Method and system for verifying an access request
AssigneeVisa Europe Limited
InventorsBoris Taratine, Matthew Johnson, Simon Peter Rust, Andrew Warren Rounds
Life of this patent
Estimating the term…
Abstract
A system for verifying a request for access to data is provided, the system comprising a first module and a second module. The first module is arranged to generate a password, and the second module is arranged to receive a password associated with a request for data (received at step), validate the received password, and enable access to the requested data. The system is such that the first and second modules share a secret that has been uniquely assigned thereto, the shared secret being for use in generation and validation of a said password. Furthermore, the first module is communicatively disconnected from the second module.
Claims22
A system for use in verifying a request for access to data, the system comprising:
- a first module arranged to generate a password and output the generated password via an interface of the first module;
- a second module arranged to receive a password associated with the request for access to data, validate the received password, and enable access to the requested data, wherein said received password is received via an interface of the second module and corresponds to the password generated by the first module,
- wherein the first and second modules share a secret that has been uniquely assigned to the first and second modules for use in generation and validation of a said password, and
- wherein the first module is communicatively disconnected from the second module, and
- wherein the first module and second module are composite parts of a device, and
- wherein the second module comprises a user interface and is arranged to receive the request for access to data and information that uniquely identifies a human from a user of the second module via that user interface, and wherein said data sent by the second module for use in enabling access to data comprises data that uniquely identifies said human.
A method of verifying a request for access to data, the method comprising:
- generating at a first module a password and outputting the generated password via an interface of the first module;
- receiving at a second module a password associated with the request for access to data via an interface of the second module, said received secret corresponding to the password generated by the first module;
- validating at the second module said received password;
- and
- enabling access to the requested data at the second module by sending data from the second module,
- wherein the first and second modules share a secret that has been uniquely assigned to the first and second modules for use in generation and validation of a said password, and
- wherein the first module is communicatively disconnected from the second module, and
- wherein the first module and second module are composite parts of a device, and
- wherein the second module comprises a user interface and is configured to receive the request for access to data and information that uniquely identifies a human from a user of the second module via that user interface, and wherein said data sent by the second module for use in enabling access to data comprises data that uniquely identifies said human.
A system for use in verifying a request for data received at a device as a request originating from a human in possession of the device, the system comprising:
- a first module arranged to generate a password and output the generated password via an interface of the first module;
- a second module arranged to receive a password associated with the request for data and validate the received password, and to enable access to data, wherein said received password is received via an interface of the second module and corresponds to the password generated by the first module,
- wherein the interface of the second module comprises a user interface, and wherein the user interface is arranged to receive the request for data and information that uniquely identifies a human from a user of the second module via that user interface, and
- wherein the user interface is further arranged to send data for use in enabling access to data, the sent data comprising data that uniquely identifies said human, and
- wherein the first module and the second module are composite parts of the device, and
- wherein the first module is communicatively disconnected from the second module.
A method of verifying a request for data received at a device as a request originating from a human in possession of the device, the method comprising:
- generating at a first module a password and outputting the generated password via an interface of the first module;
- receiving at a second module a password associated with the request for date via a user interface of the second module, said received password corresponding to the password generated by the first module;
- validating at the second module the received password;
- and
- enabling access to data at the second module,
- wherein the user interface receives the request for data and information that uniquely identifies a human from a user of the second module via that user interface, and
- wherein enabling access to data further comprises sending data for use in enabling access to data, the sent data comprising data that uniquely identifies said human, and
- wherein the first module and the second module are composite parts of the device, and
- wherein the first module is communicatively disconnected from the second module.
Dependencies are inferred from the claim text.