System and method for secure authentication
AssigneeEntersekt, LLC
InventorChristiaan Johannes Petrus Brand
Life of this patent
Estimating the term…
Abstract
A system and method for secure authentication performed on a mobile communication device. The method includes an authentication application carrying out the steps of: receiving a unique identifier for a transaction from a first application provided on the same mobile communication device as the authentication application; receiving an encrypted transaction from a remote secure server; decrypting or obtaining decryption of the transaction with a private key of the authentication application; signing or obtaining signing of the transaction with the private key; signing the transaction with the unique identifier; and transmitting the signed transaction back to the remote secure server.
Claims20
A method for secure authentication performed on a mobile communication device comprising:
- an authentication application carrying out the steps of:
- receiving a unique identifier for a transaction from a first application provided on the same mobile communication device as the authentication application;
- receiving an encrypted transaction from a remote secure server;
- decrypting or obtaining decryption of the transaction with a private key of the authentication application;
- signing or obtaining signing of the transaction with the private key;
- signing the transaction with the unique identifier;
- and
- transmitting the signed transaction back to the remote secure server.
A system for secure authentication, the system comprising a mobile communication device including:
- a first application for communicating with a remote application server for carrying out a transaction;
- an authentication application for communicating with a secure server via a secure protocol for authentication of a transaction;
- wherein a unique identifier for a transaction is sent locally between the first application and the authentication application via a protocol handler provided at the first application for invoking the authentication application.
A computer program product for secure authentication, the computer program product comprising a computer readable storage medium having computer-readable program code configured to carry out the steps:
- receiving a unique identifier for a transaction from a first application provided on the same mobile communication device as the authentication application;
- receiving an encrypted transaction from a remote secure server;
- decrypting or obtaining decryption of the transaction with a private key of the authentication application;
- signing or obtaining signing of the transaction with the private key;
- signing the transaction with the unique identifier;
- and
- transmitting the signed transaction back to the remote secure server.
Dependencies are inferred from the claim text.