Method of allowing establishment of a secure session between a device and a server
AssigneeGemalto SA
InventorOlivier POTONNIEE
Life of this patent
Estimating the term…
Abstract
The invention is a method for allowing a user to establish a secure session between a device and a server by using a username/password associated with the user. The user provides the username for the device. In response to a message comprising the username, the server opens a session and generates an identifier of the session and sends the identifier to the device. The identifier is transmitted to a machine distinct from the device. The user provides the password for the machine. The machine sends an authenticating message to the server, the authenticating message comprises the identifier and an authenticating data generated from the password. The server sends a result message reflecting the result of the authenticating data checking to the device.
Claims9
A method for allowing a user to establish a secure session between a first device and a server by using a username and a password associated with the user, the method comprising the following steps:
- the server opens a session, generates an identifier of the session and sends the identifier to the first device,
- the identifier is transmitted to a second device,
- the second device sends an authenticating message to the server, said authenticating message comprising a first reference data based on the identifier and an authenticating data generated from the password,
- the server sends a result message reflecting the result of the authenticating data checking to the first device,
- wherein the second device is distinct from said first device and wherein the method comprises the following steps:
- the user provides the username for said first device without providing the password for said first device,
- said first device sends a message comprising the username to the server,
- the user provides the password for said second device without providing the username for said second device.
A server configured to establish a secure session with a first device by using a username and a password associated with a user, the first device comprising an interface configured to obtain the username entered by the user and to send the username to the server,
- wherein the server is configured to send a first login page to said first device and a second login page to a second device distinct from said first device, wherein the first login page is configured to allow the user providing the username for said first device without providing said password for said first device, wherein the second login page is configured to allow the user providing the password for said second device without providing said username for said second device, and wherein the server comprises a session means able to open a session, to send an identifier of the session to said first device and to associate the identifier with the username, wherein the server comprises a checking means adapted to receive an authenticating message from the second device, said authenticating message comprising a first reference data and an authenticating data, wherein the checking means is adapted to match up the username with the authenticating data if said first reference data matches the identifier and to check if the authenticating data has been correctly generated from the password, wherein the checking means is adapted to send a result message reflecting the result of the authenticating data checking in response to a polling message sent by the first device, and wherein said checking means is adapted to extract a second reference data from the polling message and to associate the result message with the polling message if said second reference data matches the identifier.
Dependencies are inferred from the claim text.