Combined User Authentication and Device/Application Integrity Check

An apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least perform:

• receiving a service request from an electronic device;
• receiving first information, wherein the first information is useable by an apparatus for checking the integrity of the electronic device and/or of at least one application of the electronic device, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device;
• sending or causing sending of an authentication request to the apparatus to at least cause authentication of a user of the electronic device;
• and
• receiving authentication information,
• wherein at least a part of the authentication information is indicative of the user having been authenticated and
• wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device and/or the at least one application of the electronic device are considered integer by the apparatus.

An apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least perform:

• obtaining a first information useable for checking an integrity of an electronic device and/or an integrity of at least one application of the electronic device, wherein the first information is obtained upon startup of the at least one application of the electronic device from a security management server;
• sending a service request to An apparatus;
• including the obtained first information in the service request or providing the first information together with the service request, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device;
• providing information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device;
• and
• providing information related to an identity of a user of the electronic device,
• wherein the information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device is provided in or together with the service request, or
• wherein the information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device is provided upon request after sending the service request.

A method, comprising:

• receiving an authentication request related to authentication of a user of an electronic device towards an apparatus;
• obtaining a first information, wherein the obtained first information is usable for checking or causing checking of an integrity of the electronic device and/or at least one application of the electronic device;
• checking or causing checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device,
• wherein the obtaining of the first information is performed prior to the checking or causing checking of the integrity, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device;
• performing or causing authentication of the user of the electronic device;
• and
• returning or causing returning of authentication information towards the server of the service provider;
• wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information is indicative of the user having been authenticated by the authentication, and
• wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device and/or the at least one application has/have been considered integer by the checking.

A method, comprising:

• receiving a service request from an electronic device;
• receiving first information, wherein the first information is useable by an apparatus for checking the integrity of the electronic device and/or of at least one application of the electronic device, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device;
• sending or causing sending of an authentication request to the apparatus to at least cause authentication of a user of the electronic device;
• and
• receiving authentication information,
• wherein at least a part of the authentication information is indicative of the user having been authenticated and
• wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device and/or the at least one application of the electronic device are considered integer by the apparatus.

A method, comprising:

• obtaining a first information useable for checking an integrity of an electronic device and/or an integrity of at least one application of the electronic device, wherein the first information is obtained upon startup of the at least one application of the electronic device from a security management server;
• sending a service request to an apparatus;
• including the obtained first information in the service request or providing the first information together with the service request, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device and/or of the integrity of the at least one application of the electronic device;
• providing information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device;
• and
• providing information related to an identity of a user of the electronic device, wherein the information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device is provided in or together with the service request, or
• wherein the information related to the integrity of the electronic device and/or to the integrity of the at least one application of the electronic device is provided upon request after sending the service request.