MX369305B - Método para tener acceso a un servicio, primer dispositivo, segundo dispositivo y sistema correspondientes. - Google Patents

Método para tener acceso a un servicio, primer dispositivo, segundo dispositivo y sistema correspondientes.

Info

Publication number
MX369305B
MX369305B MX2017005182A MX2017005182A MX369305B MX 369305 B MX369305 B MX 369305B MX 2017005182 A MX2017005182 A MX 2017005182A MX 2017005182 A MX2017005182 A MX 2017005182A MX 369305 B MX369305 B MX 369305B
Authority
MX
Mexico
Prior art keywords
transaction data
signature
partial
data
character
Prior art date
Application number
MX2017005182A
Other languages
English (en)
Other versions
MX2017005182A (es
Inventor
Karlisch Thierry
AKHTARY Siavosh
Gullberg Peter
Original Assignee
Gemalto Sa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Gemalto Sa filed Critical Gemalto Sa
Publication of MX2017005182A publication Critical patent/MX2017005182A/es
Publication of MX369305B publication Critical patent/MX369305B/es

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/10—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation
    • G06K7/14—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation using light without selection of wavelength, e.g. sensing reflected white light
    • G06K7/1404—Methods for optical code recognition
    • G06K7/1408—Methods for optical code recognition the method being specifically adapted for the type of code
    • G06K7/1413—1D bar codes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/10—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation
    • G06K7/14—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation using light without selection of wavelength, e.g. sensing reflected white light
    • G06K7/1404—Methods for optical code recognition
    • G06K7/1408—Methods for optical code recognition the method being specifically adapted for the type of code
    • G06K7/1417—2D bar codes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G06Q20/108—Remote banking, e.g. home banking
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4018—Transaction verification using the card verification value [CVV] associated with the card
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/18—Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/068—Authentication using credential vaults, e.g. password manager applications or one time password [OTP] applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H04L9/3249—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures using RSA or related signature schemes, e.g. Rabin scheme

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Finance (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Health & Medical Sciences (AREA)
  • Toxicology (AREA)
  • General Health & Medical Sciences (AREA)
  • Electromagnetism (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Power Engineering (AREA)
  • Telephonic Communication Services (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Cash Registers Or Receiving Machines (AREA)

Abstract

La invención se refiere a un método (20) para tener acceso a un servicio. De acuerdo con la invención, el método comprende los siguientes pasos: a) un primer dispositivo (18) recibe de un segundo dispositivo (12) datos relacionados con una transacción, como datos de transacción completos. b) el primer dispositivo genera (28) una primera firma utilizando los datos de transacción completos, un primer algoritmo y una primera clave. c) el primer dispositivo modifica (24) al menos un carácter de los datos de transacción completos y obtiene datos de transacción parcial. d) el primer dispositivo envía (26) al segundo dispositivo los datos de transacción parcial. e) el segundo dispositivo solicita (210) a un usuario para modificar los datos de transacción parcial proporcionando al menos un carácter, como datos complementarios a los datos de transacción parciales. f) el segundo dispositivo obtiene (212), como respuesta de petición de un usuario, al menos un carácter para modificar los datos de transacción parcial, un resultado correspondiente siendo los datos de transacción modificados propuestos, g) el segundo dispositivo genera una segunda firma utilizando los datos de transacción modificados propuestos, el primer algoritmo y la primera clave. h) el segundo dispositivo envía (218) al primer dispositivo la segunda firma i) el primer dispositivo verifica (220) si la segunda firma coincide o no con la primera firma, entonces el primer dispositivo autoriza (222) para llevar a cabo una transacción correspondiente. La invención también se refiere al primer dispositivo correspondiente, segundo dispositivo y sistema.
MX2017005182A 2014-10-21 2015-10-20 Método para tener acceso a un servicio, primer dispositivo, segundo dispositivo y sistema correspondientes. MX369305B (es)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP14306670.2A EP3013014A1 (en) 2014-10-21 2014-10-21 Method for accessing a service, corresponding first device, second device and system
PCT/EP2015/074280 WO2016062727A1 (en) 2014-10-21 2015-10-20 Method for accessing a service, corresponding first device, second device and system

Publications (2)

Publication Number Publication Date
MX2017005182A MX2017005182A (es) 2017-12-14
MX369305B true MX369305B (es) 2019-11-05

Family

ID=51862242

Family Applications (1)

Application Number Title Priority Date Filing Date
MX2017005182A MX369305B (es) 2014-10-21 2015-10-20 Método para tener acceso a un servicio, primer dispositivo, segundo dispositivo y sistema correspondientes.

Country Status (7)

Country Link
US (1) US10263973B2 (es)
EP (2) EP3013014A1 (es)
JP (1) JP6462121B2 (es)
KR (1) KR101991600B1 (es)
CN (1) CN107005573B (es)
MX (1) MX369305B (es)
WO (1) WO2016062727A1 (es)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB201611698D0 (en) * 2016-07-05 2016-08-17 Eitc Holdings Ltd Blockchain-implemented control method and system
CN106291958B (zh) 2016-10-21 2021-04-23 京东方科技集团股份有限公司 一种显示装置及图像显示方法
CN106485184B (zh) * 2016-11-29 2018-12-14 北京慧眼智行科技有限公司 一种扫码方法和装置
US10223723B1 (en) * 2018-05-04 2019-03-05 Capital One Services, Llc Managing transaction state data
US11443292B2 (en) * 2019-08-01 2022-09-13 Capital One Services, Llc Transaction card with integrated USB device
US20240114022A1 (en) 2022-09-30 2024-04-04 Thales Dis Cpl Usa, Inc. System and method of imaged based login to an access device

Family Cites Families (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6675152B1 (en) 2000-09-13 2004-01-06 Igt Transaction signature
FR2827448B1 (fr) * 2001-07-12 2003-12-19 Gemplus Card Int Procede assurant une garantie de paiement pour le commerce electronique notamment par telephone mobile et systeme de mise en oeuvre
US20040186912A1 (en) 2003-03-20 2004-09-23 International Business Machines Corporation Method and system for transparently supporting digital signatures associated with web transactions
WO2005109360A1 (en) * 2004-05-10 2005-11-17 Hani Girgis Secure pin entry using personal computer
EP1599008B1 (en) * 2004-05-19 2008-03-05 Alcatel Lucent Method of providing a signing key for digitally signing, verifying or encrypting data
WO2006079145A1 (en) * 2004-10-20 2006-08-03 Salt Group Pty Ltd Authentication method
JP2007328381A (ja) * 2006-05-09 2007-12-20 Ids:Kk ネットバンキングにおける認証システム及び方法
US8341083B1 (en) * 2007-09-12 2012-12-25 Devicefidelity, Inc. Wirelessly executing financial transactions
CN101821749A (zh) * 2007-09-21 2010-09-01 西尔弗布鲁克研究股份有限公司 包括方向代码的编码图案
EP2194490A1 (fr) * 2008-11-28 2010-06-09 Gemalto SA Objet portable intelligent comportant des données de personnalisation graphique
US8719905B2 (en) * 2010-04-26 2014-05-06 Authentify Inc. Secure and efficient login and transaction authentication using IPhones™ and other smart mobile communication devices
US8433914B1 (en) 2010-02-25 2013-04-30 Emc Corporation Multi-channel transaction signing
CN102075547B (zh) 2011-02-18 2014-03-26 天地融科技股份有限公司 动态口令生成方法及装置、认证方法及系统
CN102184495B (zh) * 2011-04-21 2016-09-28 天地融科技股份有限公司 一种网络支付方法及系统
CN102202300B (zh) * 2011-06-14 2016-01-20 上海众人网络安全技术有限公司 一种基于双通道的动态密码认证系统及方法
US20130117087A1 (en) * 2011-11-07 2013-05-09 Apriva, Llc System and method for authenticating electronic transaction instruments
EP2645314A1 (en) * 2012-03-28 2013-10-02 Gemalto SA Method, device and system for managing a provision of energy
US8770478B2 (en) * 2013-07-11 2014-07-08 Scvngr, Inc. Payment processing with automatic no-touch mode selection

Also Published As

Publication number Publication date
MX2017005182A (es) 2017-12-14
EP3210359A1 (en) 2017-08-30
KR101991600B1 (ko) 2019-06-20
EP3210359B1 (en) 2018-08-01
CN107005573A (zh) 2017-08-01
JP6462121B2 (ja) 2019-01-30
US20170310654A1 (en) 2017-10-26
KR20170072290A (ko) 2017-06-26
JP2017536030A (ja) 2017-11-30
WO2016062727A1 (en) 2016-04-28
US10263973B2 (en) 2019-04-16
CN107005573B (zh) 2020-07-28
EP3013014A1 (en) 2016-04-27

Similar Documents

Publication Publication Date Title
MX369305B (es) Método para tener acceso a un servicio, primer dispositivo, segundo dispositivo y sistema correspondientes.
WO2018094297A3 (en) Interaction object reconciliation in a public ledger blockchain environment
EP3994594A4 (en) SYSTEM, METHOD AND COMPUTER PROGRAM FOR ENABLING CONDUCT BASED ON USER AUTHORIZATION
AU2018260849A1 (en) Use of a biometric image for authorization
TW201614489A (en) System for using an application software on trial and method and server and user device thereof
GB2537288A (en) System, and methods for implementing retail processes based on machine-readable images and user gestures
MY172909A (en) Authentication apparatus, authentication system, and authentication method
SG11202011649YA (en) System, method and program for providing financial transaction by virtual code, virtual code generator and virtual code verification device
MY177409A (en) Method and system for verifying an account operation
MX353779B (es) Sistema de autenticación de ocupantes de un vehículo.
MX2018007332A (es) Metodo, dispositivo, servidor y sistema para autenticar a un usuario.
EP4246926A3 (en) Domain name operation verification code generation and/or verification
SG10201901024TA (en) Methods and systems for distributing orders
WO2016145449A3 (en) Client services for applied key management systems and processes
WO2015107383A3 (en) Role-based anonymization
JP2017504992A5 (es)
MX2016009905A (es) Sistemas de visualizacion para vehiculo.
GB2549614A (en) Auditing of web-based video
FR3028979B1 (fr) Procede de controle d'acces a un systeme de production d'un systeme informatique non connecte a un systeme d'information dudit systeme informatique
MX338045B (es) Configuracion de dispositivo y método para implementar una red de transferencia de datos utilizada en control remoto de propiedades.
WO2017117520A8 (en) A method, system and apparatus using forward-secure cryptography for passcode verification
WO2016048129A3 (en) A system and method for authenticating a user based on user behaviour and environmental factors
WO2015164387A3 (en) Systems, methods, and apparatus for providing machine-to-machine and consumer-to-machine interaction application platforms
MX2014015834A (es) Sistema y método de autorización de peticiones simples, secuenciales y paralelas con medios de autorización mediante parámetros definidos previamente.
MY179263A (en) System and method for provisioning credit

Legal Events

Date Code Title Description
HH Correction or change in general
FG Grant or registration