# US 10,771,970 B2 · Method of authenticating communication of an authentication device and at least one authentication server using local factor

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,970 B2
- Document ID: US10771970B2
- Status: Granted
- Kind: B2
- Application number: 15/737,717
- Filed: 2016-07-06
- Published: 2018-07-12
- Granted: 2020-09-08
- Earliest claimed: 2015-07-07
- Assignees: Aducid S.R.O.
- Applicants: Aducid S.R.O.
- Inventors: Libor Neumann; Vlastimil Klima
- Web page: https://patentgrep.com/patent/US10771970B2

## CPC

- H04W 12/06: Authentication
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method of authenticating the communication of an authentication device and at least one authentication server using a local factor with creation of secret information shared by the authentication device and the authentication server; the reference information is derived from the secret information shared by the authentication device and the authentication server, where the manner of derivation is the same on the authentication device and on the authentication server; furthermore, the authentication device creates transformed reference information by means of cryptographic transformation from the reference information, where the local factor chosen and entered by the user or obtained from a medium or from the surrounding environment is used as an input in this cryptographic transformation, and where only the transformed reference information is stored on the authentication device and only the reference information is stored on the authentication server.

## Claims

### Claim 1

A method for authenticating the communication of an authentication device and at least one authentication server using a local factor, wherein a secret information shared between the authentication device and the at least one authentication server is created within an initializing authentication transaction, characterized in that a reference information is derived from the secret information shared between the authentication device and the at least one authentication server, wherein the reference information is derived from the secret information in the same way in the authentication device and in the at least one authentication server; and the authentication device creates a transformed reference information from the reference information by means of a cryptographic transformation, wherein a local factor chosen and entered by the user or obtained from a medium or from the surrounding environment is used as an input in said cryptographic transformation, and where only the transformed reference information is stored in the authentication device and only the reference information is stored in the at least one authentication server,
wherein the local factor is a secret information held by the user; and wherein the local factor or any information from which the local factor could be retrieved is not stored in the authentication device nor in the at least one authentication server, and
wherein in each subsequent authentication transaction using the local factor initialized in the initializing authentication transaction, the authentication device obtains the local factor from the user, from a medium or from the surrounding environment, and the reference information is derived in the authentication device from the stored transformed reference information by means of inverse cryptographic transformation using said obtained local factor as an input for said inverse cryptographic transformation, and the thus obtained reference information is transmitted to the at least one authentication server, where it is verified using the reference information stored in the at least one authentication server.

### Claim 2 (depends on 1)

The method according to claim 1, characterised in that the reference information is transmitted from the authentication device to the at least one authentication server in an encrypted form, wherein shared authenticated random information, preferably valid only for one authentication transaction, is used for the encryption.

### Claim 3 (depends on 1)

The method according to claim 1, characterised in that the reference information is transmitted from the authentication device to the at least one authentication server in the form of a product of one-way cryptographic transformation, preferably using a shared authenticated random information as an input for the cryptographic transformation, more preferably using a shared authenticated random information valid only for the given authentication transaction as an input for the cryptographic transformation.

### Claim 4 (depends on 1)

The method according to claim 1, characterised in that when performing a change of the local factor from an original local factor to a new local factor, the change is carried out as follows: the authentication device processes the original local factor entered by the user, obtained from a medium or from the surrounding environment by using it as an input for the inverse cryptographic transformation applied to the transformed reference information in order to obtain reference information; and the new local factor entered by the user, obtained from a medium or from the surrounding environment is processed in the authentication device so that it is used as an input for the cryptographic transformation applied to the reference information in order to obtain a new transformed reference information; wherein in the process of performing the change, the authentication device verifies with the at least one authentication server the accuracy of the original local factor entered by the user or obtained from a medium or from the surrounding environment.

### Claim 5 (depends on 1)

The method according to claim 1, characterised in that authentication of the communication of the authentication device with another authentication server using the same local factor is initialized as follows: first, a secret information shared only between the authentication device and said other authentication server is created within the initializing authentication transaction with said other authentication server, wherein a reference information is derived from said secret information, and the authentication device then creates a transformed reference information from the reference information by means of a cryptographic transformation using the local factor entered by the user, obtained from a medium or from the surrounding environment as an input; wherein before the authentication is completed, the authentication device connects to at least one authentication server where the local factor has already been created, and verifies with this authentication server that a correct local factor has been entered or obtained from a medium or the surrounding environment.

### Claim 6 (depends on 1)

The method according to claim 1, characterised in that several local factors are merged into one local factor as follows: all local factors which are to be merged are entered in the authentication device or obtained from a medium or from the surrounding environment, and the authentication device verifies each of the local factors with, respectively, at least one authentication server where the local factor has been created, and subsequently each of the replaced local factors is processed so that it is used as an input for an inverse cryptographic transformation applied to the transformed reference information in order to obtain the reference information for each authentication server for which the local factor to be merged is valid, and subsequently the local factor which is to replace all the other local factors is processed in the authentication device so that it is used as an input for a cryptographic transformation applied to the reference information in order to obtain a new transformed reference information for each authentication server.