Device authentication

Patent metadata

Field	Value
Publication number	US-2016380997-A1
Application number	US-201615184557-A
Country	US
Kind code	A1
Filing date	Jun 16, 2016
Priority date	Jun 24, 2015
Publication date	Dec 29, 2016
Grant date	—

Abstract

The present invention relates to a computer network that provides secure authentication. The computer network comprises a server operable to generate a token comprising identification information; a first device to be authenticated, the first device being operable to receive the token; a second device associated with a trusted identifier, the second device being operable to retrieve the token from the first device and associate the token with the trusted identifier to authenticate the first device at the server.

First claim

1 . A computer network that provides secure authentication, the computer network comprising:
a server operable to generate a token comprising identification information; a first device to be authenticated, the first device being operable to receive the token; a second device associated with a trusted identifier, the second device being operable to:
retrieve the token from the first device;
associate the token with the trusted identifier to authenticate the first device at the server;
wherein the second device is further operable to send authentication data comprising the associated token and the trusted identifier to the server, wherein the authentication data allow the first device to be authenticated via the trusted identifier based on the identification information comprised in the token, and the server comprises at least two components, the first component being operable to generate the token and the second component being operable to write the authentication data to a database and read the authentication data from the database.

2 . The computer network according to claim 1 , wherein the first device is further operable to generate the identification information, and to send the identification information to the server, wherein the identification information preferably comprises a randomly generated valid IP address and a randomly generated port number.

3 . The computer network according to claim 1 , wherein the second device is operable to send the authentication data to the first component and the first component is further operable to validate the token as having been generated by the first component and to forward the authentication data to the second component.

4 . The computer network according to claim 1 , wherein the first device is further operable to be authenticated via the trusted identifier in response to communicating the identification information to the server.

5 . The computer network according to claim 1 , wherein the second device is a mobile phone and the trusted identifier is the MSISDN.

6 . The computer network according to claim 1 , wherein the first device is further operable to generate and display a QR code including the token.

7 . The computer network according to claim 1 , wherein the token is an encrypted token.

8 . The computer network according to claim 2 , wherein the first device comprises an application software operable to generate the identification information, wherein the identification information preferably further comprises an identifier of the application software.

9 . A computer module that provides secure authentication, the module being operable to:
retrieve a token comprising identification information from a first device to be authenticated; automatically retrieve, from a server, a trusted identifier associated with a second device; associate the token with the trusted identifier; send authentication data comprising the associated token and the trusted identifier to the server, wherein the authentication data allow the first device to be authenticated via the trusted identifier based on the identification information comprised in the token, and the authentication data are configured to be written to a database and read from the database.

10 . The computer module according to claim 9 , wherein the second device is a mobile phone and the trusted identifier is the MSISDN.

11 . The computer module according to claim 9 , wherein the token is included in a QR code and the computer module is further operable to scan the QR code to retrieve the token.

12 . A computer-implemented method that provides secure authentication, the method comprising:
generating, by a server, a token comprising identification information; receiving, by a first device, the token; retrieving, by a second device associated with a trusted identifier, the token from the first device; associating, by the second device, the token to the trusted identifier to authenticate the first device at the server by sending authentication data comprising the associated token and the trusted identifier to the server, wherein the authentication data allow the first device to be authenticated via the trusted identifier based on the identification information comprised in the token; and characterized by writing, by the server, the authentication data to a database and reading the authentication data from the database.

13 . A computer program product comprising computer-readable instructions which, when loaded and executed on a suitable system, perform the steps of a secure authentication method according to claim 12 .

Assignees

• Accenture Global Services Ltd

Inventors

• Blasi Luca
• Orsano Alessandro
• Trevisi Emanuele

Classifications

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L9/3215

  using a plurality of channels (network architectures or network communication protocols using different networks H04L63/18) · CPC title

• H04W12/06

  Authentication · CPC title

• G06F21/43 Primary

  wireless channels · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title