Patent ID: 8868918

Claim:
Method comprising the following steps: a) a user enters an access request in a terminal connected to an authorized server, b) a personal cryptographic device of the user calculates and displays a response to a challenge comprising a code, c) said response is transmitted to the authorized server by the user via said terminal, d) a verification of the response is performed by the authorized server, wherein the user is authenticated only if the entered response is correct, wherein the user verifies the operation of the personal cryptographic device by replacing, whenever he desires so, the steps c) and d) by the following steps e) to g) so that the personal cryptographic device does not know whether and when the user might request this verification: e) the user requests the terminal to display the expected response to the challenge, this operation interrupts the authentication process; f) the terminal displays said information to the user, and cannot modify with impunity the response it displays in response to a challenge, as the user always has the possibility of verifying this response and thus of discovering any tempering, g) the user uses said information in order to verify that the code displayed by the personal cryptographic device corresponds only to the expected response to the challenge and that this code has not been modified in order to transmit other confidential information or for another purpose; if the response displayed by the device is correct, and if the user whishes to be authenticated and connected to the server, the method can be automatically interrupted following a number m of consecutive request to have the response displayed by the terminal, m being a positive integer, to prevent a user from trying to guess the algorithm or key necessary for calculating the response to a challenge based on observing a considerable number of challenge-response pairs.