US 2018/0123794 A1 · A FIRST ENTITY, A SECOND ENTITY, AN INTERMEDIATE NODE, METHODS FOR SETTING UP A SECURE SESSION BETWEEN A FIRST AND SECOND ENTITY, AND COMPUTER PROGRAM PRODUCTS

Abstract

The invention relates to a method for setting up a secure session between a first entity and a second entity. In an embodiment, the first entity is a user authentication device and the second entity is an application running on a platform. The method comprises generating a first random number. A user enters a first string, derived from said first number, into the second entity. Further, the method includes applying a one-way function to the first string or to a derivative thereof, obtaining an encoded string. The method also comprises transmitting the encoded string to an intermediate node that is in connection to the first entity and the second entity. Further, the method comprises the step of sharing a second random number with the second entity. The method also comprises a step of deriving a secret key from the first and the second string.

Claims35

Dependent claims

A method for performing an instruction on a platform application, comprising the steps of:

preparing a persistent instruction on a user workplace application that is remotely connected to the platform application;
forwarding the persistent instruction to the platform application;
setting up a secure connection between the platform application and an authentication device;
performing an authorization dialog between the transaction system application and the authentication device;
and
executing the instruction only when the authorization dialog has successfully finished.

3 more elements

A platform application that is remotely connected to a user workplace application and that has a secure connection with an authentication device, the platform application comprising a processor that is arranged for:

receiving a persistent instruction prepared on the user workplace;
performing an authorization dialog with the authentication device, via the secure connection;
and
executing the instruction only when the authorization dialog has successfully finished.

1 more element

A computer program product for performing an instruction on a platform application, the computer program product comprising computer readable code for facilitating a processing unit to perform the steps of:

preparing a persistent instruction on a user workplace application that is remotely connected to the platform application;
forwarding the persistent instruction to the platform application;
setting up a secure connection between the platform application and an authentication device;
performing an authorization dialog between the transaction system application and the authentication device;
and
executing the instruction only when the authorization dialog has successfully finished.

3 more elements

Dependencies are inferred from the claim text.

A first entity, a second entity, an intermediate node, methods for setting up a secure session between a first and second entity, and computer program products

Life of this patent

A first entity, a second entity, an intermediate node, methods for setting up a secure session between a first and second entity, and computer program products

Life of this patent

Abstract

Claims35