WO2006000864B1 - Systeme de transaction et de paiement permettant a un fournisseur de transactions de securiser l'authentification/la validation a distance de transactions - Google Patents
Systeme de transaction et de paiement permettant a un fournisseur de transactions de securiser l'authentification/la validation a distance de transactionsInfo
- Publication number
- WO2006000864B1 WO2006000864B1 PCT/IB2005/001672 IB2005001672W WO2006000864B1 WO 2006000864 B1 WO2006000864 B1 WO 2006000864B1 IB 2005001672 W IB2005001672 W IB 2005001672W WO 2006000864 B1 WO2006000864 B1 WO 2006000864B1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- authentication
- remote server
- tokens
- seed
- authentication token
- Prior art date
Links
- 238000010200 validation analysis Methods 0.000 title 1
- 230000000875 corresponding Effects 0.000 claims abstract 5
- 235000008733 Citrus aurantifolia Nutrition 0.000 claims 1
- 235000015450 Tilia cordata Nutrition 0.000 claims 1
- 235000011941 Tilia x europaea Nutrition 0.000 claims 1
- 239000004571 lime Substances 0.000 claims 1
Abstract
Dans la présente invention, un terminal mobile est équipé d'un système de service d'authentification et de paiement par SMS fourni par un fournisseur de transactions à distance. Le fournisseur à distance utilise des secrets communs et une valeur de départ dans un code d'authentification d'un hash de message avec clé (HMAC) chiffré exécutant un algorithme de hachage pour générer une liste de jetons d'authentification (nom d'utilisateur-mot de passe) pour l'achat de services et/ou de produits. Les secrets communs et la valeur de départ sont partagés avec des dispositifs d'exécution locaux qui génèrent également la liste de jetons d'authentification. Dans la présente invention, un abonné réalise un paiement par l'intermédiaire du fournisseur de transactions à distance et reçoit un jeton d'authentification correspondant au service acheté. Ensuite, l'abonné fournit le jeton au dispositif d'exécution qui compare le jeton d'authentification à des ensembles de jetons d'authentification produits par le terminal d'exécution. Si la comparaison donne un résultat positif, le dispositif d'exécution fournit le service à l'abonné.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP05754250A EP1769419B1 (fr) | 2004-06-21 | 2005-06-15 | Systeme de transaction et de paiement permettant a un fournisseur de transactions de securiser l'authentification/la validation a distance de transactions |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/871,051 US7693797B2 (en) | 2004-06-21 | 2004-06-21 | Transaction and payment system security remote authentication/validation of transactions from a transaction provider |
US10/871,051 | 2004-06-21 |
Publications (3)
Publication Number | Publication Date |
---|---|
WO2006000864A2 WO2006000864A2 (fr) | 2006-01-05 |
WO2006000864A3 WO2006000864A3 (fr) | 2006-03-02 |
WO2006000864B1 true WO2006000864B1 (fr) | 2006-04-13 |
Family
ID=35481809
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IB2005/001672 WO2006000864A2 (fr) | 2004-06-21 | 2005-06-15 | Systeme de transaction et de paiement permettant a un fournisseur de transactions de securiser l'authentification/la validation a distance de transactions |
Country Status (4)
Country | Link |
---|---|
US (1) | US7693797B2 (fr) |
EP (1) | EP1769419B1 (fr) |
CN (1) | CN1969291A (fr) |
WO (1) | WO2006000864A2 (fr) |
Families Citing this family (65)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7836295B2 (en) * | 2002-07-29 | 2010-11-16 | International Business Machines Corporation | Method and apparatus for improving the resilience of content distribution networks to distributed denial of service attacks |
CN101120351B (zh) * | 2005-02-18 | 2010-10-06 | Rsa安全公司 | 派生种子的分发方法 |
US11086978B2 (en) * | 2005-05-19 | 2021-08-10 | Western Digital Israel Ltd | Transaction authentication by a token, contingent on personal presence |
US8447700B2 (en) * | 2005-10-11 | 2013-05-21 | Amazon Technologies, Inc. | Transaction authorization service |
US8352376B2 (en) * | 2005-10-11 | 2013-01-08 | Amazon Technologies, Inc. | System and method for authorization of transactions |
US8352323B2 (en) * | 2007-11-30 | 2013-01-08 | Blaze Mobile, Inc. | Conducting an online payment transaction using an NFC enabled mobile communication device |
US7657489B2 (en) | 2006-01-18 | 2010-02-02 | Mocapay, Inc. | Systems and method for secure wireless payment transactions |
JP4806271B2 (ja) * | 2006-02-27 | 2011-11-02 | 富士通株式会社 | 情報セキュリティシステム、そのサーバ、プログラム |
FR2898238B1 (fr) * | 2006-03-02 | 2008-06-06 | Customer Product Relationship | Procede de transaction entre deux serveurs comportant une etape prealable de validation mettant en oeuvre deux telephones portables. |
EP1912147A1 (fr) * | 2006-10-10 | 2008-04-16 | NTT DoCoMo, Inc. | Procédé et appareil de vente d'une ressource numérique |
US7970381B2 (en) * | 2007-08-13 | 2011-06-28 | General Motors Llc | Method of authenticating a short message service (sms) message |
US8332922B2 (en) * | 2007-08-31 | 2012-12-11 | Microsoft Corporation | Transferable restricted security tokens |
US8239326B1 (en) | 2007-09-19 | 2012-08-07 | Amazon Technologies, Inc. | Method and apparatus for authorizing transactions using transaction phrases in a transaction authorization service |
US8424057B2 (en) * | 2007-12-28 | 2013-04-16 | Ebay, Inc. | Mobile anti-phishing |
US8107921B2 (en) * | 2008-01-11 | 2012-01-31 | Seven Networks, Inc. | Mobile virtual network operator |
US7930390B2 (en) | 2008-01-14 | 2011-04-19 | International Business Machines Corporation | Identification method |
US8620826B2 (en) | 2008-03-27 | 2013-12-31 | Amazon Technologies, Inc. | System and method for receiving requests for tasks from unregistered devices |
US8244592B2 (en) | 2008-03-27 | 2012-08-14 | Amazon Technologies, Inc. | System and method for message-based purchasing |
US8204827B1 (en) | 2008-03-27 | 2012-06-19 | Amazon Technologies, Inc. | System and method for personalized commands |
US8496169B2 (en) * | 2009-01-02 | 2013-07-30 | At&T Mobility Ii Llc | System and method for electronic ticket verification, identification, and authorization with a wireless communication device |
WO2010097813A1 (fr) * | 2009-02-27 | 2010-09-02 | Rajender Kumar Nangia | Procédé permettant de faire un don et d'établir une communication entre un donateur et un bénéfiaire dans un réseau, et système afférent |
WO2011017099A2 (fr) * | 2009-07-27 | 2011-02-10 | Suridx, Inc. | Communication sécurisée utilisant la cryptographie asymétrique et des certificats légers |
EP2290876A1 (fr) * | 2009-08-24 | 2011-03-02 | Gemalto SA | Procédé d'établissement d'une autorisation électronique pour un utilisateur porteur d'un document d'identité électronique et procédé de contrôle de ladite autorisation |
CA2699345C (fr) * | 2009-08-26 | 2012-01-17 | Mobiroo Inc. | Systeme de publicite numerique et procede connexe |
FR2949926B1 (fr) * | 2009-09-09 | 2011-10-21 | Alcatel Lucent | Etablissement de communication securisee |
CN101719250B (zh) * | 2009-12-10 | 2013-07-24 | 中国联合网络通信集团有限公司 | 支付认证方法、平台和系统 |
US9119076B1 (en) | 2009-12-11 | 2015-08-25 | Emc Corporation | System and method for authentication using a mobile communication device |
US8516063B2 (en) | 2010-02-12 | 2013-08-20 | Mary Anne Fletcher | Mobile device streaming media application |
US8452980B1 (en) * | 2010-03-29 | 2013-05-28 | Emc Corporation | Defeating real-time trojan login attack with delayed interaction with fraudster |
EP2617218B1 (fr) * | 2010-09-14 | 2019-07-10 | Vodafone IP Licensing Limited | Authentification dans un réseau d'accès sans fil |
US20120124656A1 (en) * | 2010-11-16 | 2012-05-17 | Evolucard S/A | Method and system for mobile device based authentication |
CN102572815B (zh) * | 2010-12-29 | 2014-11-05 | 中国移动通信集团公司 | 一种对终端应用请求的处理方法、系统及装置 |
US8290876B1 (en) * | 2011-01-12 | 2012-10-16 | Steven Douglas Powell | Method and system for securing a third party payment electronic transaction |
US20120296826A1 (en) | 2011-05-18 | 2012-11-22 | Bytemark, Inc. | Method and system for distributing electronic tickets with visual display |
US10762733B2 (en) * | 2013-09-26 | 2020-09-01 | Bytemark, Inc. | Method and system for electronic ticket validation using proximity detection |
US10360567B2 (en) | 2011-03-11 | 2019-07-23 | Bytemark, Inc. | Method and system for distributing electronic tickets with data integrity checking |
US10453067B2 (en) | 2011-03-11 | 2019-10-22 | Bytemark, Inc. | Short range wireless translation methods and systems for hands-free fare validation |
US8494967B2 (en) | 2011-03-11 | 2013-07-23 | Bytemark, Inc. | Method and system for distributing electronic tickets with visual display |
TWI528766B (zh) * | 2012-02-05 | 2016-04-01 | 財團法人資訊工業策進會 | 直接通訊系統及其探索互動方法 |
US9961075B2 (en) | 2012-03-30 | 2018-05-01 | Nokia Technologies Oy | Identity based ticketing |
US9300643B1 (en) * | 2012-06-27 | 2016-03-29 | Amazon Technologies, Inc. | Unique credentials verification |
US9087187B1 (en) | 2012-10-08 | 2015-07-21 | Amazon Technologies, Inc. | Unique credentials verification |
US10304047B2 (en) * | 2012-12-07 | 2019-05-28 | Visa International Service Association | Token generating component |
US9413749B2 (en) * | 2013-08-20 | 2016-08-09 | Vascode Technologies Ltd. | System and method of authentication of a first party respective of a second party aided by a third party |
FR3018021B1 (fr) * | 2014-02-24 | 2017-08-11 | Dejamobile | Procede et systeme de securisation de transactions offertes par une pluralite de services entre un appareil mobile d'un utilisateur et un point d'acceptation |
US9325703B2 (en) | 2014-02-27 | 2016-04-26 | International Business Machines Corporation | Automatic security parameter management and renewal |
US20160217457A1 (en) * | 2014-05-13 | 2016-07-28 | Clear Token Inc. | Parking facility secure payment system |
US20150332259A1 (en) * | 2014-05-13 | 2015-11-19 | Clear Token Inc. | Secure payment system and method |
US11308462B2 (en) * | 2014-05-13 | 2022-04-19 | Clear Token Inc | Secure electronic payment |
US20200286077A1 (en) * | 2014-05-13 | 2020-09-10 | Clear Token, Inc. | Payment And Enforcement System For Electric Vehicle Charging Stations |
US20160005042A1 (en) * | 2014-07-02 | 2016-01-07 | Mistral Mobile | Host card emulation out-of-bound device binding verification |
AU2015319804B2 (en) * | 2014-09-26 | 2019-03-14 | Visa International Service Association | Remote server encrypted data provisioning system and methods |
US11803784B2 (en) | 2015-08-17 | 2023-10-31 | Siemens Mobility, Inc. | Sensor fusion for transit applications |
JP2018532180A (ja) | 2015-08-17 | 2018-11-01 | バイトマーク, インコーポレイテッドBytemark, Inc. | ハンズフリー運賃確認のための短距離無線変換方法及びシステム |
US9742761B2 (en) * | 2015-11-10 | 2017-08-22 | International Business Machines Corporation | Dynamic authentication for a computing system |
WO2017093597A1 (fr) * | 2015-12-03 | 2017-06-08 | Nokia Technologies Oy | Gestion d'accès |
RU2649295C2 (ru) * | 2015-12-31 | 2018-03-30 | Акционерное общество "Национальная система платежных карт" | Способ верификации клиента |
CA3021357A1 (fr) * | 2016-06-24 | 2017-12-28 | Visa International Service Association | Cryptogramme d'authentification de jeton unique |
EP3285512A1 (fr) * | 2016-08-17 | 2018-02-21 | Gemalto Sa | Serveur d'authentification d'un réseau de télécommunication cellulaire et uicc correspondant |
US20180060989A1 (en) * | 2016-08-30 | 2018-03-01 | MaaS Global Oy | System, method and device for digitally assisted personal mobility management |
US11212100B2 (en) * | 2017-03-23 | 2021-12-28 | Moovel North America, Llc | Systems and methods of providing and electronically validating tickets and tokens |
KR102362795B1 (ko) * | 2017-09-27 | 2022-02-11 | 삼성에스디에스 주식회사 | 해시 체인을 이용한 단말 간 인증 절차를 거치는 단말 간 통신 방법 |
US11481851B2 (en) | 2019-10-18 | 2022-10-25 | Landis+Gyr Innovations, Inc. | Secure tokens for controlling access to a resource in a resource distribution network |
US11790349B2 (en) | 2019-10-18 | 2023-10-17 | Landis+Gyr Technology, Inc. | Secure tokens for controlling access to a resource in a resource distribution network |
US11481852B2 (en) * | 2019-10-18 | 2022-10-25 | Landis+Gyr Innovations, Inc. | Secure tokens for controlling access to a resource in a resource distribution network |
Family Cites Families (20)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5491752A (en) * | 1993-03-18 | 1996-02-13 | Digital Equipment Corporation, Patent Law Group | System for increasing the difficulty of password guessing attacks in a distributed authentication scheme employing authentication tokens |
US5878273A (en) * | 1993-06-24 | 1999-03-02 | Discovision Associates | System for microprogrammable state machine in video parser disabling portion of processing stages responsive to sequence-- end token generating by token generator responsive to received data |
FI99071C (fi) | 1995-02-15 | 1997-09-25 | Nokia Mobile Phones Ltd | Menetelmä sovellusten käyttämiseksi matkaviestimessä ja matkaviestin |
US6085976A (en) | 1998-05-22 | 2000-07-11 | Sehr; Richard P. | Travel system and methods utilizing multi-application passenger cards |
FI973945A (fi) | 1997-10-13 | 1999-04-14 | Nokia Telecommunications Oy | Lyhytsanomia välittävä tiedonsiirtojärjestelmä |
US6957255B1 (en) | 1999-06-28 | 2005-10-18 | Amdocs (Israel) Ltd. | Method and apparatus for session reconstruction and accounting involving VoIP calls |
CA2377626A1 (fr) * | 2000-04-19 | 2001-08-09 | Magicaxess | Procede et dispositif de paiement electronique |
US8903737B2 (en) * | 2000-04-25 | 2014-12-02 | Accenture Global Service Limited | Method and system for a wireless universal mobile product interface |
FR2808948B1 (fr) * | 2000-05-12 | 2006-03-03 | Ibm Corp Internat Business Mac | Systeme et methode pour authentifier de maniere unique chaque reproduction d'un groupe de documents electroniques |
WO2002039342A1 (fr) | 2000-11-08 | 2002-05-16 | Matsushita Electric Industrial Co., Ltd. | Systeme de banque de valeurs electroniques privees |
US20020161826A1 (en) * | 2001-01-25 | 2002-10-31 | Carlos Arteaga | System and method for remote communication transactions |
WO2002063517A2 (fr) | 2001-02-06 | 2002-08-15 | Michael Joseph Elias | Procede et appareil de traitement de jeton |
ATE452390T1 (de) * | 2001-08-03 | 2010-01-15 | Ericsson Telefon Ab L M | Verfahren und vorrichtungen für bezahlungen zwischen endgeräten |
US7315944B2 (en) * | 2001-11-13 | 2008-01-01 | Ericsson Inc. | Secure handling of stored-value data objects |
JP3899918B2 (ja) * | 2001-12-11 | 2007-03-28 | 株式会社日立製作所 | ログイン認証方法およびその実施システム並びにその処理プログラム |
AU2003230751A1 (en) * | 2002-03-29 | 2003-10-13 | Bank One, Delaware, N.A. | System and process for performing purchase transaction using tokens |
US7475248B2 (en) * | 2002-04-29 | 2009-01-06 | International Business Machines Corporation | Enhanced message security |
FR2842055B1 (fr) * | 2002-07-05 | 2004-12-24 | Nortel Networks Ltd | Procede pour controler l'acces a un systeme cellulaire de radiocommunication a travers un reseau local sans fil, et organe de controle pour la mise en oeuvre du procede |
JP4553565B2 (ja) | 2002-08-26 | 2010-09-29 | パナソニック株式会社 | 電子バリューの認証方式と認証システムと装置 |
GB2410658B (en) * | 2002-10-14 | 2006-03-01 | Toshiba Res Europ Ltd | Methods and systems for flexible delegation |
-
2004
- 2004-06-21 US US10/871,051 patent/US7693797B2/en active Active
-
2005
- 2005-06-15 EP EP05754250A patent/EP1769419B1/fr not_active Not-in-force
- 2005-06-15 WO PCT/IB2005/001672 patent/WO2006000864A2/fr not_active Application Discontinuation
- 2005-06-15 CN CNA2005800203166A patent/CN1969291A/zh active Pending
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2006000864B1 (fr) | Systeme de transaction et de paiement permettant a un fournisseur de transactions de securiser l'authentification/la validation a distance de transactions | |
CN113169971B (zh) | 安全扩展距离的应用程序数据交换 | |
US7693797B2 (en) | Transaction and payment system security remote authentication/validation of transactions from a transaction provider | |
US7882552B2 (en) | Remote administration of smart cards for secure access systems | |
EP1278333B1 (fr) | Systeme de communication de terminaux | |
US8549602B2 (en) | System and method for handling permits for user authentication tokens | |
CN108476227A (zh) | 用于设备推送供应的系统和方法 | |
US9363262B1 (en) | Authentication tokens managed for use with multiple sites | |
CN102483779A (zh) | 从id-令牌中读取属性的方法 | |
KR101202295B1 (ko) | 고유키 값을 이용한 간편 결제 방법 및 그 장치 | |
US20130080331A1 (en) | System and Method for Instantaneous Retail Payment | |
WO1998032113A1 (fr) | Procede et systeme de controle de cle pour signature electronique | |
CN101448257A (zh) | 一种对用户终端进行验证的控制系统及控制方法 | |
KR20070084801A (ko) | 스마트카드를 이용한 원 타임 패스워드 생성 및 인증방법그리고 이를 위한 스마트카드 | |
US10867326B2 (en) | Reputation system and method | |
KR20020075325A (ko) | 무선 인터넷을 활용한 인증서 발급 시스템 및 그 방법 | |
CN111461706A (zh) | 基于区块链的用户信息绑定方法及装置 | |
KR101617452B1 (ko) | 오티피를 이용한 온라인 결제방법 | |
KR20040087362A (ko) | 전자가치 저장 디바이스를 구비한 사용자 단말과 이를이용한 자기확인 가능한 전자가치 서비스 시스템 및 방법 | |
KR100643501B1 (ko) | Ic 카드 발급을 위한 키 전달 방법 및 시스템 | |
CN114066626A (zh) | 密码货币交易系统 | |
KR20100134200A (ko) | 휴대폰 번호를 통한 온라인 결제방법 및 시스템과 이를 위한 기록매체 | |
JP2004334783A (ja) | 電子価値流通システムおよび電子価値流通方法 | |
JP2002334304A (ja) | Icカード格納情報一括変更方法及びシステム | |
KR20010104390A (ko) | 이동통신단말기를 이용한 신용카드 및 온-라인 금융거래 방법 |