User authentication based on RFID-enabled identity document and gesture challenge-response protocol

A user terminal for providing secure authenticated registration between a user and a third party, wherein the user is associated with the user terminal, the user terminal comprising:

• a network interface;
• one or more processors configured to run an application associated with the third party, wherein the application is configured to:
• read a chip to receive chip data stored on the chip;
• transmit the chip data, via the network interface, over a network to an authentication server associated with said third party and in response receive, via said network interface, a notification message from the authentication server;
• determine whether an identification document associated with the chip data is authentic based on the notification message from the authentication server, and in response to determining that the identification document is authentic, the application further configured to:
• output, via at least one output device of the user terminal associated with the user, an authentication challenge to the user associated with the user terminal;
• receive image data as a response to the authentication challenge;
• and
• transmit the image data, via the network interface, over the network to the authentication server for authenticating the user with the third party.

A computer program product for providing secure authenticated registration between a user and a third party, the computer program product comprising code embodied on a non-transient computer-readable medium and configured so as when executed on a processor of a user terminal associated with the user to:

• read a chip to receive chip data stored on the chip;
• transmit the chip data, via a network interface of the user terminal, over a network to an authentication server associated with said third party and in response receive, via said network interface, a notification message from the authentication server;
• determine whether an identification document associated with the chip data is authentic based on the notification message from the authentication server, and in response to determining that the identification document is authentic:
• output, via at least one output device of the user terminal, an authentication challenge to the user associated with the user terminal;
• receive image data as a response to the authentication challenge;
• and
• transmit the image data, via the network interface, over the network to the authentication server for authenticating the user with the third party.

A method of using an authentication server to provide secure authenticated registration between a user and a third party associated with the authentication server, the method comprising:

• receiving from a user terminal, chip data that has been obtained from a chip, wherein the user terminal is associated with the user;
• determining authenticity of an identification document associated with the user by comparing the chip data to data pre-stored in a data store;
• in response to determining that the identification document is authentic, transmitting a notification message to the user terminal associated with the user indicating that the identification document is authentic;
• receiving image data as a response to an authentication challenge outputted to the user on the user terminal;
• determining authenticity of the user associated with the user terminal based on the image data and the chip data;
• and
• transmitting a further notification message to the user terminal indicating whether the user has been successfully authenticated with the third party.

An authentication server for providing secure authenticated registration between a user and a third party associated with the authentication server, the authentication server comprising a processor configured to:

• receive from a user terminal associated with the user, chip data that has been obtained from a chip;
• determine authenticity of an identification document associated with the user by comparing the chip data to data pre-stored in a data store;
• in response to determining that the identification document is authentic, transmit a notification message to the user terminal indicating that the identification document is authentic;
• receive image data as a response to an authentication challenge outputted to the user on the user terminal;
• determine authenticity of the user associated with the user terminal based on the image data and the chip data;
• and
• transmit a further notification message to the user terminal indicating whether the user has been successfully authenticated with the third party.

A computer program product for providing secure authenticated registration between a user and a third party, the computer program product comprising code embodied on a non-transient computer-readable medium and configured so as when executed on a processor of an authentication server associated with the third party to:

• receive from a user terminal associated with the user, chip data that has been obtained from a chip;
• determine authenticity of an identification document associated with the user by comparing the chip data to data pre-stored in a data store;
• in response to determining that the identification document is authentic, transmit a notification message to the user terminal indicating that the identification document is authentic;
• receive image data as a response to an authentication challenge outputted to the user on the user terminal;
• determine authenticity of the user associated with the user terminal based on the image data and the chip data;
• and
• transmit a further notification message to the user terminal indicating whether the user has been successfully authenticated with the third party.