Device and method for authenticating user's access rights to resources according to the Challenge-Response principle

摘要

The present invention provides a device for authenticating user's access rights to resources, which comprises first memory means 111 for storing challenging data 18, second memory means 115 for storing unique identifying information of the user 116, third memory means 113 for storing proof support information 13 which is a result of executing predetermined computations to the unique identifying information of the user 16 and unique security characteristic information of the device 14, response generation means 116 for generating a response 19 from the challenging data 18 stored in the first memory means 111, the unique identifying information 16 stored in the second memory means 115 and the proof support information 13 stored in the third memory means 113, and verification means 106 for verifying the legitimacy of the response 19 by verifying that the response 19, the challenging data 18 and the unique security characteristic information of the device 14 satisfy a specific predefined relation.