JP6556145B2 - モバイルアプリケーションの安全性を確保する方法および装置 - Google Patents

モバイルアプリケーションの安全性を確保する方法および装置 Download PDF

Info

Publication number
JP6556145B2
JP6556145B2 JP2016544601A JP2016544601A JP6556145B2 JP 6556145 B2 JP6556145 B2 JP 6556145B2 JP 2016544601 A JP2016544601 A JP 2016544601A JP 2016544601 A JP2016544601 A JP 2016544601A JP 6556145 B2 JP6556145 B2 JP 6556145B2
Authority
JP
Japan
Prior art keywords
nfc
short
wireless communication
range wireless
authentication information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2016544601A
Other languages
English (en)
Japanese (ja)
Other versions
JP2017503427A5 (cg-RX-API-DMAC7.html
JP2017503427A (ja
Inventor
マリエン、ディルク
Original Assignee
ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング
ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング, ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング filed Critical ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング
Publication of JP2017503427A publication Critical patent/JP2017503427A/ja
Publication of JP2017503427A5 publication Critical patent/JP2017503427A5/ja
Application granted granted Critical
Publication of JP6556145B2 publication Critical patent/JP6556145B2/ja
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H04L63/0838—Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H04L63/0846—Network architectures or network communication protocols for network security for authentication of entities using passwords using time-dependent-passwords, e.g. periodically changing passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/068—Authentication using credential vaults, e.g. password manager applications or one time password [OTP] applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Telephone Function (AREA)
JP2016544601A 2013-12-31 2014-12-23 モバイルアプリケーションの安全性を確保する方法および装置 Active JP6556145B2 (ja)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US201361922215P 2013-12-31 2013-12-31
US61/922,215 2013-12-31
PCT/US2014/072102 WO2015103031A1 (en) 2013-12-31 2014-12-23 A method and apparatus for securing a mobile application

Related Child Applications (1)

Application Number Title Priority Date Filing Date
JP2018243834A Division JP6629952B2 (ja) 2013-12-31 2018-12-27 モバイルアプリケーションの安全性を確保する方法および装置

Publications (3)

Publication Number Publication Date
JP2017503427A JP2017503427A (ja) 2017-01-26
JP2017503427A5 JP2017503427A5 (cg-RX-API-DMAC7.html) 2017-03-30
JP6556145B2 true JP6556145B2 (ja) 2019-08-07

Family

ID=52350373

Family Applications (2)

Application Number Title Priority Date Filing Date
JP2016544601A Active JP6556145B2 (ja) 2013-12-31 2014-12-23 モバイルアプリケーションの安全性を確保する方法および装置
JP2018243834A Active JP6629952B2 (ja) 2013-12-31 2018-12-27 モバイルアプリケーションの安全性を確保する方法および装置

Family Applications After (1)

Application Number Title Priority Date Filing Date
JP2018243834A Active JP6629952B2 (ja) 2013-12-31 2018-12-27 モバイルアプリケーションの安全性を確保する方法および装置

Country Status (6)

Country Link
US (1) US9510192B2 (cg-RX-API-DMAC7.html)
EP (1) EP3090521B1 (cg-RX-API-DMAC7.html)
JP (2) JP6556145B2 (cg-RX-API-DMAC7.html)
KR (1) KR101706173B1 (cg-RX-API-DMAC7.html)
CN (1) CN106233689B (cg-RX-API-DMAC7.html)
WO (1) WO2015103031A1 (cg-RX-API-DMAC7.html)

Families Citing this family (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013034681A1 (en) * 2011-09-08 2013-03-14 Ehrensvaerd Jakob Devices and methods for identification, authentication and signing purposes
GB2516686B (en) * 2013-07-30 2018-02-07 Paxton Access Ltd Communication method and system
JP6556145B2 (ja) * 2013-12-31 2019-08-07 ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング モバイルアプリケーションの安全性を確保する方法および装置
US9952744B2 (en) * 2014-11-19 2018-04-24 Imprivata, Inc. Crowdsourced determination of movable device location
US20160261588A1 (en) * 2015-03-04 2016-09-08 Tapcentive, Inc. Secure nfc token supporting escalating authentication of nfc exchanges
US9998181B1 (en) * 2015-04-09 2018-06-12 Cellotape, Inc. Method, system and apparatus for selectively accessing content at a device
KR200478493Y1 (ko) * 2015-04-09 2015-10-14 (주)예원조경건설 스마트 안내표지판
RU2018114639A (ru) * 2015-09-21 2019-10-23 УанСпэн Интернэшнл ГмбХ Многопользовательский строгий аутентификационный маркер
US10817593B1 (en) * 2015-12-29 2020-10-27 Wells Fargo Bank, N.A. User information gathering and distribution system
WO2017117520A1 (en) * 2015-12-30 2017-07-06 Vasco Data Security, Inc. A method, system and apparatus using forward-secure cryptography for passcode verification
SG10201600192TA (en) * 2016-01-11 2017-08-30 Mastercard Asia Pacific Pte Ltd A Method For Dynamic Authentication Of An Object
FR3049414A1 (fr) * 2016-03-25 2017-09-29 Orange Enregistrement de service dans un reseau local
CN105915541A (zh) * 2016-06-07 2016-08-31 惠州Tcl移动通信有限公司 基于nfc的移动终端密码保存与恢复处理方法及系统
US20230360023A1 (en) * 2016-06-15 2023-11-09 Capital One Services, Llc Techniques to process contactless card functions in a multiple banking system environment
KR102526959B1 (ko) * 2016-10-27 2023-05-02 삼성전자주식회사 전자 장치 및 그의 동작 방법
JP2019067348A (ja) * 2017-10-02 2019-04-25 聡子 荻原 ワンタイムパスワード自動送信機
EP3502998A1 (en) * 2017-12-19 2019-06-26 Mastercard International Incorporated Access security system and method
CN108810836B (zh) 2018-06-12 2020-06-16 飞天诚信科技股份有限公司 一种向用户提供近场通信设备信息的方法及系统
EP3582166A1 (en) * 2018-06-15 2019-12-18 Thales Dis France SA Method and system to create a trusted record or message and usage for a secure activation or strong customer authentication
EP3671498B1 (fr) * 2018-12-20 2023-08-09 EM Microelectronic-Marin SA Procede d'authentification securisee d'un transpondeur en communication avec un serveur
DE102019108049A1 (de) * 2019-03-28 2020-10-01 Pilz Gmbh & Co. Kg Zugriffssteuerungssystem zur Steuerung eines Zugriffs eines Nutzers auf eine oder mehrere Betriebsfunktionen einer technischen Anlage
US11521213B2 (en) * 2019-07-18 2022-12-06 Capital One Services, Llc Continuous authentication for digital services based on contactless card positioning
US11455617B2 (en) * 2019-10-04 2022-09-27 Visa International Service Association Type 4 NFC tags as protocol interface
US11432149B1 (en) 2019-10-10 2022-08-30 Wells Fargo Bank, N.A. Self-sovereign identification via digital credentials for selected identity attributes
US10733283B1 (en) * 2019-12-23 2020-08-04 Capital One Services, Llc Secure password generation and management using NFC and contactless smart cards
JP7669029B2 (ja) * 2021-04-12 2025-04-28 株式会社アクアビットスパイラルズ アクション制御システム、アクション制御サーバ及びアクション制御方法
SE2150719A1 (en) * 2021-06-07 2022-10-04 Total Security Stockholm Ab System and method for taking an access control decision based on a virtual key
CN115695064A (zh) * 2021-07-28 2023-02-03 佛山市顺德区美的电子科技有限公司 一种家电设备配网方法、配网装置和家电设备
CN115278630A (zh) * 2022-07-29 2022-11-01 上海千随信息技术有限公司 基于近场通信的信息交互方法、装置、系统及存储介质
US20240346130A1 (en) * 2023-04-11 2024-10-17 Capital One Services, Llc Random password generation and update for digital service authentication
US20240381080A1 (en) * 2023-05-10 2024-11-14 Capital One Services, Llc Systems and methods for secure authentication information retrieval
US20250190972A1 (en) * 2023-12-08 2025-06-12 Capital One Services, Llc Systems and techniques to perform card functions in a computer environment
TWI875546B (zh) * 2024-03-28 2025-03-01 奧圖碼股份有限公司 顯示裝置、顯示系統及解除顯示裝置鎖定狀態的方法

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7791451B2 (en) * 2006-10-17 2010-09-07 International Business Machines Corporation Methods, systems, and computer program products for providing mutual authentication for radio frequency identification (RFID) security
US8494959B2 (en) * 2007-08-17 2013-07-23 Emc Corporation Payment card with dynamic account number
US20090143104A1 (en) * 2007-09-21 2009-06-04 Michael Loh Wireless smart card and integrated personal area network, near field communication and contactless payment system
EP2203834B1 (fr) * 2007-09-27 2011-03-09 Inside Contactless Procédé et dispositif de gestion de données d'application dans un système nfc
WO2010043974A1 (en) * 2008-10-16 2010-04-22 Christian Richard System for secure contactless payment transactions
US8943311B2 (en) * 2008-11-04 2015-01-27 Securekey Technologies Inc. System and methods for online authentication
US8412928B1 (en) * 2010-03-31 2013-04-02 Emc Corporation One-time password authentication employing local testing of candidate passwords from one-time password server
US8453226B2 (en) * 2010-07-16 2013-05-28 Visa International Service Association Token validation for advanced authorization
JP2012073955A (ja) * 2010-09-29 2012-04-12 Fujitsu Ltd 送受信体及び認証システム
US20120167194A1 (en) * 2010-12-22 2012-06-28 Reese Kenneth W Client hardware authenticated transactions
WO2012140249A1 (en) * 2011-04-14 2012-10-18 Yubico Ab A dual interface device for access control and a method therefor
WO2013034681A1 (en) 2011-09-08 2013-03-14 Ehrensvaerd Jakob Devices and methods for identification, authentication and signing purposes
US20130343542A1 (en) * 2012-06-26 2013-12-26 Certicom Corp. Methods and devices for establishing trust on first use for close proximity communications
US9594896B2 (en) * 2012-12-21 2017-03-14 Blackberry Limited Two factor authentication using near field communications
US9104853B2 (en) * 2013-05-16 2015-08-11 Symantec Corporation Supporting proximity based security code transfer from mobile/tablet application to access device
JP6556145B2 (ja) * 2013-12-31 2019-08-07 ヴァスコ データ セキュリティ インターナショナル ゲゼルシャフト ミット ベシュレンクテル ハフツング モバイルアプリケーションの安全性を確保する方法および装置

Also Published As

Publication number Publication date
JP2019083536A (ja) 2019-05-30
JP6629952B2 (ja) 2020-01-15
KR101706173B1 (ko) 2017-02-27
EP3090521A1 (en) 2016-11-09
CN106233689B (zh) 2019-09-20
WO2015103031A1 (en) 2015-07-09
EP3090521B1 (en) 2020-04-01
US20150189505A1 (en) 2015-07-02
KR20160128997A (ko) 2016-11-08
CN106233689A (zh) 2016-12-14
US9510192B2 (en) 2016-11-29
JP2017503427A (ja) 2017-01-26

Similar Documents

Publication Publication Date Title
JP6629952B2 (ja) モバイルアプリケーションの安全性を確保する方法および装置
US11736296B2 (en) Biometric verification process using certification token
JP7714569B2 (ja) 暗号化認証のためのシステム及び方法
CN106575416B (zh) 用于向装置验证客户端的系统和方法
EP3138265B1 (en) Enhanced security for registration of authentication devices
US9741033B2 (en) System and method for point of sale payment data credentials management using out-of-band authentication
KR102408761B1 (ko) 비대칭 암호화를 이용하여 otp를 구현하기 위한 시스템 및 방법
EP3787226B1 (en) A multi-user strong authentication token
JP2017503427A5 (cg-RX-API-DMAC7.html)
CN113474774A (zh) 用于认可新验证器的系统和方法
US10475024B1 (en) Secure smart card transactions
CN113711560A (zh) 用于有效质询-响应验证的系统和方法
JP2018515011A (ja) ユーザを認証する方法及び装置、ウェアラブルデバイスを登録する方法及び装置
CN117195188A (zh) 便携式装置上的生物计量传感器
US20210312036A1 (en) Systems and methods for authentication code entry using mobile electronic devices
GB2495494A (en) Identity verification
JP2024526117A (ja) 分散ストレージを使用した非接触カード通信および鍵ペア暗号化認証のシステムおよび方法
CN108665267A (zh) 安全认证装置及系统
CN119271595A (zh) 一种接口转换装置和系统
HK40064425A (en) System and method for efficient challenge-response authentication
HK40060764A (en) System and method for endorsing a new authenticator
HK1236268A1 (en) System and method for authenticating a client to a device
HK1236268B (zh) 用於向装置验证客户端的系统和方法

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20160903

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20170222

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20170222

A871 Explanation of circumstances concerning accelerated examination

Free format text: JAPANESE INTERMEDIATE CODE: A871

Effective date: 20170222

A975 Report on accelerated examination

Free format text: JAPANESE INTERMEDIATE CODE: A971005

Effective date: 20170309

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20170314

A601 Written request for extension of time

Free format text: JAPANESE INTERMEDIATE CODE: A601

Effective date: 20170608

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20170914

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20171212

A601 Written request for extension of time

Free format text: JAPANESE INTERMEDIATE CODE: A601

Effective date: 20180224

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20180612

A02 Decision of refusal

Free format text: JAPANESE INTERMEDIATE CODE: A02

Effective date: 20180828

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20181227

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20190115

A911 Transfer to examiner for re-examination before appeal (zenchi)

Free format text: JAPANESE INTERMEDIATE CODE: A911

Effective date: 20190116

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20190402

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20190424

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20190528

A601 Written request for extension of time

Free format text: JAPANESE INTERMEDIATE CODE: A601

Effective date: 20190626

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20190709

R150 Certificate of patent or registration of utility model

Ref document number: 6556145

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150

S533 Written request for registration of change of name

Free format text: JAPANESE INTERMEDIATE CODE: R313533

R350 Written notification of registration of transfer

Free format text: JAPANESE INTERMEDIATE CODE: R350

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

S111 Request for change of ownership or part of ownership

Free format text: JAPANESE INTERMEDIATE CODE: R313113

S531 Written request for registration of change of domicile

Free format text: JAPANESE INTERMEDIATE CODE: R313531

R350 Written notification of registration of transfer

Free format text: JAPANESE INTERMEDIATE CODE: R350