new access code, wherein said generator is suitable for computing said access code by using said at least one state variable once said state variable has been updated, and wherein authentication entity is arranged for modifying the value of at least one internal state variable upon at least partial validation of said access code by using information previously known to said authentication entity and the random part conveyed by the transmitted access code.