Patent ID: 8856900

Claim:
A method for authorising a connection between a computer terminal of a user and a source server, the method comprising: (a) sending a password from the terminal to the source server; (b) checking the password with the source server to authorize the connection with the terminal; (c) in an initialization phase: (i) connecting the terminal to a gateway server placed between the terminal and the source server by sending from the terminal to the gateway server an initialization request comprising a non-random identifier; (ii) generating on the gateway server a secret key that is specific to the user and that comprises a random number and sending the secret key from the gateway server to the terminal; (iii) as soon as the terminal receives the secret key, using the terminal to hide the password in a unique multimedia file by applying a steganographic encryption algorithm bootstrapped by the secret key; (iv) as soon as the steganographic encryption algorithm is executed, deleting the secret key from the terminal; and (v) once the password is hidden in the unique multimedia file, deleting the password from the terminal and keeping only the unique multimedia file containing the password in the terminal; (d) in a connection phase: (i) sending the unique multimedia file containing the hidden password from the terminal to the gateway server; (ii) extracting the password from the unique multimedia file, on the gateway server, by executing a reverse encryption algorithm bootstrapped by the secret key, and sending the password from the gateway server to the source server; (iii) immediately deleting the password from the gateway server as soon as the password is sent from the gateway server towards the source server; and (iv) using the source server to analyze the received password and authorize the connection with the terminal in response to the password being authenticated.