SG11201803830PA - Method, device, server and system for authenticating a user - Google Patents

Abstract

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property ' Organization International Bureau irst0) (43) International Publication Date .... ..sr.) 22 June 2017(22.06.2017) WIPO I PCT ID Hit (10) WO International 2017/102142 111111111111111111IIIIIIIIIIII111111111111111111111IIIIIIIIIIMIIIIIIIIIIIIIII Publication Al Number (51) International Patent Classification: (81) Designated States (unless otherwise indicated, for every GOOF 21/32 (2013.01) G06Q 20/40 (2012.01) kind of national protection available): AE, AG, AL, AM, GOOF 21/60 (2013.01) AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, (21) International Application Number: DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, PCT/EP2016/075258 HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KN, KP, KR, (22) International Filing Date: KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, 20 October 2016 (20.10.2016) MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, (25) Filing Language: English SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, (26) Publication Language: English TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (30) Priority Data: 15307028.9 16 December 2015 (16.12.2015) EP (84) Designated States (unless otherwise indicated, for every kind of regional protection available): ARIPO (BW, GH, (71) Applicant: GEMALTO SA [FR/FR]; 6, me de la Verrer- GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, ie, 92190 Meudon (FR). TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, (72) Inventors: DESJARDINS, Jean-Michel; c/o Gemalto SA, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, service brevets, 525 Avenue du Pic de Bertagne, CS DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, 12023, 13881 Gemenos cedex (FR). LATHIERE, Marie; c/o Gemalto SA, service brevets, 525 Avenue du Pic de SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, Bertagne, CS 12023, 13881 Gemenos cedex (FR). GW, KM, ML, MR, NE, SN, TD, TG). [Continued on next page] Title: METHOD, DEVICE, SERVER AND SYSTEM FOR AUTHENTICATING A USER (54) (57) : The invention relates to a method 40 for au- thenticating a user. According to the invention,the method 11 12 14 18 comprises the following steps. A device 12 accesses 41 a key \ \ least initial The least initial is and at one vector. at one vector USER TERMINAL POS SERVER by a first algorithm, at least 414 previously generated using one 416 reference vector and reference user authentication data. The 40 at least one reference vector is previously generated without ACCESS A KEY v L._ AND AN ACCESS THE KEY data. The device INITIAL 41 using the reference user authentication ac - VECTOR ---7 - AND A REFERENCE 44 cesses data 42 and provided user authentication data 46. The 418 VECTOR device generates 48 at least one intermediary vector by using a second algorithm, the at least one initial vector and the GENERATE CRYPTO 2 authentication data. The device 410 a provided user generates WITH THE KEY, THE 46 GENERATE AN REFERENCE VECTOR AND cryptogram by using a third algorithm22, the key, the at least INTERMEDIARY THE TRANSACTION DATA VECTOR WITH one intermediary vector and the data. A server 18 receives a 48 PROVIDED USER DATA 420 request 414 for authenticating a user accompanied with the cryptogram and the data. The server accesses 416 the key and \It KC) CRYPTO 2 the at least The 418 one reference vector. server generates a GENERATE CRYPTO 1 CRYPTO 1 410----___ WITH THE KEY, THE 9 reference cryptogram by using the third algorithm, the key, 422 INTERMEDIARY VECTOR OK the at least one reference vector and the data. The server veri- AND TRANSACTION DATA USER IS fies 420 the does does whether reference cryptogram or not It AUTHENTICATED If the reference cryptogram does match the cryptogram. or 11 412 -1 .4t does not match the cryptogram, then the server does 422 or does not 424 authenticate the user respectively. The inven- ei 424 11. USER IS NOT AUTHENTICATED tion also relates to corresponding device, server and system. 11 ei 0 Fig. 4 1-1 -..„ Ir--- 1-1 0 ei O WO 2017/102142 Al 1#11101MO11111 1ER111E301011010101011101E0#011 Published: — with international search report (Art. 21(3))