Patent SG-11201807995T-A (SG)
Title: Method and system for user authentication with improved security
Inventor: SMALES ANTONY
IPC: G06F21/31
Filed: 2017-03-17
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property -, Organization 111111110111101110101011111010111110111011111011011110111101101111101111011111 International Bureau ... .1 j .... ..or::,,, (10) International Publication Number (43) International Publication Date WO 2017/156590 Al 21 September 2017 (21.09.2017) WIP0 I PCT (51) International Patent Classification: AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, G06F 21/31 (2013.01) HO4L 9/32 (2006.01) BZ, CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, G06F 21/46 (2013.01) DO, DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KH, KN, (21) International Application Number: KP, KR, KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, PCT/AU2017/050240 MD, ME, MG, MK, MN, MW, MX, MY, MZ, NA, NG, (22) International Filing Date: NI, NO, NZ, OM, PA, PE, PG, PH, PL, PT, QA, RO, RS, 17 March 2017 (17.03.2017) RU, RW, SA, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, (25) Filing Language: English ZA, ZM, ZW. (26) Publication Language: English (84) Designated States (unless otherwise indicated, for every (30) Priority Data: kind of regional protection available): ARIPO (BW, GH, 2016901019 18 March 2016 (18.03.2016) AU GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, (71) Applicant: FORTICODE LIMITED [AU/AU]; Level TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, 7/22 William St, Melbourne, Victoria 3000 (AU). DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, (72) Inventor: SMALES, Antony; 26 Highland Drive, Frank- SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, stop, Victoria 3199 (AU). GW, KM, ML, MR, NE, SN, TD, TG). (74) Agent: WATERMARK INTELLECTUAL PROP- Published: ERTY PTY LTD; Level 1, 109 Burwood Road, = Hawthorn, Victoria 3122 (AU). — with international search report (Art. 21(3)) (81) Designated States (unless otherwise indicated, for every kind of national protection available): AE, AG, AL, AM, (54) Title: METHOD AND SYSTEM FOR USER AUTHENTICATION WITH IMPROVED SECURITY (57) : A user authentication method in a distributed 100 processing system commences by receiving, at a first pro- 1012 = 104 cessing unit (108), a request (1004) to initiate an authentica- tion session, wherein the request includes a unique identifier of a user requiring authentication. The first processing unit = acquires at least one item of authentication data (412, 1712), = = 114 1004 which is valid during the authentication session. The authen- , , tication data is transmitted (1006) to a second processing = 1002 - 102 unit (106) which is associated with a terminal device oper- 1010 ated by the user. The second processing unit transforms the authentication data using a transformation algorithm based = Z _ __________ ..... • -_ -- ,„, ------ 126 upon one or more session-specific authentication factors 11 o f (404, 1704), to generate transformed authentication data that = is characteristic of the authentication session and of the user. 4 1006 The transformed authentication data is transmitted (1008) to 112 1008 a third processing unit (108) which verifies that the trans - 120 ► 122 formed authentication data corresponds with the user and 116 118 with predetermined values of the one or more session-specif- : _ is authentication factors. The third unit processing generates 11 106 124 128 an authentication result (1010) of the authentication session based upon the verification. . 4 © C:7 108 1 1 in 1 1 in 1-1 Figure 1 --..... IN 1-1 0 ei O