Method for authenticating a user accessing a remote server from a computer
The invention relates to a method for authenticating a user accessing a remote server from a computer. The method comprises connecting to the remote server from the computer; logging into the remote server using a user-specific identifier; authenticating the remote server in the computer; sending an unpredictable message from the remote server to the computer; establishing communication between the remote server and a terminal belonging to the user; authenticating the remote server in the terminal; authenticating the terminal in the remote server; inviting the user to enter the unpredictable message in the terminal; using the terminal to send the message entered by the user in the terminal to the remote server; and if the message entered by the user in the terminal matches the unpredictable message, authenticating the user in the remote server.
1. A method for authenticating a user accessing a remote server from a computer, said method comprising:
connecting to said remote server from said computer;
logging into said remote server using a user-specific identifier;
authenticating said remote server in said computer;
sending an unpredictable message from said remote server to said computer;
selecting a terminal belonging to said user by said remote server, based on said user-specific identifier;
sending a message from said remote server to said selected terminal;
authenticating said remote server in said terminal, in response to said message;
authenticating said terminal in said remote server;
inviting said user to enter said unpredictable message in said terminal;
using said terminal to send the message entered by said user in said terminal to said remote server;
if the message entered by said user in said terminal matches said unpredictable message, authenticating said user in said remote server.
2. A method according to claim 1 , wherein said authentications are performed via the SSL protocol.
3. A method according to claim 1 , wherein said terminal is a mobile terminal including a TCP/IP SIM card.
4. A method according to claim 3 , wherein said mobile terminal is a mobile telephone.
5. A method according to claim 3 , wherein said mobile terminal is a PDA.
6. A method according to claim 1 , wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.
7. A method according to claim 2 , wherein said terminal is a mobile terminal including a TCP/IP SIM card.
8. A method according to claim 7 , wherein-said mobile terminal is a mobile telephone.
9. A method according to claim 7 , wherein said mobile terminal is a PDA.
10. A method according to claim 2 , wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.
11. A method according to claim 3 , wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.
12. A method according to claim 4 , wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.
13. A method according to claim 5 , wherein said terminal is authenticated in said remote server after said user has entered a PIN code in said terminal.