Patent ID: 11924211
Assignee: BULL SAS
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 0:
1. A method for authenticating a user utilizing an internet access client for accessing remote resources of a computer infrastructure, said method comprising:
enrolling the internet access client, said enrolling comprising receiving, by the internet access client, of a client certificate associated with items of identification information of the internet access client and generated by a certificate server,
wherein the internet access client is executed on a computerized device;

a first authentication of the internet access client, said first authentication of the internet access client comprising
sending, by the internet access client, to said computer infrastructure, said client certificate associated with items of identification information of the internet access client;
receiving, by the internet access client, an authentication token generated by a token security module when the client certificate sent has been verified;

a second authentication of the user of the internet access client, said second authentication of the user of the internet access client comprising
sending, by the internet access client, to the computer infrastructure, data representing a security level of the second authentication of the user comprising the authentication token, user identification data and user authentication data, wherein said user identification data and said user authentication data are not included in the client certificate; and
receiving, by the internet access client, a permission for access to said remote resources of the computer infrastructure when the authentication token, the user identification data and the user authentication data have been verified;

wherein if the first authentication of the internet access client is unsuccessful, the user will be offered one or more methods of a third authentication of the user, having a higher security level than the security level of the second authentication.