Apparatus and method for authentication of a transaction between a user and an entity

摘要

An arrangement for authenticating a transaction between a user's mobile device (1) and an entity such as a corporate server (50) is disclosed. The user's UICC (20) is adapted to generate a time-dependent authentication code which is dependent on a time value and which is usable to authenticate the transaction only during a predetermined period. A time verification processor (42) verifies a time value to ensure that the time-dependent authentication code was generated based on the correct time value. The time value is based on the UTC time obtained from UTC clock (34). The verified time is used to generate a "one-time" password (authentication code) by the authentication code calculator (44) of the UICC (20). This is used to authenticate a transaction with the corporate network (30).