Patent ID: 6928558

Claim:
A method of reliably identifying a user in a computer system, in which method a mobile station is used for communicating with the computer system and a persona identification number is supplied into the mobile station, the method comprising the steps of: generating a first one-time password in the mobile station without any action by the user by utilizing a known algorithm on the basis of a personal identification number of the user, the personal identification number supplied into the mobile station enables the user to use the mobile station, subscriber-specific identifier read from a subscriber-specific identification module of the mobile station, device-specific identifier of the mobile station and time, encoding the first one-time password and the subscriber-specific identifier of the user at the mobile station, transmitting the encoded password and subscriber-specific identifier to an authentication server of the computer system, identifying the user at the authentication server on the basis of the subscriber-specific identifier, and searching a database for the personal identifier number of the user and the device-specific identifier of the mobile station associated with the user, generating a second one-time password at the authentication server by utilizing the predetermined algorithm on the basis of the personal identification number of the user, subscriber-specific identifier, device-specific identifier of the mobile station and time, comparing the first password and the second password with each other at the authentication server, and if the passwords match, enabling the telecommunication connection between the mobile station of the user and the computer system.