+

WO2002008974A3 - Ameliorations portant sur la securite de systemes d'authentification - Google Patents

Ameliorations portant sur la securite de systemes d'authentification Download PDF

Info

Publication number
WO2002008974A3
WO2002008974A3 PCT/GB2001/003298 GB0103298W WO0208974A3 WO 2002008974 A3 WO2002008974 A3 WO 2002008974A3 GB 0103298 W GB0103298 W GB 0103298W WO 0208974 A3 WO0208974 A3 WO 0208974A3
Authority
WO
WIPO (PCT)
Prior art keywords
authentication
subset
data element
challenge
user
Prior art date
Application number
PCT/GB2001/003298
Other languages
English (en)
Other versions
WO2002008974A2 (fr
Inventor
Giles Martin Wren-Hilton
Original Assignee
Nexxgen Ltd
Giles Martin Wren-Hilton
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from GB0018047A external-priority patent/GB0018047D0/en
Priority claimed from GB0111978A external-priority patent/GB0111978D0/en
Application filed by Nexxgen Ltd, Giles Martin Wren-Hilton filed Critical Nexxgen Ltd
Priority to AU2001270912A priority Critical patent/AU2001270912A1/en
Publication of WO2002008974A2 publication Critical patent/WO2002008974A2/fr
Publication of WO2002008974A3 publication Critical patent/WO2002008974A3/fr

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/04—Billing or invoicing
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/04—Payment circuits
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3825—Use of electronic signatures

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Development Economics (AREA)
  • Marketing (AREA)
  • Economics (AREA)
  • Computer Security & Cryptography (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
  • Telephonic Communication Services (AREA)

Abstract

L'invention concerne un procédé et un système d'authentification d'un stockage d'authentification personnelle, tel qu'une carte de paiement, destinés à être utilisés afin d'authentifier l'identité d'un utilisateur. Le procédé tient dans la réalisation d'une tâche consistant à recevoir un identificateur unique du stockage d'authentification personnelle, à identifier des premier et second sous-ensembles d'éléments de données prédéterminés en utilisant l'identificateur unique, à sélectionner un élément de données provenant du premier sous-ensemble et à émettre cet élément de données vers l'utilisateur en tant que tâche d'authentification. Chaque sous-ensemble a été auparavant choisi parmi un ensemble plus important correspondant d'éléments de données et chaque élément de données du premier sous-ensemble correspond à un élément spécifique des éléments de données du second sous-ensemble. L'authentification est déterminée par la réception d'une réponse à la tâche d'authentification provenant de l'utilisateur, déterminée par utilisation de l'information fournie par le stockage d'autorisation personnelle, et par la délivrance d'un signal d'authentification si la réponse comprend l'élément de données spécifique du second sous-ensemble qui correspond à l'élément de données du premier sous-ensemble utilisé pour la tâche.
PCT/GB2001/003298 2000-07-21 2001-07-23 Ameliorations portant sur la securite de systemes d'authentification WO2002008974A2 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2001270912A AU2001270912A1 (en) 2000-07-21 2001-07-23 Improvements relating to the security of authentication systems

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
GB0018047A GB0018047D0 (en) 2000-07-21 2000-07-21 Improvements in and relating to authentication cards and systems
GB0018047.1 2000-07-21
GB0111978.3 2001-05-16
GB0111978A GB0111978D0 (en) 2001-05-16 2001-05-16 Improvements in and relating to authentication cards and systems

Publications (2)

Publication Number Publication Date
WO2002008974A2 WO2002008974A2 (fr) 2002-01-31
WO2002008974A3 true WO2002008974A3 (fr) 2003-05-01

Family

ID=26244707

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB2001/003298 WO2002008974A2 (fr) 2000-07-21 2001-07-23 Ameliorations portant sur la securite de systemes d'authentification

Country Status (2)

Country Link
AU (1) AU2001270912A1 (fr)
WO (1) WO2002008974A2 (fr)

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8224887B2 (en) 2003-03-26 2012-07-17 Authenticatid, Llc System, method and computer program product for authenticating a client
US8966579B2 (en) 2003-12-30 2015-02-24 Entrust, Inc. Method and apparatus for providing authentication between a sending unit and a recipient based on challenge usage data
US8060915B2 (en) 2003-12-30 2011-11-15 Entrust, Inc. Method and apparatus for providing electronic message authentication
US9281945B2 (en) 2003-12-30 2016-03-08 Entrust, Inc. Offline methods for authentication in a client/server authentication system
US8612757B2 (en) 2003-12-30 2013-12-17 Entrust, Inc. Method and apparatus for securely providing identification information using translucent identification member
US9191215B2 (en) 2003-12-30 2015-11-17 Entrust, Inc. Method and apparatus for providing authentication using policy-controlled authentication articles and techniques
US8230486B2 (en) 2003-12-30 2012-07-24 Entrust, Inc. Method and apparatus for providing mutual authentication between a sending unit and a recipient
US7347366B2 (en) * 2006-03-14 2008-03-25 Verisign, Inc. Method and apparatus to provide authentication using an authentication card
US7739169B2 (en) * 2007-06-25 2010-06-15 Visa U.S.A. Inc. Restricting access to compromised account information
US9742761B2 (en) 2015-11-10 2017-08-22 International Business Machines Corporation Dynamic authentication for a computing system
CN113469694A (zh) * 2021-07-27 2021-10-01 中国银行股份有限公司 一种低视力人群手机软件登录和支付的方法和装置
CN115913562A (zh) * 2022-09-30 2023-04-04 福建正孚软件有限公司 电子阵牌认证方法、介质及装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2058417A (en) * 1979-06-25 1981-04-08 Gao Ges Automation Org Input of a Personal Code Word
US4958066A (en) * 1988-08-19 1990-09-18 Secured Transactions Financial instrument verification and method of production
FR2654238A1 (fr) * 1989-11-07 1991-05-10 Lefevre Jean Pierre Procede d'authentification de l'identite d'une personne physique et dispositif authentificateur de mise en óoeuvre du procede.
US5177789A (en) * 1991-10-09 1993-01-05 Digital Equipment Corporation Pocket-sized computer access security device
US5712627A (en) * 1995-04-19 1998-01-27 Eastman Chemical Company Security system

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2058417A (en) * 1979-06-25 1981-04-08 Gao Ges Automation Org Input of a Personal Code Word
US4958066A (en) * 1988-08-19 1990-09-18 Secured Transactions Financial instrument verification and method of production
FR2654238A1 (fr) * 1989-11-07 1991-05-10 Lefevre Jean Pierre Procede d'authentification de l'identite d'une personne physique et dispositif authentificateur de mise en óoeuvre du procede.
US5177789A (en) * 1991-10-09 1993-01-05 Digital Equipment Corporation Pocket-sized computer access security device
US5712627A (en) * 1995-04-19 1998-01-27 Eastman Chemical Company Security system

Also Published As

Publication number Publication date
WO2002008974A2 (fr) 2002-01-31
AU2001270912A1 (en) 2002-02-05

Similar Documents

Publication Publication Date Title
US6398115B2 (en) System for authenticating use of transaction cards having a magnetic stripe
CN105379409B (zh) Ehf安全通信设备
CA2208055A1 (fr) Systeme de verification de l'utilisation d'une carte de credit/d'identite, a enregistrement des attributs physiques des utilisateurs non autorises
WO2003044721A3 (fr) Systeme de carte de transaction securisee contre l'utilisation non autorisee
WO2001057750A8 (fr) Systeme d'authentification
CN101233476A (zh) 带有近场通信的大容量存储设备
AU4781590A (en) Secure data interchange system
MY122139A (en) Personal identification authenticating with fingerprint identification
JPS61139873A (ja) 認証方式
CA2140803A1 (fr) Methode d'authentification de terminaux pour systeme d'execution de transactions
AU1470795A (en) Method and apparatus for authenticating a data carrier intended to enable a transaction or access to a service or a location, and corresponding carrier
EP0391261A3 (fr) Méthode et dispositif pour réaliser de la monnaie électronique
EP1271435A3 (fr) Système d'authentification et de contrôle d'accès
US7543337B2 (en) System and method for automatic verification of the holder of an authorization document and automatic establishment of the authenticity and validity of the authorization document
WO2003021538A3 (fr) Procede et systeme permettant de fournir l'acces a une entite ou un service securise a un sous-ensemble compose de n personnes parmi m personnes designees
CA2026739A1 (fr) Methode et dispositif de securite pour systeme transactionnel
WO2002008974A3 (fr) Ameliorations portant sur la securite de systemes d'authentification
WO2002065253A3 (fr) Procede, systeme et moyen de securite pour authentifier un utilisateur
EP1676805A4 (fr) Systeme de securite pour ascenseur
WO2001075864A3 (fr) Identificateur electronique
EP0998073A3 (fr) Procédé et système d'authentification et d'échange de clé entre plusieurs composants
CA2094026C (fr) Methode et appareil d'identification de personnes
CN203366415U (zh) 一种基于可见光通信的认证系统
WO2001069351A3 (fr) Procede d'identification securisee d'identificateurs d'utilisateurs
EP1046976A3 (fr) Méthode et appareil pour permettre à un utilisateur d'authentifier un système avant la présentation d'informations privilégiées

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 69(1) EPC (EPO FORM 1205A DATED 06.06.03)

122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP

点击 这是indexloc提供的php浏览器服务，不要输入任何密码和下载