| 摘要 |
<p>An authentication system based on a token (1) accessible by means of a PIN, and able to authorize or deny access to data to be protected, the token having a memory that stores: an array (100) containing alphanumeric information items (I 1 -I N ) and random alphanumeric data items (RB x,y ) interposed between the information items; and a seal scheme vector (SS), of encrypted type, containing information regarding the arrangement of the information items (I 1 -I N ) in the array and information regarding the size in bytes of each random data item, so as to enable access to each of the information items in their respective positions in the array. The authentication system is configured to: subject access to the token to the entering of a correct PIN; decrypt the seal scheme vector; acquire the arrangement information of the information items and the size information of each random data item from the seal scheme vector; check correspondence between the acquired arrangement information and the effective arrangement of the information items in the array, and between the acquired size information and the effective size of the random data; authorize or deny access to the data to be protected on the basis of a result of the previous check.</p> |
