Mobile authentication and registration for digital certificates
AssigneeQueralt, Inc.
InventorMichael Queralt
Life of this patent
Estimating the term…
Abstract
A system and method for integrating hierarchical authentication systems and non-hierarchical authentication systems. The system and method is provided in one configuration as a mobile app that functions to allow a mobile device to access highly sensitive data while simultaneously ensuring a highly secured environment utilizing both hierarchical authentication systems and non-hierarchical authentication systems to provide a highly reliable authentication process.
Claims14
A system for peer-to-peer registering a user and a mobile device to an online service server via a network connection based on a public-private key pair in which certified information about the user and information about the mobile device are used in a new registration request where the private key is securely retained in the device and the public key is registered with the online service server, the system comprising:
- a memory and a processor;
- a software executing on the mobile device transmitting information about the user from the mobile device to a Public Key Infrastructure (PKI) authentication server via a network connection;
- said software executing on the mobile device receiving from the PKI authentication server a digitally signed electronic document containing certified information about the user;
- wherein the certified information about the user is selected from the group consisting of:
- the user's name, an email address, an expiration date, a unique serial number assigned to the electronic document by the second authentication server, the user's public key, information about rights and uses associated with the electronic document, a name of an authentication service that issued the electronic document, an authentication service signature, and an algorithm identifier that identifies which algorithm was used to sign the electronic document and combinations thereof;
- said software executing on the mobile device transmitting a registration request to the online service server via a network connection;
- said online service server transmitting data relating to the registration request to a Fast Identity Online (FIDO) authentication server via a network connection;
- said software executing on the mobile device receiving a peer-to-peer registration request based on the public-private key pair from a the FIDO authentication server via a network connection;
- said software executing on the mobile device retrieving the certified information about the user from the digitally signed electronic document;
- said software executing on the mobile device inserting the certified information about the user and inserting information about the mobile device into a peer-to-peer registration message and transmitting the peer-to-peer registration message to the FIDO authentication server.
A method for peer-to-peer registering a user and a mobile device to an online service server via a network connection based on a public-private key pair in which certified information about the user and information about the mobile device are used in a new registration request where the private key is securely retained in the device and the public key is registered with the online service server, the method comprising the steps of:
- transmitting information about the user from the mobile device to a Public Key Infrastructure (PKI) authentication server via a network connection;
- receiving at the mobile device a digitally signed electronic document containing certified information about the user from the PKI authentication server;
- wherein the certified information about the user is selected from the group consisting of:
- the user's name, an email address, an expiration date, a unique serial number assigned to the electronic document by the second authentication server, the user's public key, information about rights and uses associated with the electronic document, a name of an authentication service that issued the electronic document, an authentication service signature, and an algorithm identifier that identifies which algorithm was used to sign the electronic document and combinations thereof;
- transmitting a registration request from the mobile device to the online service server via a network connection;
- transmitting data relating the registration request from the online service server to a Fast Identity Online (FIDO) authentication server via a network connection;
- receiving at the mobile device a peer-to-peer registration request based on the public-private key pair from the FIDO authentication server;
- retrieving the certified information about the user from the digitally signed electronic document on the mobile device;
- inserting the certified information about the user and information about the mobile device into a peer-to-peer registration message and transmitting the peer-to-peer registration message from the mobile device to the FIDO authentication server.
Dependencies are inferred from the claim text.