Method and device for identification and authentication

Abstract

A method and a device of identification and authentication of a holder of a mobile electronic transaction device in an electronic transaction process between a transaction service provider and a transaction terminal in communication via a computer network. The mobile electronic has transceiver means for transmitting information to and receiving information from the transaction terminal, data input means, data processing means, data storage means for storing information including an externally accessible device identity, a non-retrievable reference user identification, and including a non-retrievable secret key to be processed by the processing means and used in communication with the service provider by the transceiver means over the network via the transaction terminal for validating a transaction, and means supplying electric energy to the device. The transceiver means is adapted for transmitting the device identity to the transaction terminal and receiving a challenge transaction identifier from the service provider via the transaction terminal. The processing means is adapted for determining an authenticity of a user identification input by comparison with the reference user identification, and for performing a cryptographic transformation of the transaction identifier using the secret key only on the identification input being determined as authentic The transceiver means is also adapted for transmitting a response result of the cryptographic transformation to the service provider via the transaction terminal for validating the transaction.

Dependencies are inferred from the claim text.