Patent ID: 7840993
Filing Date: 2010-11-23
Classification: H04L

Abstract:
1. A method for authenticating a user of a communications network based on a one-time-password, the user having an associated asymmetric crypto-key pair including a private key D and a public key E; and the private key D being split into a first private key portion D 1 , a second private key portion D 2 , and a third private key portion D 3 corresponding to the one-time-password, comprising: partially signing, by the user, a symmetric session key with the first private key portion D receiving, by the authenticating entity from the user via the network, the partially signed symmetric session key; determining, by the authenticating entity, the third private key portion D completing the signature, by the authenticating entity, on the received partially signed symmetric session key with the second private key portion D encrypting, by the user, the one-time-password with the symmetric session key; receiving, by the authenticating entity from the user via the network, the encrypted one-time-password; decrypting, by the authenticating entity, the received encrypted one-time-password with the recovered symmetric session key; and authenticating the user based on the decrypted one-time-password.