Method and system for authenticating a user by means of an application
View Patent ↗Methods and systems are provided for authentication in electronic devices using multi-level security schemes. In an electronic device, at each particular level of a plurality of security levels of a multi-level security scheme, one or more identifiers associated with the particular level may be read from a user-specific card; and for each identifier of the one or more identifiers, associated data for use in validating the identifier may be read from the user-specific card. The identifier may then be authenticated within the electronic device, using the associated data; or may be forwarded, based on the associated data, to a particular remote server for verification of the identifier. Each identifier may comprise one of: user identifier, operator identifier, and application identifier. An application associated with each identifier may be identified, and the application may be executed after a positive authentication of the identifier.
1. A method comprising:
in an electronic device, at each one of a plurality of security levels of a multi-level security scheme:
reading from a user-specific card, one or more corresponding identifiers;
reading from said user-specific card, for each identifier of said one or more corresponding identifiers, associated data for use in validating said identifier;
for each identifier of said one or more corresponding identifiers:
authenticating said identifier within said electronic device using said associated data; or
forwarding said identifier based on said associated data to a remote server for verification of said identifier; and
when said identifier comprises an application identifier:
verifying said application identifier;
reading out from said user-specific card a second identifier, wherein said second identifier comprises a user identifier; and
sending said user identifier to said remote server in order to request additional information for said user before executing a particular application associated with said application identifier.
2. The method of claim 1 , wherein said identifier comprises one of: user identifier, operator identifier, and application identifier.
3. The method of claim 1 , wherein said user-specific card comprises an radio-frequency identification (RFID) element or a subscriber identification module (SIM) card.
4. The method of claim 1 , wherein said remote server comprises information relating to registration of a plurality of user-specific cards.
5. The method of claim 1 , comprising reading out data from said user-specific card via a contactless interface.
6. The method of claim 1 , comprising:
identifying an application associated with said identifier; and
executing said application after a positive authentication of said identifier.
7. The method of claim 1 , comprising, when said identifier comprises a user identifier, sending said user identifier to said remote server, after authenticating of said user identifier.
8. The method of claim 7 , comprising receiving from said remote server, in response to reception of said user identifier, additional information associated with said user.
9. A system, comprising:
an electronic device configured to implement a multi-level security scheme, wherein said electronic device is operable to, at each one of a plurality of security levels of said multi-level security scheme:
read from a user-specific card, one or more corresponding identifiers;
read from said user-specific card, for each identifier of said one or more corresponding identifiers, associated data for use in validating said identifier;
for each identifier of said one or more corresponding identifiers:
authenticate said identifier using said associated data; or
forward said identifier based on said associated data to a remote server for verification of said identifier; and
when said identifier comprises an application identifier:
authenticate said application identifier;
read out from said user-specific card a second identifier, wherein said second identifier comprises a user identifier; and
send said user identifier to said remote server in order to request additional information for said user before executing a particular application associated with said application identifier.
10. The system of claim 9 , wherein said identifier comprises one of: user identifier, operator identifier, and application identifier.
11. The system of claim 9 , wherein said remote server comprises information relating to registration of a plurality of user-specific cards.
12. The system of claim 9 , wherein said user-specific card comprises an radio-frequency identification (RFID) element or a subscriber identification module (SIM) card.
13. The system of claim 9 , wherein said electronic device is operable to read out data from said user-specific card via a contactless interface.
14. The system of claim 9 , wherein said electronic device is operable to:
identify an application associated with said identifier; and
execute said application after a positive authentication of said identifier.
15. The system of claim 9 , wherein said electronic device is operable to, when said identifier comprises a user identifier, send said user identifier to said remote server, after authenticating of said user identifier.
16. The system of claim 15 , wherein said electronic device is operable to receive from said remote server, in response to sending said user identifier, additional information associated with said user.