WO2004082354A3 - Dispositif d’authentification a mot de passe a usage unique : otp et dispositif generateur de mot de passe associe - Google Patents

Dispositif d’authentification a mot de passe a usage unique : otp et dispositif generateur de mot de passe associe Download PDF

Info

Publication number
WO2004082354A3
WO2004082354A3 PCT/FR2004/000554 FR2004000554W WO2004082354A3 WO 2004082354 A3 WO2004082354 A3 WO 2004082354A3 FR 2004000554 W FR2004000554 W FR 2004000554W WO 2004082354 A3 WO2004082354 A3 WO 2004082354A3
Authority
WO
WIPO (PCT)
Prior art keywords
password
type
sequence
access variable
user terminal
Prior art date
Application number
PCT/FR2004/000554
Other languages
English (en)
Other versions
WO2004082354A2 (fr
Inventor
Luigi Lancieri
Original Assignee
France Telecom
Luigi Lancieri
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by France Telecom, Luigi Lancieri filed Critical France Telecom
Publication of WO2004082354A2 publication Critical patent/WO2004082354A2/fr
Publication of WO2004082354A3 publication Critical patent/WO2004082354A3/fr

Links

Classifications

    • G—PHYSICS
    • G09—EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09C—CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
    • G09C5/00—Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/36—User authentication by graphic or iconic representation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/385—Payment protocols; Details thereof using an alias or single-use codes
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025—Identification of user by a PIN code
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless
    • H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

L'invention concerne un dispositif d'authentification du type utilisant un mot de passe à usage unique, comprenant un serveur de sécurité (10) apte à générer une variable d'accès lorsqu'il reçoit une demande de connexion de la part d'un terminal utilisateurs (30), caractérisé en ce que le serveur de sécurité (10) est apte à transmettre la variable d'accès au terminal utilisateurs (30) sous la forme d'une image ou d'une séquence d'images, de sorte qu'un dispositif générateur comportant des moyens otiques de détection soit apte à détecter ladite image ou séquence d'images affichée par le terminal utilisateurs (30) pour en déduire la variable d'accès. L'invention concerne également un dispositif générateur de mot de passe comportant des moyens optiques de détection apte à détecter ladite image ou séquence d'images affichée et à en déduire la variable d'accès.
PCT/FR2004/000554 2003-03-13 2004-03-09 Dispositif d’authentification a mot de passe a usage unique : otp et dispositif generateur de mot de passe associe WO2004082354A2 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR03/03095 2003-03-13
FR0303095A FR2852471A1 (fr) 2003-03-13 2003-03-13 Dispositif d'authentification du type utilisant un mot de passe a usage unique et dispositif generateur de mot de passe associe

Publications (2)

Publication Number Publication Date
WO2004082354A2 WO2004082354A2 (fr) 2004-09-30
WO2004082354A3 true WO2004082354A3 (fr) 2005-09-22

Family

ID=32893265

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2004/000554 WO2004082354A2 (fr) 2003-03-13 2004-03-09 Dispositif d’authentification a mot de passe a usage unique : otp et dispositif generateur de mot de passe associe

Country Status (2)

Country Link
FR (1) FR2852471A1 (fr)
WO (1) WO2004082354A2 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108810896A (zh) * 2018-07-17 2018-11-13 上海连尚网络科技有限公司 无线接入点的连接认证方法和装置

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7836121B2 (en) 2004-04-14 2010-11-16 Ipass Inc. Dynamic executable
ATE470917T1 (de) * 2007-09-20 2010-06-15 Tds Todos Data System Ab System, verfahren und vorrichtung zur ermöglichung von interaktionen mit dynamischer sicherheit
EP2040228A1 (fr) * 2007-09-20 2009-03-25 Tds Todos Data System Ab Système, procédé et dispositif pour autoriser une interaction sécurisée et conviviale
FR2944400B1 (fr) * 2009-04-10 2013-01-18 Lynkware Procede d'authentification aupres d'un serveur par un utilisateur d'un appareil mobile
CN101710372B (zh) * 2009-04-27 2012-03-28 深圳市江波龙电子有限公司 一种验证身份的方法
FR2959896B1 (fr) * 2010-05-06 2014-03-21 4G Secure Procede d'authentification d'un utilisateur requerant une transaction avec un fournisseur de service
NO334144B1 (no) 2011-09-12 2013-12-16 Aker Subsea As Roterende undervannsinnretning
GB201106976D0 (en) * 2011-10-03 2011-10-03 Corcost Ltd Corcost-SG002
CN103020574A (zh) * 2012-11-22 2013-04-03 北京握奇数据系统有限公司 一种结合拍照和条形码识别技术的otp设备和方法

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001057811A1 (fr) * 2000-02-02 2001-08-09 Image Reaction Limited Manipulation de donnees

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001057811A1 (fr) * 2000-02-02 2001-08-09 Image Reaction Limited Manipulation de donnees

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
A. MENEZES, P. VAN OORSCHOT AND S VANSTONE: "Handbook of Applied Cryptography", 1996, CRC PRESS, ISBN: 0-8493-8523-7, XP002262234 *
MOLVA R ET AL: "Strong authentication in intelligent networks", UNIVERSAL PERSONAL COMMUNICATIONS, 1994. RECORD., 1994 THIRD ANNUAL INTERNATIONAL CONFERENCE ON SAN DIEGO, CA, USA 27 SEPT.-1 OCT. 1994, NEW YORK, NY, USA,IEEE, 27 September 1994 (1994-09-27), pages 629 - 634, XP010131591, ISBN: 0-7803-1823-4 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108810896A (zh) * 2018-07-17 2018-11-13 上海连尚网络科技有限公司 无线接入点的连接认证方法和装置

Also Published As

Publication number Publication date
WO2004082354A2 (fr) 2004-09-30
FR2852471A1 (fr) 2004-09-17

Similar Documents

Publication Publication Date Title
US11979461B2 (en) System and method for server based control
TWI613564B (zh) 眼睛注視認證技術
US20160026862A1 (en) Eye reflected content for verification of user liveliness
EP1729499A3 (fr) Management des qualifications physiques de garantie à un dispositif multifunction
EP2557507A3 (fr) Procédé de vérification d'utilisateur et système de vérification d'utilisateur
WO2007098314A3 (fr) Techniques permettant d'authentifier un abonné demandant un accès réseau au moyen d'un protocole dhcp
WO2019074366A8 (fr) Authentification d'une personne à l'aide d'une carte d'identité virtuelle
WO2009072271A1 (fr) Système client/serveur dhcp, dispositif client dhcp et dispositif serveur dhcp
WO2004082354A3 (fr) Dispositif d’authentification a mot de passe a usage unique : otp et dispositif generateur de mot de passe associe
WO2016117061A1 (fr) Terminal portatif et système de traitement d'informations utilisant ce terminal
WO2017036455A3 (fr) Dispositif et procédé d'authentification et d'autorisation de personnes
JP2009205198A (ja) 画像処理装置、方法、及び、プログラム
JP2006171857A (ja) 個人認証方法、個人認証装置及び認証方法
JP5683358B2 (ja) 検証システム
JP2004213143A (ja) 認証装置及びプログラム
SG144910A1 (en) Method and system for user authentication

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): BW GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
122 Ep: pct application non-entry in european phase