Method for authenticating a user and corresponding user devices, server and system

A first user device for authenticating a user,

• wherein the first user device is configured to:
• send to a server, through a first communication channel, a message including the identifier relating to the user and a request to get a challenge table, as challenge user authentication data;
• receive, from a user, through a man machine interlace relating to the first user device, at least one corresponding character, as at least one selected character, the at least one corresponding character being displayed by or through a second user device;
• and
• send to the server, through the first communication channel, a challenge response message including the at least one selected character, as submitted user authentication data.

A second user device for authenticating a user,

• wherein the second user device is configured to:
• receive from a server, through a second communication channel, a message including the first challenge table and a first request to display the first challenge table;
• and
• display, by or through the second user device, the first challenge table.

A server for authenticating a user,

• wherein, the server comprising means for accessing an identifier relating to the user associated with an identifier relating to a second user device, the server comprising means for accessing, for the user, at least one predetermined reference location within a reference table, the server is configured to:
• receive from a first user device, through a first communication channel, a first message including the identifier relating to the user and a request to get a challenge table, as challenge user authentication data;
• generate a first challenge table including a first set of characters, the first challenge table being valid;
• send, thanks to the second user device identifier, to the second user device, through a second communication channel, a second message including the first challenge table and a first request to display the first challenge table;
• receive, from the first user device, through the first communication channel, a third message, as a challenge response message, including at least one selected character, as submitted user authentication data;
• determine, based upon the at least one predetermined reference location within the first challenge table, as the reference table, at least one corresponding reference character, as reference user authentication data;
• verify, for the user, whether the submitted user authentication data does or does not match the reference user authentication data;
• and
• succeed in authenticating the user only if the submitted user authentication data matches the reference user authentication data;
• or
• fail to authenticate the user only if the submitted user authentication data does not match the reference user authentication data.

A system for authenticating a user,

• wherein, the system including a server and a first user device and at least one second user device, the server comprising means for accessing an identifier relating to the user associated with an identifier relating to the second user device, the server comprising means for accessing, for the user, at least one predetermined reference location within a reference table,
• a first user device is configured to send, through a first communication channel, to the server, a first message including the identifier relating to the user and a request to get a challenge table, as challenge user authentication data;
• the server is configured to:
• generate a first challenge table including a first set of characters, the first challenge table being valid;
• send, thanks to the second user device identifier, to the second user device, through a second communication channel, a second message including the first challenge table and a first request to display the first challenge table;
• the second user device is configured to display or let display the first challenge table;
• the first user device is configured to:
• receive, through a man machine interface relating to the first user device, at least one corresponding displayed character, as at least one selected character;
• send, to the server, through the first communication channel, a third message, as a challenge response message, including the at least one selected character, as submitted user authentication data;
• the server is configured to:
• determine, based upon the at least one predetermined reference location within the first challenge table, as the reference table, at least one corresponding reference character, as reference user authentication data;
• verify, for the user, whether the submitted user authentication data does or does not match the reference user authentication data;
• and
• succeed in authenticating the user only if the submitted user authentication data matches the reference user authentication data;
• or
• fail to authenticate the user only if the submitted user authentication data does not match the reference user authentication data.