Method of authenticating communication of an authentication device and at least one authentication server using local factor

A method for authenticating the communication of an authentication device and at least one authentication server using a local factor, wherein a secret information shared between the authentication device and the at least one authentication server is created within an initializing authentication transaction, characterized in that a reference information is derived from the secret information shared between the authentication device and the at least one authentication server, wherein the reference information is derived from the secret information in the same way in the authentication device and in the at least one authentication server;

• and the authentication device creates a transformed reference information from the reference information by means of a cryptographic transformation, wherein a local factor chosen and entered by the user or obtained from a medium or from the surrounding environment is used as an input in said cryptographic transformation, and where only the transformed reference information is stored in the authentication device and only the reference information is stored in the at least one authentication server,
• wherein the local factor is a secret information held by the user;
• and wherein the local factor or any information from which the local factor could be retrieved is not stored in the authentication device nor in the at least one authentication server, and
• wherein in each subsequent authentication transaction using the local factor initialized in the initializing authentication transaction, the authentication device obtains the local factor from the user, from a medium or from the surrounding environment, and the reference information is derived in the authentication device from the stored transformed reference information by means of inverse cryptographic transformation using said obtained local factor as an input for said inverse cryptographic transformation, and the thus obtained reference information is transmitted to the at least one authentication server, where it is verified using the reference information stored in the at least one authentication server.