Patent ID: 9491174
Filing Date: 2016-11-08
CPC Classification: G06F,H04L

Claim Text:
1. A method for user authentication performed by a first server connected to a public network and a second server, connected to the first server but not connected to the public network, the method comprising: an enrolment step comprising: a verification step of a user comprising: receiving by the first server the current identifier and the current password; transmitting the current identifier and the current password to the second server; calculating a second cryptogram by the one-way function on the current identifier, the current password and the security parameter by the second server; and returning the second cryptogram to the first server, performing a verification that the second cryptogram is included in the database of the first server by scanning the database to find the first reference cryptogram identical to the second cryptogram, and generating an error message if the second cryptogram is not included in the database of the first server.