Method and device for identification and authentication

摘要

A method and a device of identification and authentication of a holder of a mobile electronic transaction device in an electronic transaction process between a transaction service provider and a transaction terminal in communication via a computer network. A transceiver is adapted for transmitting an identity of the device to the transaction terminal and receiving a challenge transaction identifier from the service provider via the transaction terminal. A data processing device is adapted for determining an authenticity of a user identification input by comparison with a reference user identification, and for performing a cryptographic transformation of the transaction identifier using a secret key only on the identification input being determined as authentic. The transceiver is also adapted for transmitting a response result of the cryptographic transformation to the service provider via the transaction terminal for validating the transaction.