Patent EP-3756330-A1 (EP)
Inventor: NEUMANN LIBOR
IPC: H04L29/08
Filed: 2019-02-19
Abstract: The invention provides an authentication system for use with personal electronic identity gadgets of at least one user of services, wherein the said personal electronic identity gadgets are configured to authenticate to a main service provider (for all personal electronic identity gadgets of this service user) and are configured to trigger synchronization of data storages of service providers; wherein the said system is characterized in that it comprises - a data storage of an authentication system server component of at least one main service provider, wherein the said data storage is synchronizable with data storage(s) of server component(s) of at least one other service provider, either directly or via personal electronic identity gadgets, and wherein the said authentication system server component of the at least one main service provider is configured for mapping personal electronic identity gadgets to the account of the user of services; - a data storage of an authentication system server component of at least one other service provider that is synchronizable with the data storage of the authentication system server component of the at least one main service provider, either directly or via personal electronic identity gadget; wherein: - the data storage of the authentication system server component of each service provider contains, for each personal electronic identity gadget registered to this provider for the said user of services, a record with data for authenticating this personal electronic identity gadget, - the data storage of the authentication system server component of the main service provider contains identifiers assigned to personal electronic identity gadgets and/or to users, wherein for each personal electronic identity gadget of a user and/or for each user, a separate identifier is assigned for each service provider for whom at least one personal electronic identity gadget of the user is assigned to the user account; - the data storage of the authentication system server component of the main service provider contains a map of personal electronic identity gadgets for each user account, in the said map the records for all personal electronic identity gadgets of the said user in the said data storage are mapped to the said user account, furthermore the map contains the identifiers assigned to the personal electronic identity gadgets of the said user for all service providers and/or the identifiers assigned to the said user for all service providers; - the data storage of the authentication system server component of other service provider contains at least the identifiers assigned to personal electronic identity gadgets and/or to users of this other service provider; - the data storage of the authentication system server component of other service provider contains a map of personal electronic identity gadgets for each user account, wherein in the said map, the records for all personal electronic identity gadgets of the said user in this data storage are mapped to the said user account, furthermore the map contains the identifiers assigned to the personal electronic identity gadgets of the said user for at least this other service provider and/or the identifier assigned to the said user for at least this other service provider; - the data storages and/or the authentication system server components are configured so that the identifiers assigned to the personal electronic identity gadgets assigned to the account of one user and/or identifiers assigned to one user are synchronizable by transmitting synchronization information between the data storages of the authentication system server components and/or between the authentication system server components, directly or via personal electronic identity gadgets. Furthermore the invention offers an authentication method using this system, and preferred embodiments that allow to recover from emergencies and/or increase the user comfort and/or increase the security.