SECURE USER IDENTIFICATION

摘要

A system (1) for secure identification of a user (2) includes a mobile terminal (10) which is operatively connected to a telecommunications network (30) and to a data network (40). The system also includes a local device (20) which is operatively connected to the data network; and a server side (50) comprising at least one server (52a-n) operatively connected to the data network and at least one server (52a-n) operatively connected to the telecommunications network. The server side (50) is configured to initiate a communication session (42) with the local device (20) over the data network (40), said communication session having a session ID, to generate a representation (24) of the session ID and to transmit the representation to the local device over said data network. The local device (20) is configured to present the representation in a user interface (22) of the local device. The mobile terminal (10) is configured to capture the presented representation so as to derive the session ID, and to send a message containing the derived session ID to the server side over the data network. The server side is further configured to determine an identity of the mobile terminal on the telecommunications network, to verify the determined mobile terminal identity against prestored reference data (56) which links the mobile terminal identity to private user information (54) pertaining to the user (2), and, upon successful verification, to associate the communication session with the private user information.