Method and system for electronic reauthentication of a communication party
AssigneeDocAccount AB
InventorsAnders Thoursie, Peter Holm, Sven-Håkan Olsson
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method for electronic reauthentication of a communication party (12, 22). The method further relates to a device for electronic reauthentication of a communication party. A basic idea of the present invention is to have a communication party, which employs a service, state two different communication addresses, one being a telephone number, via which the communicating party may authenticate herself to a provider (11, 21) of the service.
Claims41
A method for electronic reauthentication of a communication party, said method comprising:
- creating and storing an association between a telephone communication address of the communication party, an additional communication address of the communication party and the communication party itself;
- receiving a request, which includes a request to create an association for a further additional communication address, from a requesting communication party;
- verifying that a stored association exists for the requesting communication party;
- distributing, over a first communication channel, a first confirmation token to the requesting communication party;
- receiving, over a second communication channel, a second confirmation token from the requesting communication party, wherein at least one of the first and the second channel is established by using the telephone communication address of the association for the requesting communication party;
- verifying correspondence between the first confirmation token and the second confirmation token;
- distributing, over a third communication channel, a third confirmation token to the requesting communication party;
- receiving, over a fourth communication channel, a fourth confirmation token from the communication party, wherein at least one of the third and the fourth channel is established by using an additional communication address of the association for the requesting communication party;
- verifying correspondence between the third confirmation token and the fourth confirmation token, wherein the requesting communication party is considered to be authenticated if one of the correspondence between the first confirmation token and the second confirmation token and the correspondence between the third confirmation token and the fourth confirmation token is found to match;
- distributing, over a fifth communication channel, a fifth confirmation token to the requesting communication party;
- receiving, over a sixth communication channel, which is separate from the fifth communication channel, a sixth confirmation token from the requesting communication party, wherein one of the fifth and the sixth channel is established by using said further additional communication address included in the request;
- verifying correspondence between the fifth confirmation token and the sixth confirmation token;
- and
- if the correspondence between the fifth confirmation token and the sixth confirmation token is found to match, creating and storing an association between said further additional communication address of the requesting communication party, said telephone communication address and the requesting communication party itself.
A device for electronically reauthenticating a communication party, said device comprising:
- a first creating/storing device for creating and storing an association between a telephone communication address of the communication party, an additional communication address of the communication party and the communication party itself;
- a first receiving device for receiving a request, which includes a request to create an association for a further additional communication address, from a requesting communication party;
- a first verifying device, via a processor, for verifying that stored association exists for the requesting communication party;
- a first distributing device for distributing, over a first communication channel, a first confirmation token to the requesting communication party;
- a second receiving device for receiving, over a second communication channel, a second confirmation token from the requesting communication party, wherein at least one of the first and the second channel is established by using the telephone communication address of the association for the requesting communication party;
- a second verifying device, via the processor, for verifying correspondence between the first confirmation token and the second confirmation token;
- a second distributing device for distributing, over a third communication channel, a third confirmation token to the requesting communication party;
- a third receiving device for receiving, over a fourth communication channel, a fourth confirmation token from the communication party, wherein at least one of the third and the fourth channel is established by using an additional communication address of the association for the requesting communication party;
- a third verifying device, via the processor, for verifying correspondence between the third confirmation token and the fourth confirmation token, wherein the requesting communication party is considered to be authenticated if one of the correspondence between the first confirmation token and the second confirmation token and the correspondence between the third confirmation token and the fourth confirmation token is found to match;
- a third distributing device for distributing over a fifth communication channel, a fifth confirmation token to the requesting communication party;
- a fourth receiving device for receiving, over a sixth communication channel, which is separate from the fifth communication channel, a sixth confirmation token from the requesting communication party, wherein one of the fifth and the sixth channel is established by using said further additional communication address included in the request;
- a fourth verifying device, via the processor, for verifying correspondence between the fifth confirmation token and the Sixth confirmation token;
- and
- a second creating/storing device for creating and storing an association between said further additional communication address of the requesting communication party, said telephone communication address and the requesting communication party itself, if the correspondence between the fifth confirmation token and the sixth confirmation token is found to match.
Dependencies are inferred from the claim text.