Method and system for granting access to a secured website

Patent metadata

Field	Value
Publication number	US-9419969-B2
Application number	US-201214004119-A
Country	US
Kind code	B2
Filing date	Mar 9, 2012
Priority date	Mar 10, 2011
Publication date	Aug 16, 2016
Grant date	Aug 16, 2016

Abstract

A method and system are provided for granting access to a secured website of a content provider. The method includes: detection of a user's request for accessing secured website on a first communication device, the request indicating that at least one access code for accessing secured website is stored on an authentication server; transmission of a request for a validation to a second communication device identified with indication; and after verification of the validation received from the second communication device, forwarding the request for access to the secured website to the content provider using the stored website access code corresponding to the security code.

First claim

The invention claimed is:

1. A method for granting access to a plurality of secured websites of a plurality of content providers, said method comprising:
detecting a user's first request on a first communication device for accessing a first secured website among the plurality of secured websites, of a first content provider among the plurality of content providers, said first request indicating a first access code for accessing said first secured website is stored on an authentication server;
sending a first request to obtain the first access code from the first communication device to the authentication server, in response to detection of the user's first request for accessing said first secured website;
in response to the user's first request, sending a first request for a first validation from the authentication server to a second user communication device of the user associated with the first request;
after verification of a first validation received from the second user communication device by the authentication server, receiving by the first communication device the stored first access code corresponding to the first validation from the authentication server and forwarding the first request for access to the first secured website from the first communication device to the first content provider using the received first access code;
detecting a user's second request on the first communication device for accessing a second secured website among the plurality of secured websites, of a second content provider among the plurality of content providers, said second request indicating a second access code for accessing said second secured website is stored on the authentication server;
sending a second request to obtain the second access code from the second communication device to the authentication server, in response to detection of the user's second request for accessing said second secured website;
in response to the user's second request, sending a second request for a second validation from the authentication server to the second user communication device; and
after verification of a second validation received from the second user communication device by the authentication server, receiving by the first communication device the stored second access code corresponding to the second validation from the authentication server and forwarding the second request for access to the second secured website from the first communication device to the second content provider using the received second access code.

2. The method for granting access according to claim 1 , wherein the first validation is a security code.

3. The method for granting access according to claim 1 , wherein the first validation is an acknowledgment.

4. The method for granting access according to claim 1 , wherein said method further comprises:
detecting said first access code on the first communication device when the user requests for the first time to access said first secured website; and
storing said first access code on the authentication server.

5. The method for granting access according to claim 4 , wherein said method further comprises indicating, on the first communication device, that the first access code to the secured website is stored in the authentication server after having stored said first access code.

6. The method for granting access according to claim 1 , further comprising an initialization step which comprises:
receiving by the authentication server, from the first communication device, contact data identifying the second user communication device, said contact data being input using a secure access module installed on the first communication device;
sending a request for generating the first validation from the authentication server to the second user communication device using the contact data;
generating the first validation on the second user communication device.

7. The method for granting access according to claim 1 , wherein said method further comprises an initialization step which comprises installation of a secure access module on the first communication device, said secure access module being configured to perform at least one of the detection, indication and forwarding steps.

8. The method for granting access according to claim 7 , wherein the secure access module is a plug-in module configured to be installed in a web browser interface of the first communication device.

9. The method of claim 1 , wherein the first and second validations are the same.

10. A user communication device for granting access to a plurality of secured websites of a plurality of content providers, said user communication device comprising:
a processing unit, of the user communication device, comprising a secure access module configured to detect a user's first and second requests for accessing respectively first and second secured websites of said plurality of secured websites, said first and second requests indicating that first and second access codes for accessing said first and second secured websites are stored on an authentication server;
a communication unit, of the user communication device, configured to send respective first and second requests for said first and second access codes to the authentication server after detection of said respective first and second requests by the processing unit, to receive said first and second access codes from the authentication server, and to forward the first and second requests for accessing the respective first and second secured websites to the respective content providers of the first and second secured websites using the first and second access codes received from the authentication server.

11. A system for granting access to a plurality of secured websites of a plurality of content providers, said system comprising:
an authentication server comprising:
a storage device configured to store first and second access codes for accessing first and second of said plurality of secured websites; and
a communication unit configured to receive a user's first and second requests for said respective first and second access codes from a first communication device, to send respective first and second requests for validation to a second user communication device associated with the user, and to send the respective first and second stored access codes to the first user communication device after respective verifications of respective first and second validations received from the second user communication device;

the first communication device, which comprises:
a processing unit comprising a secure access module configured to detect the user's first and second requests for accessing said first and second secured websites, said first and second requests respectively indicating that the first and second access codes for accessing said first and second secured websites are stored on the authentication server;
a communication unit configured to send the first and second requests for said first and second access codes to the authentication server after respective detection of said first and second requests for accessing the first and second secured websites by the processing unit, to receive said first and second access codes from the authentication server, and to forward the respective first and second requests for accessing the first and second secured websites to respective content providers using the respective first and second access codes received from the authentication server; and

the second user communication device, which is configured to receive the first and second requests for validation from the authentication server and, in response to each of said first and sec

Assignees

• Polo Moragon Javier
• Brezmes Llecha Tomas
• Orange

Inventors

• Polo Moragon Javier
• Brezmes Llecha Tomas

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title