A Method for Authenticating a User at an Application, a Related User Device and a Related Server Device
AssigneeSidlabz
InventorSimon Maurice GHEYSENS
Life of this patent
Estimating the term…
Abstract
The invention relates to a method, a user computing device, a related server device for authenticating a user at an application being executed by a user computing device for obtaining access during a communication-session having a session-identification, to a user account of a webservice provided by a server.
Claims14
A method for authenticating a user at an application being executed by a user computing device (1) for obtaining access during a communication-session having a session-identification, to a user account of a webservice provided by a server device (2), wherein said method comprises the step of:
- determining, by said user computing device (UD) at least one unique user identifier of said user computing device;
- and
- generating, by said user computing device (UD) a first secure key based on at least one unique user identifier of said user computing device;
- and
- sending by said user computing device (UD) said first secure key to said server device (2);
- and
- generating, by said user computing device (1) or said server device (2) based on said first unique secure key and a session-identification of a communication session of authenticating a user, a second unique secure key, said second unique secure key being different from said first secure key;
- and sending said second unique secure key and said session-identification to said server device (2) and/or said user computing device (1);
- and
- generating, by said user computing device, an authentication message comprising said second unique secure key phone number of said user computing device (1) for sending to said server device 2;
- and
- authenticating said user computing device (1) for said communication-session, by said server device (2), if said second unique secure key retrieved from said authentication message at receipt of said message matches said second unique secure key maintained at said server device 2, being associated with said session-identification, provided by said server device (2);
- and
- at authentication, registering by said server device (2) said phone number of said user computing device (1) as origin;
- and
- providing access, by said webservice, to said user computing device (1) at authentication of said user computing device by sending a login message to said user computing device (1).
A user computing device (UD) for authenticating a user at an application being executed by said user computing device (UD) for obtaining access, during a communication-session having a session-identification, to a user account of a webservice provided by a server device (2), wherein said user computing device (1) comprises a processing means (11) configured to:
- determine, at least one unique user identifier of said user computing device, for uniquely identifying said user computing device;
- and
- generate a first secure key based on said at least one unique user identifier of said user computing device;
- and
- instruct to send said first secure key to said server device (2);
- and
- optionally generate, based on said first unique secure key and a session-identification of a communication session of authenticating a user, a second unique secure key, said second unique secure key being different from said first secure key;
- and sending said second unique secure key and said session-identification to said server device (2);
- and
- generate, an authentication message comprising said second unique secure key and a phone number of said user computing device (1) for sending to said webservice;
- and
- provide access of said application to said webservice at authentication of said user computing device at receipt of a login message from said server device (2) applying information from said login message.
A server device (2) for authenticating a user at an application being executed by a user computing device (1) for obtaining access, during a communication-session having a session-identification, to a user account of a webservice provided by said server device (1), wherein said server device (1) comprises:
- a communication means (21) configured to
- receive a first secure key and said session-identification from said user computing device (1);
- and said server device (2) further comprises a processing means (22) configured to:
- optionally generate, based on said first unique secure key and said session-identification of a communication session of authenticating a user, a second unique secure key, said second unique secure key being different from said first secure key;
- and
- a communication means (21) configured to transmit said second unique secure key and said session-identification to said user computing device (1);
- and
- said communication means (21) further configured to receive an authentication message comprising said second unique secure key and a phone number of said user computing device (1) from said user computing device (2);
- and
- said processing means (22) further being configured to:
- authenticate said user computing device (1) for said communication-session, if said second unique secure key retrieved from said authentication message at reception of said message matches said second unique secure key maintained at said webservice, being associated with said session-identification, provided by said server device (2);
- and
- register, at authentication, said phone number of said user computing device (1) as origin of said authentication message;
- and
- provide access, to said user computing device (1) at authentication of said user computing device by instructing to send a login message to said user computing device (1);
- and
- said communication means (21) configured to transmit a login message to said user computing device (1).
Dependencies are inferred from the claim text.