Method and system of providing authentication of user access to a computer resource via a mobile device using multiple separate security factors
AssigneeHoverkey Ltd.
InventorARNOLD YAU
Life of this patent
Estimating the term…
Abstract
A method and system of authenticating a computer resource such as an application or data on a mobile device uses a contactless token to provide multi-factor user authentication. User credentials are stored on the token in the form of private keys, and encrypted data and passwords are stored on the device. When application user requires access to the resource an encrypted password is transmitted to and decrypted on the token using a stored private key. An unencrypted data encryption key or password is then transmitted back to the device under the protection of a cryptographic session key which is generated as a result of strong mutual authentication between the device and the token.
Claims30
A method of authenticating access to a computer resource via a mobile device comprising:
- storing an encrypted resource authorization;
- transmitting the encrypted authorization to a separate portable security token;
- on the token, decrypting the encrypted authorization and generating at least partially therefrom an unlock response;
- securely transmitting the unlock response to the mobile device;
- requiring a user to authenticate separately on the mobile device;
- unlocking the resource if the required unlock response and the separate authentication are both valid.
A system of authenticating access to a computer resource via a mobile device with a portable security token, comprising:
- a mobile device;
- a token including a token communications system and a token processor providing cryptographic functions;
- and wherein in use an encrypted authorization is transmitted by the device communications system to the token;
- is decrypted on the token;
- the token generating at least partially therefrom an unlock response, the unlock response being securely transmitted by the token communications system to the mobile device;
- requiring a user to authenticate separately on the mobile device;
- and unlocking the resource if the required unlock response and the separate authentication are both valid.
Dependencies are inferred from the claim text.