Securing a transaction performed from a non-secure terminal
AssigneeSkeyecode
InventorsJean-Luc Leleu, Guillaume Pitel
Life of this patent
Estimating the term…
Abstract
In a general aspect, a method for authenticating a user including: receiving, from a secure processor, a software component configured to generate an image frame including encrypted information; executing the software component, the execution of the software component generating the image frame; displaying the image frame; superimposing on the image frame a semi-transparent image including transparent and opaque pixels configured to make the encrypted information intelligible to the user; acquiring from the user a response depending on the information; and transmitting the acquired response to the secure processor, the user being authenticated by the secure processor as a function of the acquired response.
Claims23
A method for authenticating a user, the method comprising:
- receiving a software component configured to generate an image frame including encrypted information;
- executing the software component, the execution of the software component generating the image frame;
- displaying the image frame;
- superimposing, on the image frame, a semi-transparent image including transparent and opaque pixels configured to make the encrypted information intelligible to the user;
- acquiring, from the user, a response depending on the encrypted information;
- and
- transmitting the acquired response to a secure processor, the user being authenticated by the secure processor as a function of the acquired response.
A user terminal configured to:
- receive a software component configured to generate an image frame including encrypted information;
- execute the software component, the execution of the software component generating the encrypted image frame;
- display the encrypted image frame, the encrypted information being decrypted by superimposing, on the image frame, a semi-transparent image comprising transparent and opaque pixels configured to make the encrypted information intelligible to the user;
- acquire from the user a response depending on the encrypted information in the displayed image frame;
- and
- transmit the acquired response to a secure processor, the user being authenticated by the secure processor as a function of the acquired response.
The terminal of claim 16, wherein the partial decryption operation combines each pixel value provided by the software component with a corresponding pixel value of the decryption mask by an Exclusive OR operation.
A secure element connected to a processor of a terminal and configured to:
- transmit, to a user terminal, a software component configured to generate an image frame including encrypted information, the encrypted information becoming intelligible to the user when a semi-transparent image including transparent and opaque pixels is superimposed on the image frame;
- receive, from the user terminal, a response acquired from a user and depending on the encrypted information;
- and
- authenticate the user when the acquired response corresponds with the encrypted information.
A server linked to a user terminal through a data transmission network and configured to:
- transmit, to a user terminal, a software component configured to generate an image frame including encrypted information, the encrypted information becoming intelligible to the user when a semi-transparent image including transparent and opaque pixels is superimposed on the image frame;
- receive, from the user terminal, a response acquired from a user and depending on the encrypted information;
- and
- authenticate the user when the acquired response corresponds with the encrypted information.
A computer program product loadable into a computer memory and comprising code portions which, when carried out by a computer, configure the computer to:
- receive a software component configured to generate an image frame including encrypted information;
- execute the software component, the execution of the software component generating the encrypted image frame;
- display the encrypted image frame, the encrypted information being decrypted by superimposing, on the image frame, a semi-transparent image comprising transparent and opaque pixels configured to make the encrypted information intelligible to the user;
- acquire, from the user, a response depending on the encrypted information in the displayed image frame;
- and
- transmit the acquired response to a secure processor, the user being authenticated by the secure processor as a function of the acquired response.
Dependencies are inferred from the claim text.