Patent ID: 11968531
Assignee: GIESECKE+DEVRIENT MOBILE SECURITY GMBH
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 3:
4. A method for authenticating a mobile device of a user versus a third-party, the mobile device being assigned to a Mobile Network Operator MNO by a set of mobile subscriber data comprising a mobile phone number, Mobile Station Integrated Services Digital Number (MSISDN);
the method comprising:
(a) providing a third-party server, and at the third-party server:
receive from a requesting device an authentication request (REQ), requesting to authenticate the mobile device;
in reaction, send an authentication token One Time Password (OTP) to be received at the mobile device;
receive back the authentication token (OTP); and
upon successful receipt back of the authentication token (OTP), acknowledge the mobile device as authenticated;
(b) providing the mobile device;
(c) providing an MNO server of the Mobile Network Operator MNO (MNO 1) to which the mobile device is assigned;
wherein:
(d) a secure routing service server constructed to communicate with the third-party server and with the MNO server;
(e) a Universal Unique User Identifier, U3I, assigned to the mobile device;
(f) the U3I being registered at the MNO server and assigned to the registered mobile phone number (MSISDN) of the user;
(g) the U3I being registered at the secure routing service server and assigned to the Mobile Network Operator MNO (MNO 1), wherein the secure routing service server doesn't provide of the user's mobile phone number (MSISDN);
(h) the authentication (a) request received at the third-party server comprising the U3I;
wherein:
(i) by the third-party server, send the authentication token (OTP) and the U3I of (e) to the secure routing service server;
(j) by the secure routing service server:
receive from the third-party server the authentication token (OTP) and the U3I of (e);
retrieve a Mobile Network Operator MNO (MNO 1) to which the U3I is assigned; and
send the authentication token and the U3I to the MNO server of the retrieved INO (MNO 1);
(k) by the MNO server:
receive from the secure routing service server the authentication token (OTP) and the U3I;
retrieve the mobile phone number (MSISDN) assigned to the U3I; and
send the authentication token (OTP) to the mobile device using the retrieved mobile phone number (MSISDN).