AUTHENTICATION SYSTEM VIA TWO COMMUNICATION DEVICES
To authenticate a user possessing a first communication terminal (TC 1 ) and a second communication terminal (TC 2 ), the first terminal being connected to an application server (SApp) in order to access a service, this application server being connected to an authentication server (SAuth) capable of communicating with the second terminal, the authentication server (SAuth) receives a user identifier (IdU) transmitted from the first terminal and identifies the second terminal based on the received identifier. The server generates coding data (DonC) and transmits it to one of the two terminals, and transmits a command to the other one of the two terminals to invite the user to provide a set of data (EnsD) using the coding data received by said one of the two terminals. The server compares the set of data with secret data (DonS) using the coding data, in order to allow the user access to the application server (SApp).
1 - 11 . (canceled)
12 . A method for authentication, the method comprising the steps of:
receiving a user identifier communicated from a first communication terminal;
identifying a second communication terminal based on the user identifier;
generating coding data;
transmitting the coding data to a first receiving communication terminal, the first receiving communication terminal being one of the first and second communication terminals;
transmitting a command to a second receiving communication terminal to prompt provision of a set of data using the coding data, the second receiving communication terminal being the other one of the first and second communication terminals; and
comparing the set of data provided from the second receiving communication terminal with secret data based on the coding data to provide authentication for service access via the first communication terminal.
13 . The method of claim 12 , wherein the step of identifying comprises using a previously saved association between the user identifier and an identifier of the second communication terminal.
14 . The method of claim 12 , wherein the step of identifying comprises using additional information received with the user identifier to identify the second communication terminal.
15 . The method of claim 12 , further comprising the steps of:
receiving an initial user identifier from the second communication terminal;
generating a temporary user identifier; and
transmitting the temporary user identifier to the second communication terminal, wherein the temporary user identifier is used in place of the user identifier in the step of receiving a user identifier.
16 . The method of claim 12 , further comprising the steps of:
receiving a second communication terminal identifier from the second communication terminal;
generating a temporary user identifier based on an association between a user identity and the second communication terminal identifier; and
transmitting the temporary user identifier to the second communication terminal, wherein the temporary user identifier is used in place of the user identifier in the step of receiving a user identifier.
17 . The method of claim 12 , wherein the coding data defines a relationship between between two sets of characters.
18 . The method of claim 12 , wherein the coding data changes when a predetermined number of characters has been provided by the second receiving communication device.
19 . The method of claim 12 , wherein the coding data is transmitted in text form.
20 . The method of claim 12 , wherein the coding data is transmitted in table form.
21 . The method of claim 12 , wherein the coding data is transmitted in image form.
22 . The method of claim 12 , wherein the coding data is transmitted in voice form.
23 . The method of claim 12 , wherein the secret data is a password.
24 . An authentication server, comprising:
means for receiving a user identifier communicated from a first communication terminal;
means for identifying a second communication terminal based on the user identifier;
means for generating coding data;
means for transmitting the coding data to a first receiving communication terminal, the first receiving communication terminal being one of the first and second communication terminals;
means for transmitting a command to a second receiving communication terminal to prompt provision of a set of data using the coding data, the second receiving communication terminal being the other one of the first and second communication terminals; and
means for comparing the set of data provided from the second receiving communication terminal with secret data based on the coding data to provide authentication for service access via the first communication terminal.
25 . A computer program capable of being implemented within a server for performing authentication, the computer program comprising instructions that, when the program is loaded and executed in the server, carries out the steps comprising of:
receiving a user identifier communicated from a first communication terminal;
identifying a second communication terminal based on the user identifier;
generating coding data;
transmitting the coding data to a first receiving communication terminal, the first receiving communication terminal being one of the first and second communication terminals;
transmitting a command to a second receiving communication terminal to prompt provision of a set of data using the coding data, the second receiving communication terminal being the other one of the first and second communication terminals; and
comparing the set of data provided from the second receiving communication terminal with secret data based on the coding data to provide authentication for service access via the first communication terminal.