Method for establishing the authenticity of the identity of a service user and device for carrying out the method
AssigneeE-Plus Mobilfunk GmbH & Co. KG
InventorsChristian Müller, Alexis Trolin, Siegfried Ergezinger, Anita Döhler
Life of this patent
Estimating the term…
Abstract
The invention relates to a process and a device for establishing the authenticity of the identity of a service user relative to a service provider for release of an access authorization (password) for a service using two different data input terminals, a registration server and a message converter.
Claims9
Process for establishing the authenticity of the identity of a service user (6) relative to the service provider (2) for release of an access authorization (password) for a service using two different data input terminals (1, 5), a registration server (3) and a message converter (4),
- a) from the service user (6) in a first step over a secure connection (7), for example in the Internet, via the data input terminal (1) a connection being established to the registration server (3) of the service provider (2), with the request to transfer an access identification character (password;
- TAN);
- b) whereupon in second step the registration server (3) on the same transmission path (7) as under a) an invalid password (identification character;
- TAN) is sent to the data input terminal (1) of the registered service user (6) [sic];
- c) whereupon the service user (6) inputs the invalid password which has been sent to the data input terminal (1) into a second terminal device (5) (mobile device;
- fixed network device) which is different from the data input terminal (1) and which is registered for the same service user (6) according to a) in the registration server (3);
- d) whereupon this invalid password or the like is sent from this second terminal device (5) over a transmission path (8) which is different from the transmission path mentioned under item a) and b) to a message converter (4) of the service provider (2);
- e) and that the message converter (4) together with the registration server (3) compares the invalid password or the like which has been sent back to the password sent to the data input terminal (1) and when the authorization data of the service user (6) for the data input terminal (1) and for the second terminal device (5) which is different from it are the same the password is released as valid.
Dependencies are inferred from the claim text.