FI105378B - A method for determining usernames and passwords for information systems - Google Patents

Description

105378

A method for determining usernames and passwords for information systems

The invention relates to a method for determining usernames and passwords for information systems according to the preamble of claim 1.

By "information systems" we mean, for example, Internet pages, their web pages or other database-based information systems.

Existing services operate through the operator, such as an Internet operator, giving its customers letters in writing or at the point of sale in writing. If the customer forgets the codes, they are reactivated, for example, at the point of sale at the terminal.

According to the prior art, the generation of logos on physical media is slow and expensive. Customer identification requires a letter or visit to the point of sale. Forgetting the codes causes unnecessary work for the operator. The process is slow for the customer (mail, point of sale visit).

The invention is based on the fact that a user sends a standard short message containing user ID and password information to a predetermined service number, the telephone network identifies the sender based on the A number and determines that user ID and password information according to the transmitted short message. In one preferred embodiment of the invention, the user is a mobile phone user having an unambiguous, e.g., SIM card PIN.

More precisely, the process of the invention is characterized in what is disclosed in the characterizing part of claim 2 105378.

The invention provides considerable advantages.

5 There is no need to produce any physical media such as a letter. Customer identification is typically based on the SIM card PIN and A-number. No mailing or point-of-sale visits required. Forgetting the codes does not cause any action on the part of the operator, customer 10 reactivates the codes themselves. Obtaining an ID is a quick procedure for the customer, and can be done at any time on-line.

The user is free to choose, within certain limits, the password 15 and the username. The user can re-activate the account himself / herself after the user forgets his / her username and / or password. The service is substantially easier to use than existing services that solve the same problems. The user can change the IDs as often as 20 wishes and the operator constantly knows the real user of the A-number.

The invention will now be further explored by way of exemplifying embodiments of the accompanying drawings.

25

Figure 1 is a flow chart of one method according to the invention.

Fig. 2 is a block diagram of one t ·: 30 system according to the invention. , \

By means of the invention, for example, a mobile telephone operator (GSM-900/1800) can self-service user IDs and passwords, for example, to web pages that require a user ID and password. The object of the invention is to substantially speed up the service provided to the customer by 105378 3 and to substantially reduce the workload and cost of the operator in the distribution and maintenance of the ID. The operator's customer (or possibly the operator himself) handles the distribution and maintenance of the accounts as a self-service.

Particularly advantageously, the invention is applicable, for example, to the allocation of user IDs of a mobile operator's own WWW pages, whereby, for example, an Internet-based SMS service may be implemented on such WWW pages. Effective user ID and password control 10 can provide customers with free text messaging, so that the identity of the sender can be determined by the user ID in case of problems.

According to Figure 1, the service according to the invention operates as follows:

For example, a mobile text message (SMS) message is formed in the mobile phone in block 1, which in block 2 20 is sent to the service number abcdef. The message contents are for example KKK.SERV username password. This message is routed to a server that identifies the service and sender from the AKK number of the KKK.SERV keywords to the client and initiates a process on the server that updates the 25 web server user databases according to block 3.

The update process checks the validity of username and password information according to predefined rules, and opens or updates the user IDs in the WWW server user database * 1 ': 30, and returns an acknowledgment to the mobile phone via SMS. The acknowledgment shall state whether the proposed * symbols have been accepted or not and why not in accordance with block 4.

According to Figure 2, the technical implementation principle of the service according to the invention is such that a server 14 capable of receiving and communicating over a data connection (TCP / IP, X.25) is connected to a text message center 13 (SMSC) of the mobile telephone network 10 105378 4. sends text messages from / to telephones 12. The server 14 in turn updates the database 15 of the web server 11 of the Internet network 11.

For each of the 12 SMS messages sent from the telephone, the server 14 receives the sender's A number and a written message. The A number can be used to restrict service to specific customers only, for example, all customers of the operator.

In addition to cellular networks, the invention is also applicable to a digital landline network capable of transmitting text messages. The limitation here is information security, since only A subscriber identity is available to identify the sender of the message.

*

Claims (2)

5, 105378 A method for assigning user names and passwords to information systems by means of a digital telephone network (10), characterized in that a defined short message message containing user ID and password information is received from a user to a predetermined service number, - the telephone network (10) Based on the A-number and sets the user name and password information for that user to match the short message sent. A method for determining usernames and passwords for web pages 20 in a digital cellular network according to claim 1, characterized in that the telephone network (10) recognizes the user's PIN and the web service provider sends back a confirmation of the user name and password. * · »105378 6