EP3284237A1 - Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication - Google Patents

Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication

Info

Publication number
EP3284237A1
EP3284237A1 EP16715799.9A EP16715799A EP3284237A1 EP 3284237 A1 EP3284237 A1 EP 3284237A1 EP 16715799 A EP16715799 A EP 16715799A EP 3284237 A1 EP3284237 A1 EP 3284237A1
Authority
EP
European Patent Office
Prior art keywords
computer system
data
management information
data transmission
control logic
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP16715799.9A
Other languages
German (de)
English (en)
Inventor
Ralf Sommer
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of EP3284237A1 publication Critical patent/EP3284237A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/50—Secure pairing of devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication

Definitions

  • the invention relates to a method enabling secure addressing and secure exchange of security information to thereby transfer data protected from third party access over existing communication networks (e.g., the Internet) and data transmission services.
  • existing communication networks e.g., the Internet
  • Data communications services include social networking, messenger, email, file sharing, web sites, VoIP services, online shop systems, remote desktop systems, virtual private network (VPN) systems, smart home systems, industrial control interfaces, Online video stores, video streams from surveillance cameras, etc. are understood.
  • VPN virtual private network
  • chat data documents, images, videos, shopping data or payment data of an online shop, data in online banking, but also data streams such.
  • chat data VoIP, video from surveillance cameras, video data from online video stores, control and monitoring data from industrial plants or smarthomes, etc. are understood.
  • a computer system e.g. an internet router, smartphone, server, personal computer, laptop, notebook, tablet PC, network components (e.g., switches, routers, load balancers, firewalls, etc.) etc.
  • network components e.g., switches, routers, load balancers, firewalls, etc.
  • a data interface such as e.g. a digital network (e.g., TCP / IP), analog or digital radio networks, optical or acoustic transmission media, etc.
  • the above methods enable potential cyber attackers to gain access to confidential data through stolen security information or software components installed by malicious software (e.g., keys, certificates, ...) - usually without any possibility for the user to detect it.
  • the user usually has no way to verify how securely the security information is stored on the respective target system.
  • these data e.g., encryption components such as keys or certificates, .
  • the data was stolen by both attackers outside and attackers within companies.
  • the present invention seeks to overcome the disadvantages of the prior art described above and to provide a method which is particularly simple and inexpensive to perform and with which secure addressing and secure exchange of security information for encrypted data transmission between different computer systems and secure storage of personal data, so that access to the data of third parties is reliably prevented.
  • the present invention uses a Peer-to-peer approach to enable the direct exchange of security or administrative information between computer systems. Further integration into higher-level management systems (eg PKI or LDAP systems) is still possible.
  • An additional advantage is that the administration is straightforward and can be provided by the end user. For example, accesses can be ad hoc by the individual user.
  • Another advantage of the invention is that the data between the computer systems can also be sent and received via applications and / or data transmission services of other providers.
  • the security of the data is ensured by the encryption with the previously transmitted via the telephony interface (12) security information.
  • This object is achieved by providing computer systems in addition to a network interface, e.g. an Ethernet, NFC, Bluetooth, WLAN, LAN interface also communicate via a telephony interface with associated phone number.
  • a network interface e.g. an Ethernet, NFC, Bluetooth, WLAN, LAN interface also communicate via a telephony interface with associated phone number.
  • the method according to the invention is used for addressing, authentication and secure data transmission between computer systems having at least one network interface (11), at least one data transmission service (20) and at least one telephony interface (12) and at least one memory location (2) for management information.
  • the method operates such that the computer systems are programmed with a control logic mapping program for controlling the interaction of the aforementioned interfaces.
  • the method comprises at least the following steps: a) transferring the management information of a first computer system via the telephony interface to a second computer system; b) checking the management information, in particular the telephone number, of the first computer system with the administrative information stored in the at least one memory location in the second computer system and, if the check is positive, transmitting the management information of the second computer Computer system via the telephony interface to the first computer system and activation of readiness to receive the control logic 10 of the second computer system for data from the data transmission service 20 according to the received or sent management information.
  • the data is encrypted by the control logic 10 according to the received and sent management information and the data transmission is performed or the data is transferred to at least one data transmission service 20 for transmission and the data connections for data transmission (301/302) by the respective data transmission services 20 and / or the control logic to be controlled.
  • the data transmission can also be bidirectional.
  • connection establishment and transmission or reception of the data should be understood as described in FIG.
  • Transfer via the telephony interface is here both the connectionless signaling of the management information on the telephony protocols (eg D-channel protocol in ISDN, SS7 protocol stack, Short Message Service - SMS, etc.) and the connection-oriented transmission (eg Modem tones, manual data entry, video and / or video transmission with biometric identification, etc.).
  • the connectionless signaling of the management information on the telephony protocols eg D-channel protocol in ISDN, SS7 protocol stack, Short Message Service - SMS, etc.
  • connection-oriented transmission eg Modem tones, manual data entry, video and / or video transmission with biometric identification, etc.
  • a variant of the method regarded as favorable provides that the computer systems request an additional identification from the respective other computer system with the administration information, compare with the administrative information stored in the storage space of the respectively requesting computer system, in particular identification marks and authorizations, and if the check is positive Readiness for reception remains activated or the data transmission is carried out and in the case of a negative check the readiness to receive is deactivated or the data transmission is not performed and in particular an alarm notification is issued.
  • the additional identification can be requested or transmitted both via the telephony interface and via the network interface.
  • a further preferred embodiment of the method provides that further communication steps are carried out for the exchange of additional management information, which can take place both before the data transmission, during the data transmission and after the data transmission.
  • additional management information can take place both before the data transmission, during the data transmission and after the data transmission.
  • a preferred data transmission service (20) can be handed over or also the successful receipt of the data can be confirmed.
  • the identification mark is security information as described above.
  • a preferred embodiment of the method provides that the control logic (10), the management information for the data to be transmitted instead of via the telephony interface (12) and also alternatively via optical signals (eg Q / R code, barcode, strings, ...), acoustic signals (eg modem tones, voice, ...), electromagnetic signals, analog or digital radio waves, by manual inputs or by previously made in other ways secure connections (eg NFC, Bluetooth, WLAN, USB, ...) between the computer systems (1, la, lb), in particular bidirectional, be transmitted with the same effect.
  • a further embodiment of the method provides that a first computer system forwards the transmitted management information to a connected computer system (eg an email server, a firewall, a personal computer, etc.) so that this connected computer system represents the data transmission as sender or receiver data or allows data transmission.
  • a connected computer system eg an email server, a firewall, a personal computer, etc.
  • the encryption or decryption of the data can be done by the first computer system or the necessary security information can be passed to the connected computer system.
  • control logic (10) encodes at least part of the data with the previously transmitted management information and transmits it via the telephony interface (12).
  • An embodiment of the method provides that the control logic (10) carries out an automatic check as to whether the displayed telephone number matches the actual subscriber line.
  • An embodiment of the method provides that a first computer system (1, la) in a server role in the network processes requests for data transmission from other computer systems in the network by the control logic (10) and the control logic (10) of the first computer system (1, la) carries out the exchange of the management information with a second and / or third computer system (1, lb) as described above and subsequently transmits the data or returns the management information to the requesting computer systems for data transmission there.
  • An embodiment of the method provides that the control logic (10) of a computer system (1, la, lb) the management information determined according to the preceding claims also at least to another server system (eg firewall, ...) forwards and this then the Processes or permits connections and / or data transfers from the computer system (1, 1a, 1b) or from computer systems from the network with this management information.
  • An embodiment of the method provides that the control logic (10) of the second and / or third computer systems (1, lb) automatically forwards or makes available to the first computer systems (1, la) information and control data as a function of the management information.
  • control logic (10) upon activation of a predetermined signal or by an additional hardware / software module (21) data, in particular emails, SMS, control and monitoring data to computer systems (1) according to one of the aforementioned methods passes.
  • An embodiment of the method provides that the telephone number of the second and / or third computer system (1, lb) is used for another or existing telephony service, in particular a FAX service and / or an answering machine, and the control logic of the second and / or third computer system, the phone number of the first computer system (1, la) compares with the storage in the second and / or third computer system (1, lb) stored phone numbers and does not activate the telephony service in accordance, but the management information for the second and / or third computer system transmitted to the first computer system (1, la).
  • the invention also provides for the use of the method as described above with protocols of other connection-oriented interfaces, in particular with NFC, Bluetooth and WLAN protocols.
  • At least a portion of security information is stored counterfeit-proof and unambiguous in hardware components of the respective computer system (1, 1a, 1b).
  • two computer systems (1, 1a, 1b) exchange management information already prior to the execution of a data transfer operation according to the preceding claims and use this in later data transfer operations to increase security.
  • the exchange of this management information takes place in compliance with the highest possible security standards.
  • a computer system (1, lb) for received data from a data transmission service (20), the associated management information, in particular security information for decryption, from a computer system (1, la) according to methods of the preceding claims picks up or requests.
  • An embodiment of the method provides that the management information exchanged according to one of the preceding claims, in particular security information for the encryption or decryption, is used for a plurality of data transmission operations, without the respective steps for exchanging management information being repeated or performed for each individual data transmission process become.
  • the number of possible data transfer operations can be transferred here with a fixed number or expiration time of the validity of the management information with the transfer of the management information.
  • the transmitted management information is used for a plurality of data transmission services (20).
  • the application to certain data transmission services (20) can be passed here with the management information.
  • a further advantageous embodiment of the invention provides that the exchange of the management information and the data transmission via the data transmission service (20) are decoupled in time, optionally a fixed time for the data transmission with the management information can be transferred.
  • a control logic (10) for the interaction of telephony (12) and network interface (11) and a data transmission service (20) provides a new and secure variant for data exchange between computer systems, especially in the field of wireless communication such as NFC , Bluetooth, WLAN, etc.
  • Many of the aforementioned computer systems today already have both types of connection, ie telephony and network interface, and have at least one data transmission service or can be equipped with additional modules in hardware and / or software.
  • An essential point of the solution according to the invention is that at least part of the management information is transmitted via the telephony system for addressing and authentication.
  • the invention uses the respective telephony protocols and services such as e.g. for ISDN the D-channel, the SS7 protocol stack, a sound / modem connection, SMS, and / or FAX services.
  • the above-mentioned computer systems use this management information to check whether the data has been transmitted with the permissible security information (for example, an allowed telephone number). Subsequently, after a positive check, a data transmission can be carried out.
  • the invention hereby offers a new possibility of using these computer systems without the aid of an additional service such as e.g. DynDNS or vulnerable wireless connection establishment process to achieve.
  • this method can be used without further authentication to allow data transfer from or to these computer systems.
  • a check of the telephone numbers of the respective computer system 1 by the control logic 10 provides an additional preselection of permitted accesses.
  • By the mutual dialing of the numbers by the computer systems 1 can also be prevented that a transmitted number that does not match a subscriber leads to a connection. This prevents as far as possible unauthorized access attempts by attackers via the telephony interface 12 or the network interface 11.
  • control logic a distribution of data transfer operations to different second computer systems according to a predetermined criterion such as number of connections, utilization, availability of the second computer systems, phone number and / or a geographical location.
  • a predetermined criterion such as number of connections, utilization, availability of the second computer systems, phone number and / or a geographical location.
  • the control logic of a computer system can select an optimal connection such as Bluetooth, WLAN, Internet, etc., or allow the user to select the possible connections for data transmission.
  • the invention provides a method, which will be explained in more detail below with reference to the accompanying figures.
  • the same or equivalent parts are provided with the same reference numerals.
  • Figure 1 is a schematic representation of a client-server connection according to the invention with a server and a client.
  • Fig. 2 is a schematic representation of a client-server connection according to the invention with a server and two clients, and
  • Fig. 3 is a schematic representation of a client-server connection according to the invention with two clients to explain a purchase process.
  • FIG. 4 shows a schematic illustration of a data transmission according to the invention with two computer systems using applications and / or services of other providers.
  • FIG. 1 shows a schematic representation of a client-server connection according to the invention with a in the meaning of the invention previously referred to as a second and / or third computer system server 1, lb and in the context of the invention previously referred to as the first computer system client 1, la.
  • the server connection is in this case set up via a control logic 10, in which the first computer system 1a first transmits the connection information from the first computer system 1a to the second computer system 1b via a telephony interface 12 and a first connection 101 via the telephone network 4.
  • the second computer system lb transmits the first computer system la after positive examination, the connection information from the second computer system lb via a second connection 102.
  • the first computer system la activated after positive examination, a network interface 11.
  • the network interface 11 of the first computer system la remains only up to the third connection From the second computer system lb or expiration of a timeout active.
  • the second computer system lb sets up the third connection 103 to the network interface 11 of the first computer system la.
  • the first computer system la transmits a PIN.
  • the client connection now takes place in such a way that the first computer system 1a transmits the connection information from the first computer system 1a to the second computer system 1b via a first connection 101.
  • the second computer system lb transmits the connection information from the second computer system lb via a second connection 102 to the first computer system la.
  • the second computer system lb activates the network interface 11, which activates only up to the fourth connection 104 of the first computer system la or expiry of a timeout remains.
  • the first computer system 1a builds up the fourth connection 104 to the network interface 11 of the second computer system 1b.
  • the first computer system la Upon request of the second computer system lb, the first computer system la transmits a PIN.
  • FIG. 2 shows a schematic representation of a client-server connection according to the invention with a third computer system designated as server 1, 1b and two computer systems designated as clients 1, 1, 1, 1 a 2, more precisely 1, 1, and second computer system 1, 1 a 2.
  • a first computer system 1, lal wants to establish a connection 203 with a second computer system 1, la2.
  • Both computer systems 1, 1, 1, 1 a 2 are already connected to a common third computer system 1, 1 b via an existing connection 200. From this common third computer system 1, lb the two computer systems 1, lal, 1, la2 have already received at least part of the respective connection information via a system message from the third computer system 1, 1b.
  • the first computer system 1, lal sends via the third computer system 1, lb a system message with the complete connection information from the first computer system 1, lal to the second computer system 1, la2.
  • the second computer system 1, la2 sends after positive examination via the third computer system 1, lb the complete connection information (with optional security token) of the second computer system 1, la2 back and waiting for the direct connection of the first computer system 1, lal via the network interface 11th Finally, the second computer system 1, la2 activates the network interface 11.
  • the network interface 11 of the second computer system 1, la2 remains active only until the connection 203 of the first computer system 1, or lapse of a timeout.
  • the first computer system 1 after a positive check, establishes the direct connection 203 to the second computer system 1, la2, wherein the first computer system 1, if any, also provides the optional security token, which is checked by the second computer system 1, la2.
  • the first computer system 1, lal a PIN input by the second computer system 1, la2 be requested.
  • Advantages of this method include the fact that a restriction of access to previously registered numbers is possible.
  • the network interface 11 is only active for a short time and only responds to the data transmitted via the telephony interface 12 connection data such as IP addresses, ports, NFC interface data, Bluetooth, WLAN, etc .. There are no unauthorized access possible.
  • no DOS attacks are possible because the network interface 11 is only active for a short time and only responds to previously transmitted connection data such as IP addresses, ports, NFC interface data, Bluetooth, WLAN, etc.
  • both first and second computer systems la, lal, la2 and the third computer system 1, lb have no constantly active network interfaces 11 and thus are not recognizable or reachable for attacks from the Internet.
  • FIG. 3 shows a schematic representation of a client-server connection according to the invention with two clients to explain a purchase process.
  • the third computer system 1, lb from the aforementioned methods hereby acts as a payment service lb designated computer system, in which both a seller referred to as lal first computer system as well as a buyer called la2 second computer system must register before.
  • the payment process on the Internet 3 proceeds in such a way, for example, that the buyer la2 makes a purchase in an online shop of a seller in which a shopping cart is created.
  • the buyer la2 authenticates himself by telephone to the payment service lb and the seller lal transmits a security token and the payment information for the payment process to the buyer la2 via an internet connection.
  • the buyer la2 subsequently authorizes the payment process with a PIN at the payment service lb and the seller lal authenticates himself with the payment service lb.
  • the seller also transmits the security token and the payment information to the payment service lb.
  • the payment service lb finally validates the security token of buyer la2 and seller lal and the PIN of the buyer la2.
  • the payment service lb will send the payment clearance to buyer la2 and seller lal.
  • the payment process is completed.
  • the payment procedure in an on-site transaction proceeds in such a way that the purchaser la2 makes a purchase and authenticates himself to the checkout service at the cash register via (mobile) telephone at the payment service lb.
  • the seller lal conveys a security token for the payment process and the payment information to the buyer la2, z. B. with NFC, Bluetooth or wireless LAN, possibly also via wired LAN.
  • the buyer la2 authorizes the payment process with a PIN at the payment service lb and the seller lal authenticated at the payment service.
  • the seller also transmits the security token and the payment information to the payment service lb, which in turn validates the buyer / seller security token la2 and the buyer's la2 security token. In the case of a positive check, the payment service lb sends a confirmation to the buyer la2 and the seller lal, which completes the payment process.
  • the payment service lb For encryption, identification by PIN, security token and authorization, a text, a biometric identifier, an electronic key or a mechanical key whose key information is read, for example by a reader in the computer systems la, lal, la2, lb, are used .
  • Advantages of this method include, among other things, that in the entire payment process no payment-specific data such as bank code, account number, credit card number, PIN, etc.
  • Figure 4 shows a schematic representation of a data transmission according to the invention with two computer systems using applications and / or services of other providers.
  • connection parameters in particular encryption parameters
  • the invention uses one of the aforementioned methods (FIG. 1: server and a client / FIG. 2: server and two clients).
  • the data is encrypted by the control logic 10 with the encryption parameters.
  • the data is transmitted by applications and / or services 20 of other providers.
  • the network connections for data transmission (301/302) are controlled by the respective applications and / or services.
  • the control of the applications and / or services 20 is either directly via the control logic 10, by an additional module 21 (hardware and / or software, e.g., sensors of a smart home system such as alarm or video surveillance) or by the user.
  • the control logic 10 can also be controlled by an additional module 21 for exchanging the connection parameters.
  • this method enables easy and secure transport of data over existing (-unsafe) applications and / or services.
  • the latter applications and / or services are, for example, SMS, short message, messenger or other communication services of different, preferably freely selectable providers.
  • the data can not be decrypted and misused by the provider of the applications and / or services or other third parties.
  • FIG. 4 also shows a schematic illustration of a data transmission according to the invention with a computer system previously referred to as second and / or third computer system 1, 1b in the sense of the invention and a computer system previously referred to as first computer system 1, la in the meaning of the invention.
  • the data transmission is controlled via a control logic 10, in which the first computer system la first transfers the management information, in particular the telephone number, from the first computer system 1a to the second computer system 1b via a telephone interface 12 and a first connection 101 via the telephone network 4.
  • the second Computer system lb transmits the management information, in particular the telephone number, from the second computer system 1b via a second connection 102 to the first computer system 1a and activates the reception readiness of the control logic 10 for data from the data transmission service 20 in accordance with the received or sent management information.
  • the first computer system 1a after positively checking the management information, activates the data transmission via a data transmission service 20.
  • the data is encrypted by the control logic 10 in accordance with the received management information and the data transmission is performed and the data is transferred to the data transmission service 20 for transmission.
  • the network connections for data transmission (301/302) are controlled by the respective data transmission services 20.
  • the data transmission can also be bidirectional.
  • the data transmission services 20 are controlled either directly via the control logic 10, by an additional module 21 (hardware and / or software, for example sensors of a smart home system such as alarm or video surveillance) or by the user.
  • the control logic 10 can also be controlled by an additional module 21 for exchanging the management information.
  • this method enables easy and secure transport of data over existing and mostly unsafe data transmission services.
  • the data can not be decrypted and abused by the provider of the data transmission services or other third parties.
  • Advantages of this method include the fact that a restriction of access to previously registered numbers and / or other management information is possible. In addition, all access attempts can be tracked via the telephony interface. There are no unauthorized access possible.
  • connection-oriented interfaces in particular with NFC, Bluetooth, WLAN protocols, analog and digital radio.
  • the invention thus provides a method for addressing, authentication and secure data storage in computer systems 1, lal, la2, lb with a network interface 11 and a telephony interface 12 and a storage space 2 for management information available, in particular for authorized numbers and subscriber PINs such that the computer systems 1, lal, la2, lb with a control logic 10 mapping program for controlling the interaction the above-mentioned interfaces 11 are programmed and the method comprises the following steps: a) transmitting the connection information for the network interface 11 of a first computer system la via the telephony interface 12 to a second and / or third computer system lb; b) checking a telephone number of the first computer system la with the stored in memory space 2 in the second and / or third computer system lb phone numbers and positive check transmission of the connection information for the network interface 11 of the second and / or third computer system lb via the telephony interface 12 to the first Computer system la and activation of the network interface 11 of the second and / or third computer system lb to accept
  • the network interface 11 of the second and / or third computer system lb only permits connections 104 with the connection information of the first computer system 1a
  • the network interface 11 of the first computer system la only links 104 with the connection information of the second and / or or third computer system lb permits
  • the network interfaces 11 of the first and second and / or third computer system la, lb permit connection attempts with the respective connection information only for a short predetermined period of time and not after connection establishment or after expiration of the predetermined period without connection establishment other computer systems are recognizable or reachable.
  • two, ie in each case a first and a second computer systems lal, la2 are already connected to a third computer system lb and first and second computer system lal, la2 via the control logic 10 in the third computer system lb a g) transmitting the connection information for the telephony interface 12 and network interface 11 of the first computer system lal with a system message 201 via the existing connection 200 with the third computer system lb to the second computer system Ia2; h) checking a telephone number of the first computer system lal with stored in memory space 2 of the second computer system la2 phone numbers and positive check transmitted the connection information 202 for the telephony interface 12 and network interface 11 of the second computer system la2 over the existing connection 200 with the third computer system lb to the first computer system lal and activation of the network interface 11 of the second computer system la2 to accept connections 203 based on the connection information of the first computer system lal, and i) checking the number of the second computer system la2
  • this embodiment also provides that j) the network interface 11 of the second computer system la2 only permits connections 203 with the connection information of the first computer system lal; k) the network interface 11 of the first computer system lal only connections 203 with the connection information of the second computer system la2 permits and I) the network interfaces 11 of the first and second computer system lal, la2 only for a short predetermined period, for example, 3-5 seconds connection attempts in the embodiment preferably between 3 and 10 allow connection attempts with the respective connection information and are not recognizable or achievable for other computer systems after connection establishment or after expiration of the predetermined period without connection setup.
  • a short predetermined period for example, 3-5 seconds
  • connection attempts in the embodiment preferably between 3 and 10 allow connection attempts with the respective connection information and are not recognizable or achievable for other computer systems after connection establishment or after expiration of the predetermined period without connection setup.
  • step b) and / or h) the network interface 11 of the second and / or third computer system lb, la2 is activated in order to establish connections based on the connection information of the first computer system la and that in step c) and / or i) the network interface 11 of the first computer system la, lal is activated to accept connections 103 based on the connection information of the second and / or third computer system lb, la2.
  • the second and / or third computer system lb, la2 after connection establishment an identification from the first computer system la, lal requests, with the stored in memory space 2 of the second and / or third computer system lb, la2 Identification tag compares, and if the check is positive, the connection remains activated and if the check is negative, the connection is closed and an alarm notification is issued.
  • the phone number of the first computer system la, lal in memory space 2 of the second and / or third computer system lb, la2 is marked as locked by the control logic and no connection information for the first computer system la, lal be accepted with this number more.
  • the identifier is a text, a biometric identifier, an electronic key or a mechanical key whose key information is read by a reader in the first computer system la, lal.
  • the first computer system la, lal mit the connection information a security token to the second and / or third computer system lb, la2 mitriert that is transferred during the connection via the network interface 11 and by the Control logic 10 in the first computer system la, lal is checked and the connection remains activated in the case of a positive check and the connection is closed in the case of a negative check and an alarm notification is issued.
  • the telephone number of the second and / or third computer system lb, la2 in memory location 2 of the first computer system la, lal by the control logic 10 is marked as locked and no Connection attempts for the second and / or third computer system lb, la2 be made with this number more.
  • two computer systems lal, la2 which are already connected to a third computer system lb and have established a direct connection 203, mutually authenticate each other only via the common third computer system lb and the method the following further steps comprises: m) the first computer system lb requests a security token from the third computer system lb via the connection 200 and sends this to the second computer system la2 via the direct connection 203; n) the second computer system la2 forwards the security token to the third computer system 1b via the connection 200; o) the third computer system lb compares the two security tokens and sends in each case a system message with the result of the comparison to first and second computer system lal, la2, and p) the control logic 10 of these computer systems lal, la2 checks the system message with the result of the comparison and if the test is positive leaves the connection 203 open and, if the test is negative, closes the direct connection 203 and issues an alarm message.
  • two computer systems carry out a payment process and the method comprises the following further steps: q) the control logic 10 in the computer system 1 of a vendor generates a security token, and a computer system 1, la2 of a buyer receives the security token along with the payment information via the direct connection 203 from the computer system 1 of the seller; r) the computer system 1, lal of the seller forwards the payment information via the connection 200 together with the security token to the computer system lb of the payment service; s) computer system 1, la2 of the buyer forwards the payment information together with the security token via the connection 200 to the computer system lb of the payment service, and t) the computer system 1, la2 of the buyer authorizes the payment transaction via the connection 200 at the computer system lb of the payment service with a PIN, and u) a control logic 10 in the computer system lb of the payment service compares the security token from the computer system 1, the seller and the computer system 1, la2 of the buyer and validates the PIN of
  • connection 203 via NFC, Bluetooth, wireless LAN or wired LAN, is established.
  • the payment information between computer system 1, lal of the seller and computer system 1, la2 of the buyer in a shop or online shop instead of a direct connection 203 via an optical signal (eg Q / R code, bar code, strings, ...), an acoustic signal (eg modem tones, voice, ...) or by manual input between seller and buyer.
  • a second device for example smartphone
  • the first device eg, PC or notebook
  • control logic 10 the data for the payment process between the computer system 1, lal of the seller and computer system lb of the payment service or computer system 1, la2 of the buyer and computer system lb of the payment service via other network connections transferred, for example, those that were not prepared as stated above.
  • a text, a biometric identifier, an electronic key or a mechanical key whose key information is read by a reader in the computer systems la, lb, lal, la2 be used for encryption, identification by PIN, security token and authorization a text, a biometric identifier, an electronic key or a mechanical key whose key information is read by a reader in the computer systems la, lb, lal, la2 , be used.
  • control logic 10 transmits at least a portion of the data acquired in the preceding steps via the telephony interface 12.
  • control logic 10 upon activation of a predetermined signal, forwards data, in particular emails, SMS and FAX, to computer systems 1 without the aid of other Internet services such as DNS and DynDNS.
  • control logic 10 carries out an automatic check as to whether the displayed telephone number matches the actual subscriber line.
  • connection requests of the first computer systems la, lal by the control logic 10 in a second and / or third computer system lb, la2 to different second and / or third computer systems lb, la2 according to a predetermined criterion, in particular a number of connections and / or a load and / or availability of the second and / or third computer systems lb, la2 and / or a telephone number and / or geographical location are distributed.
  • control logic 10 of a computer system 1 the determined connection parameters also to another Server system (eg firewall, 7) forwards and this then allows the connections from the computer system 1 or computer systems from the network with these connection parameters.
  • control logic 10 of the second and / or third computer systems 1b, la2 automatically forwards or makes available to the first computer systems la as a function of the connection information information and control data.
  • the telephone number of the second and / or third computer system lb is used for another or existing telephone network, in particular a FAX service and / or an answering machine, and the control logic 10 of the second and / or third computer system lb compares the number of the first computer system la with the numbers stored in memory location 2 of the second and / or third computer system lb and activates the telephony service if they match, but the connection data for the second and / or third computer system lb to the first computer system la transmitted.
  • connection information between two or more computer systems 1 are exchanged by the control logic 10 via the telephony interface.
  • the data to be transmitted is encrypted by the control logic 10.
  • the encrypted data is sent and received via applications and / or services 20 of other providers (e.g., social networks, messengers, web servers, e-mail services, other data transmission services, etc.).
  • applications and / or services 20 of other providers e.g., social networks, messengers, web servers, e-mail services, other data transmission services, etc.
  • the security of the data is ensured by encryption with the security information previously transmitted over the telephony interface (e.g., encryption keys, security tokens, PINs, biometric identifiers, etc.).
  • the control of the applications and / or services 20 is either directly via the control logic 10, by an additional module 21 (hardware and / or software, e.g., sensors of a smart home system such as alarm or video surveillance) or by the user.
  • the control logic 10 can also be controlled by an additional module 21 for exchanging the connection parameters.
  • the method described above should preferably be used in conjunction with protocols of other connection-oriented interfaces, in particular with NFC, Bluetooth and WLAN protocols.
  • the invention relates to a method with which the secure addressing and authentication for the establishment of connections and the secure storage of data and the prevention of the disclosure of data to third parties is made possible. Furthermore, the invention allows secure payment via data connections. It therefore relates in particular to an addressing, authentication and data storage method for "private cloud" networks and secure payment via data connections. According to the current state of the art, there are today two widespread methods for addressing computer systems on the Internet, namely the DNS service or the addressing of permanently assigned IP addresses.
  • Dynamic IP addresses as assigned by the majority of Internet service providers to the customer devices, can only be used by way of Internet services (eg DynDNS.org, NolP.com, Selfhost.de, TZODNS.com or dynamic DNS services of the Internet Provider) for addressing a particular computer system.
  • a computer system is to be understood, for example, as an Internet router, smartphone, server, personal computer, laptop, notebook, tablet PC, etc.
  • the aforementioned methods allow potential attackers from the Internet via DNS or the IP address to attack the computer systems. In this case, control of the computer systems may be obtained, or so-called DOS (Denial of Service) attacks on these computer systems may be carried out.
  • DOS Delivery of Service
  • dynamic DNS services it is also possible that the access data for the dynamic DNS service are stolen.
  • Chip cards and one-time passwords (TAN / smsTAN) for banking transactions can also be abused by technical means. So there are already known cases in which smsTANs intercepted and abused were. With wireless connections such as NFC, Bluetooth, WLAN, etc., there is a danger that the connection establishment and the wireless transmission of data by wirebreakers are bugged. As a result, there are a variety of possible attacks to gain access to the computer systems or to misuse the data.
  • account data or credit card data In the case of payment transactions via the Internet, account data or credit card data generally has to be transmitted to the seller or the online shop. This data is stored in most cases in the computer systems at the seller. Again, the user usually has no way to verify how secure the data stored in the computer systems at the seller. There are a variety of cases in which this data has been stolen and misused. The data was stolen by both attackers outside and by attackers within these companies.
  • the present invention seeks to overcome the shortcomings of the prior art described above and to provide a method which is particularly simple and inexpensive to perform and which provides secure addressing and authentication for connections between different computer systems, e.g. Internet routers, smartphones, servers, personal computers, etc., as well as a secure storage of personal data, so that a disclosure of data to third parties is avoided.
  • the invention seeks to enable secure payment for online shopping on the Internet or shopping in stores.
  • Another advantage of the invention is that the data can also be sent and received between the computer systems via applications and / or services of other providers (for example social networks, messengers, web servers, e-mail services, other data transmission services, etc.).
  • the security of the data is ensured by encryption with the security information previously transmitted over the telephony interface (e.g., encryption keys, security tokens, PINs, biometric identifiers, etc.).
  • This object is achieved in that computer systems in addition to a network interface, such as an Ethernet, NFC, Bluetooth, WLAN, LAN interface via a telephony interface communicate with the associated telephone number.
  • the method according to the invention is used for addressing, authentication and secure data storage in computer systems with at least one network interface and at least one telephony interface and at least one memory location for management information, in particular for authorized numbers and subscriber PINs such that the computer systems with a control logic mapping program for Control of the interaction of the aforementioned interfaces are programmed.
  • the method comprises at least the following steps:
  • the method can also be used in systems with three computer systems. If, in a preferred variant of the method, two computer systems provided for communication are already connected to a third computer system and if a direct connection via the network interface is to be established via the control logic in the third computer system, the method advantageously comprises the following further steps: g) transmission of the Connection information for the telephony interface and network interface of the first Computer system with a system message over the existing connection with the one third computer system to the second computer system; h) checking a telephone number of the first computer system with stored in memory space of the second computer system numbers and positive examination transfer the connection information for the telephony interface and network interface of the second computer system via the existing connection with the third computer system to the first computer system and activation of the network interface of the second computer system to accept connections based on the connection information of the first computer system, and
  • the method is further developed in that in step b) and / or h) the network interface of the second and / or third computer system is activated in order to establish connections based on the connection information of the first computer system and that in step c) and / or i) the network interface of the first computer system is activated to accept connections based on the connection information of the second and / or third computer system.
  • a variant of the method which is regarded as favorable provides that the second and / or third computer system requests an identification from the first computer system after connection establishment, compares it with the identifier stored in the storage space of the second and / or third computer system, and if the check is positive, the connection remains activated and if the check is negative, the connection is closed and, in particular, an alarm notification is issued.
  • the method in that after a configurable number in particular to between 1 and 15, preferably by between 2 and ⁇ 12, particularly preferably after between 3udn 10 negative identification tests, the number of the first computer system in the memory space of the second and / or third computer system by the Control logic is marked as locked and no connection information for the first computer system with this number are accepted more.
  • the identifier is a text, a biometric, an electronic key or a mechanical is key whose key information is read by a reader on the first computer system is.
  • a preferred embodiment of the method provides that the first computer system with the connection information mitellet a security token to the second and / or third computer system, which is passed during connection setup via the network interface and checked by the control logic feedback in the first computer system and positive Checking the connection remains activated and, in the event of a negative check, the connection is closed and an alarm message is issued.
  • the number of the second and / or third computer system in the memory of the first computer system is marked by the control logic as locked and made no attempts to connect the second and / or third computer system with this number more become.
  • a first and a second computer system which are each already connected to a third computer system and have established a direct connection, mutually authenticate each other only via the common third computer system and the method comprises the following further steps: m) the first computer system requests a security token from the third computer system via the connection and forwards it to the second computer system via the direct connection; n) the second computer system forwards the security token to the third computer system via the connection; o) the one third computer system compares the two security tokens and each sends a system message with the result of the comparison to first and second computer systems, and p) the control logic of each of the first and second computer system checks the system message with the result of the comparison and leaves If the test is positive, the connection is open and, if the test is negative, closes the direct connection and issues an alarm message.
  • An embodiment of the method described above provides that in each case a first and a second computer system are provided to perform a payment transaction of a buyer via a first computer system and a seller via a second computer system.
  • the payment process can be carried out, for example, via a third computer system, for example, a payment services.
  • the method advantageously comprises the further steps, wherein q) the control logic in the computer system of the vendor generates a security token, and the purchaser or the computer system of the purchaser via the direct connection from the vendor or the computer system of the vendor security Token, preferably together with payment information; r) the seller or the computer system of the seller forwards the payment information about the connection together with the security token to a payment service or a computer system of the payment service; s) the buyer or the computer system of the buyer, the payment information together with the security token over the connection to one Paid-service or the computer system of the payment service forwards; t) the purchaser or the computer system of the purchaser authorizes the payment transaction via the connection with the payment service or the computer system of the payment service with a PIN or the like, and u) a control logic in the payment service or the computer system of the Payment Services the security token from the seller or the computer system of the seller and the buyer or the computer system of the buyer compares and validated the PIN of the buyer or the computer system of the buyer and the
  • the payment information between seller or computer system of the seller and buyer or computer system of the buyer in a shop or online store instead of a direct connection via an optical signal (eg Q / R Code, barcode, strings, ...), an acoustic signal (eg modem tones, voice, ...) or by manual input between seller or computer system of the seller and buyer or computer system of the buyer are transmitted.
  • a second device for example smartphone
  • the first device e.g., PC or notebook
  • the first device in this context assumes the role of a terminal of the seller or the computer system of the seller.
  • control logic stores the data for the payment transaction between the seller or computer system of the seller and the payment service or the computer system of the payment service or buyer or computer system of the buyer and payment service or payment service.
  • Computer system of the payment service can also transmit over, for example, existing network connections, which were not prepared as previously stated.
  • a text, a biometric identifier, an electronic key or a mechanical key whose key information is read by a reader in the computer systems is used for the encryption, identification by PIN, security token and authorization. It is advantageous if, for small amounts of data, in particular for a payment process, the control logic transmits at least part of the data acquired in the preceding steps via the telephony interface. As low is also considered if the control logic upon activation of a given signal, forwarding data, in particular emails, SMS and FAX, to computer systems without the aid of other Internet services such as DNS and DynDNS.
  • An embodiment of the method provides that the control logic performs an automatic check as to whether the displayed telephone number matches the actual subscriber line.
  • An embodiment of the method provides that connection requests from a first computer system by the control logic in a second and / or third computer system to different second and / or third computer systems according to a predetermined criterion, in particular a number of connections and / or a load and / or an availability of the second and / or third computer systems and / or a telephone number and / or a geographical location are distributed.
  • a predetermined criterion in particular a number of connections and / or a load and / or an availability of the second and / or third computer systems and / or a telephone number and / or a geographical location are distributed.
  • An embodiment of the method provides that a computer system in a server role in the network connection requests or requests for name resolution (eg DNS requests, ...) of other computer systems in the network processed by the control logic and the control logic of the first computer system, the exchange of Performs connection information with a second and / or third computer system as stated above and then establishes the connection or returns the connection parameters (eg IP address, port number, ...) to the requesting computer systems.
  • An embodiment of the method provides that the control logic of a computer system also forwards the connection parameters determined according to the preceding claims to at least one other server system (eg firewall,...) And then communicates these with the connections from the computer system or computer systems from the network allows these connection parameters.
  • An embodiment of the method provides that the control logic of the second and / or third computer systems automatically forwards or makes available to the first computer systems information and control data as a function of the connection information.
  • An embodiment of the method provides that the telephone number of the second and / or third computer system is used for another or existing telephony service, in particular a FAX service and / or an answering machine, and the control logic of the second and / or third computer system, the number of the first computer system compared with the stored in the storage space of the second and / or third computer system numbers and does not activate the telephony service in accordance, but transmits the connection data for the second and / or third computer system to the first computer system.
  • the element referred to as telephony interface alternatively by optical signals (eg Q / R code, barcode, character strings), acoustic signals (eg modem tones, speech), by manual inputs or by previously on to- secure connections (eg NFC, Bluetooth, WLAN, USB, ...) are made available with the same effect.
  • optical signals eg Q / R code, barcode, character strings
  • acoustic signals eg modem tones, speech
  • manual inputs or by previously on to- secure connections eg NFC, Bluetooth, WLAN, USB, .
  • connection information for the network interface 11 can then be transmitted via these optical signals (eg Q / R code, barcode, character strings), acoustic signals (eg modem tones, speech, or the like), manual inputs or by the previously made in other ways secure connections (eg NFC, Bluetooth, WLAN, USB) between the computer systems 1, la, lal, la2, lb be transmitted.
  • a transmission can then preferably also be bidirectional.
  • the invention also provides for the use of the method as described above with protocols of other connection-oriented interfaces, in particular with NFC, Bluetooth and WLAN protocols.
  • connection information may include, for example, TCP / 1 addresses, TCP / IP ports, user names, locations, encryption parameters, and so on.
  • the invention uses the respective telephony protocols and services such as D-channel ISDN, a sound / modem connection, SMS, and / or FAX services.
  • the aforementioned computer systems use this connection information to check whether the data has been transmitted with a permissible number. Subsequently, after a positive check, a data connection can be established.
  • the invention hereby offers a new possibility of achieving these computer systems without the aid of an additional service such as DynDNS or vulnerable wireless connection setup methods.
  • this method can also be used without further authentication to allow access to these computer systems.
  • An essential further point of the solution according to the invention consists in the fact that the listeners of the network interface are activated only for a short period of time (a few seconds) and thereby only react to connection data that was previously transmitted via the telephony interface.
  • a listener is understood to mean an interface or service to which a computer system can establish a connection. After connection establishment or after expiration of a predetermined time period ("Timeout") without connection setup the computer systems are not recognizable or attainable for other computer systems.
  • a check of the telephone numbers of the respective computer system by the control logic offers an additional preselection of permitted accesses. By the mutual dialing of the numbers by the computer systems can also be prevented that a transmitted number that does not match a subscriber leads to a connection.
  • a distribution of computer systems to different second computer systems according to a predetermined criterion such as number of connections, utilization, availability of the second computer systems, phone number and / or a geographical location.
  • a predetermined criterion such as number of connections, utilization, availability of the second computer systems, phone number and / or a geographical location.
  • the control logic of a computer system can select an optimal connection such as Bluetooth, WLAN, Internet, etc., or allow the user to select the possible connections.
  • the invention provides three methods, which will be explained in more detail below with reference to the attached figures.
  • the data transmission using applications and / or services of other providers is shown in FIG. The same or equivalent parts are provided with the same reference numerals.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)

Abstract

L'invention concerne un procédé d'adressage et d'authentification sécurisés ainsi que d'échange sécurisé d'informations d'administration dans des systèmes informatiques (1), les informations d'administration étant transmises aux systèmes informatiques (1) par l'intermédiaire des interfaces de téléphonie (12) respectives et un chiffrement de données étant exécuté, lesquelles étant ensuite transmises de manière sécurisée contre l'accès par des tiers par le biais de réseaux de communication existants (par ex. Internet) et de services de transmission de données (20) (par ex. Messenger, E-mail, etc.).
EP16715799.9A 2015-03-18 2016-03-18 Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication Withdrawn EP3284237A1 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
DE102015104077 2015-03-18
DE102015106440.5A DE102015106440A1 (de) 2015-03-18 2015-04-27 Verfahren zur Adressierung, zum Schlüsselaustausch und zur sicheren Datenübertragung in Kommunikationssystemen
PCT/EP2016/056040 WO2016146839A1 (fr) 2015-03-18 2016-03-18 Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication

Publications (1)

Publication Number Publication Date
EP3284237A1 true EP3284237A1 (fr) 2018-02-21

Family

ID=56853042

Family Applications (1)

Application Number Title Priority Date Filing Date
EP16715799.9A Withdrawn EP3284237A1 (fr) 2015-03-18 2016-03-18 Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication

Country Status (3)

Country Link
EP (1) EP3284237A1 (fr)
DE (1) DE102015106440A1 (fr)
WO (1) WO2016146839A1 (fr)

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ATE242947T1 (de) * 2000-01-06 2003-06-15 Swisscom Ag Authentifikation eines abonnenten eines telekommunikationsdienstes mittels einer häufig gewählten zieladresse
US7936746B2 (en) * 2009-03-18 2011-05-03 Avaya Inc. Multimedia communication session coordination across heterogeneous transport networks
DE102013105781A1 (de) * 2013-06-05 2014-12-11 Ralf Sommer Verfahren zur Adressierung, Authentifizierung und sicheren Datenspeicherung in Rechnersystemen

Also Published As

Publication number Publication date
WO2016146839A1 (fr) 2016-09-22
DE102015106440A1 (de) 2016-09-22

Similar Documents

Publication Publication Date Title
CN102006271B (zh) 用于在线交易的ip地址安全多信道认证
CN105357186B (zh) 一种基于带外验证和增强otp机制的二次认证方法
DE102004045147A1 (de) Einstellungsinformations-Verteilungsvorrichtung, Verfahren, Programm und Medium, Authentifizierungseinstellungs-Transfervorrichtung, Verfahren, Programm und Medium und Einstellungsinformations-Empfangsprogramm
WO2007045395A1 (fr) Dispositifs et procédés permettant de réaliser des opérations cryptographiques dans un système de réseau informatique serveur-client
DE102008062984A1 (de) Prozess zur Authentifizierung eines Nutzers durch ein Zertifikat unter Verwendung eines Ausserband-Nachrichtenaustausches
DE10124427A1 (de) System und Verfahren für einen sicheren Vergleich eines gemeinsamen Geheimnisses von Kommunikationsgeräten
EP3005651B1 (fr) Procédé d'adressage, d'authentification et de sauvegarde sécurisée de données dans des systèmes informatiques
DE102011055297B4 (de) Verfahren sowie Netzwerk-System und Authentifizierungsvorrichtung zur Authentifizierung in einer Netzwerkapplikation
DE102017121648B3 (de) Verfahren zum anmelden eines benutzers an einem endgerät
DE60224391T2 (de) Sicherer Zugang zu einem Teilnehmermodul
DE102017006200A1 (de) Verfahren, Hardware und System zur dynamischen Datenübertragung an ein Blockchain Rechner Netzwerk zur Abspeicherung Persönlicher Daten um diese Teils wieder Blockweise als Grundlage zur End zu Endverschlüsselung verwendet werden um den Prozess der Datensammlung über das Datenübertragungsmodul weitere Daten in Echtzeit von Sensoreinheiten dynamisch aktualisiert werden. Die Blockmodule auf dem Blockchaindatenbanksystem sind unbegrenzt erweiterbar.
CN108183906B (zh) 时间银行管理方法、服务器、终端、存储介质及电子设备
US7631344B2 (en) Distributed authentication framework stack
KR20170070379A (ko) 이동통신 단말기 usim 카드 기반 암호화 통신 방법 및 시스템
CN113194069B (zh) 一种基于区块链的通讯溯源方法、通讯溯源装置及介质
WO2016146839A1 (fr) Procédé d'adressage, d'échange de clés et de transmission sécurisée de données dans des systèmes de communication
EP2661022A2 (fr) Procédé de communication sécurisée entre un terminal mobile et un appareil d'un système domotique ou une communication de porte
EP2933974B1 (fr) Procédé d'authentification téléphonique d'utilisateurs de réseaux publics ou privés destinés à l'échange de données
DE102017012249A1 (de) Mobiles Endgerät und Verfahren zum Authentifizieren eines Benutzers an einem Endgerät mittels mobilem Endgerät
EP2397960A1 (fr) Procédé de lecture d'attributs d'un jeton d'identification sur une carte à puce de télécommunications et un système d'ordinateur-serveur
DE102015013949A1 (de) Eine Soft- u. Hardwarekombination genannt "Dome-Ware" für den verschlüsselten und gegen Manipulationen gesicherten Datenaustausch zwischen mindestens zwei prozessorgesteuerten Endgeräten, geeignet um "Man-In-The-Middle"-Angriffe zu erkennen und abzuwehre
Al-Ibrahim et al. Cookie-less browsing
EP2591583B1 (fr) Méthode de d'encryptage de données et de transmission sécurisée via internet
DE102011110898A1 (de) Verfahren zur Authentifizierung eines Benutzers zum Gewähren eines Zugangs zu Diensten eines Computersystems, sowie zugehöriges Computersystem, Authentifizierungsserver und Kommunikationsgerät mit Authentifizierungsapplikation
JP2005227993A (ja) ネットワークシステムのアクセス認証方法

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20171018

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20180807