Back to results
US 2016/0260078 A1Published application
User authentication method and device for credentials back-up service to mobile devices
AssigneeMastercard International Incorporated
InventorsSimon Phillips, Mark Britten, Mehdi Collinge
Life of this patent
Estimating the term…
Abstract
Back-up credentials data is stored for a user. A communication channel is established with a mobile device. A cryptogram is received from the mobile device, such that the cryptogram is relayed by the mobile device from an authentication device that interacted with the mobile device. The authentication device is associated with the user. The cryptogram is verified. In response to the verification of the cryptogram, the stored back-up credentials data is made accessible to the mobile device.
Claims21
A method comprising:
- storing back-up credentials data in a back-up services computer;
- establishing a communication channel between a mobile device and the back-up service computer, said mobile device configured to engage in mobile telecommunications via a mobile telecommunications network, said communication channel constituted at least in part by said mobile telecommunications network;
- exchanging short-range wireless data communications between an authentication device and the mobile device;
- entering user authentication data into the mobile device;
- transmitting the user authentication data from the mobile device to the authentication device;
- receiving the user authentication data in the authentication device;
- verifying the received user authentication data in the authentication device;
- in response to a result of the verifying step, generating a cryptogram in the authentication device;
- transmitting the cryptogram from the authentication device to the mobile device;
- receiving the cryptogram in the mobile device;
- transmitting the cryptogram from the mobile device to the back-up services computer;
- receiving the cryptogram in the back-up services computer;
- verifying the cryptogram in the back-up services computer;
- and
- in response to a result of the second verifying step, making the stored back-up credentials data accessible to the mobile device.
12 more elements
An authentication device, comprising:
- a support shaped and sized to be held in a user's hand;
- a processor supported by the support;
- a memory supported by the support and in communication with the processor;
- and
- a short-range data communication transceiver supported by the support and controlled by the processor;
- the memory storing program instructions, the processor operative with the program instructions to perform functions as follows:
- receiving user authentication data via the transceiver from a mobile device in proximity to the authentication device;
- verifying the received user authentication data;
- receiving challenge data from the mobile device;
- in response to a result of the verifying function, generating a cryptogram by digitally signing the challenge data with a cryptographic key;
- and
- transmitting the cryptogram via the transceiver to the mobile device.
9 more elements
A method comprising:
- storing back-up credentials data for a user;
- establishing a communications channel with a mobile device;
- receiving a cryptogram and challenge data from the mobile device, the cryptogram relayed by the mobile device from an authentication device that interacted with the mobile device, the authentication device associated with the user, the challenge data randomly or pseudo-randomly generated by the mobile device;
- verifying the cryptogram by using the challenge data to verify data obtained by decrypting the cryptogram;
- and
- in response to a result of the step of verifying the cryptogram, making the stored back-up credentials data accessible to the mobile device.
3 more elements
Dependencies are inferred from the claim text.