摘要 |
A method of authentication of users in a data processing system is provided. The method includes a Challenge univocally associated with a user to be authenticated; processing the Challenge to generate an expected answer code, to be compared with an answer code that the user has to provide for authentication; encoding the generated Challenge for obtaining an image displayable through a display device; sending the image containing the Challenge to the user; displaying the image containing the Challenge; through a user device provided with an image-capturing device, optically capturing the displayed image; through the user device, processing the captured image for extracting from the captured image the Challenge, and subsequently processing the obtained Challenge for generating the answer code; receiving the answer code from the user and comparing it to the expected answer code; and, in case of positive comparison, authenticating the user. One among the actions of generating a Challenge and an expected answer code, and the action of processing the captured image that generates the answer code exploit secret information univocally associated with the user. |