User authentication method and device for credentials back-up service to mobile devices
AssigneeMastercard International Incorporated
InventorsSimon Phillips, Mark Britten, Mehdi Collinge
Life of this patent
Estimating the term…
Abstract
Back-up credentials data is stored for a user. A communication channel is established with a mobile device. A cryptogram is received from the mobile device, such that the cryptogram is relayed by the mobile device from an authentication device that interacted with the mobile device. The authentication device is associated with the user. The cryptogram is verified. In response to the verification of the cryptogram, the stored back-up credentials data is made accessible to the mobile device.
Claims20
An authentication device, comprising:
- a processor;
- a memory in communication with the processor;
- and
- a short-range data communication transceiver controlled by the processor;
- the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
- receiving user authentication data via the transceiver from a mobile device in proximity to the authentication device;
- verifying the received user authentication data;
- receiving challenge data from the mobile device;
- in response to a result of the verifying function, generating a cryptogram by digitally signing the challenge data with a cryptographic key;
- and
- transmitting the cryptogram via the transceiver to the mobile device.
A method comprising:
- receiving user authentication data, via a short-range data communication transceiver in an authentication device, from a mobile device in proximity to the authentication device;
- verifying, in the authentication device, the received user authentication data;
- receiving, in the authentication device, challenge data from the mobile device;
- in response to a result of the verifying function, generating a cryptogram in the authentication device by digitally signing the challenge data with a cryptographic key;
- and
- transmitting the cryptogram via the transceiver from the authentication device to the mobile device.
An apparatus for confirming authentication of a user of a mobile device, the apparatus comprising:
- a processor;
- and
- a memory in communication with the processor, the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
- storing back-up credentials data for a user;
- establishing a communications channel with the mobile device;
- receiving a cryptogram and challenge data from the mobile device, the cryptogram relayed by the mobile device from an authentication device that interacted with the mobile device to support authentication of a user of the mobile device and the authentication device, the authentication device different from the mobile device, the authentication device associated with the user;
- verifying the cryptogram;
- and
- in response to a result of the step of verifying the cryptogram, making the stored back-up credentials data accessible to the mobile device.
Dependencies are inferred from the claim text.