Patent ID: 8261089
Filing Date: 2012-09-04
Classification: G06F,G06Q,H04L,H04W

Abstract:
1. Method for authenticating a user of a mobile device against a remote authenticating system which is connected to at least a client computer accessible to said user, which comprises: i. reading a 2D-code displayed to the client computer by means of a 2D-code reader provided in said mobile device, wherein at least a URL address of the authenticating system and a codified challenge generated by authenticating system are embedded in said 2D-code; ii. processing said codified challenge and computing a response to the challenge using a personal secret, said personal secret being a string of characters univocally related to a user identifier (user ID) of said user of the mobile device and to a time stamp, said response to the challenge is computed using a digital signature algorithm according to an Identity Based Encryption scheme; iii. sending a message to the authenticating system, said message including a tuple whose elements are at least said user identifier, said challenge and said response to the challenge; iv. analyzing said elements of the tuple and determining the tuple is a valid tuple, when the response to the challenge has been generated using the personal secret of the user whose user identifier is in the tuple for a given period of time, and in case said tuple is valid; v. looking up in a users list stored in the authenticating system to see if the user identifier in the tuple is in said user list, and if the user identifier is in the users list, verifying if the challenge in the tuple is in a session list stored in the authenticating system, and if the challenge is in the session list, the authenticating system pushes a welcome screen to the client computer that corresponds to a session identification number in the session list where the challenge is.