ITPI20110028A1 - METHOD AND EQUIPMENT FOR THE STRONG AUTHENTICATION OF A USER - Google Patents

Description

â € œMETHOD AND EQUIPMENT FOR STRONG USER AUTHENTICATIONâ €,

DESCRIPTION

Scope of the invention

The present invention relates to a method for strong authentication of a user, for example to request access to a reserved area, for example a home banking, to authorize certain banking operations, such as preparing a bank transfer, displaying a bank statement, create a stock portfolio, etc.

Furthermore, the invention relates to an apparatus which implements this method.

Description of the prior art

As is known, customers of credit institutions can connect with their bank via a remote connection to set up a banking operation, for example ordering wire transfers, arranging telephone top-ups, paying bills, etc. This type of functionality generally known as â € œhome bankingâ € has been made possible by the birth and development of the Internet and cell phone networks.

The introduction of this system, in addition to affecting already existing banks, has recently allowed the birth of totally on-line banks for which banking operations can be carried out exclusively on-line.

The spread of this type of technology has made it essential to develop ever more efficient security systems to guarantee users to carry out banking operations in complete safety.

Known security systems authenticate the user connected remotely to the bank to ascertain their identity.

Among the various types of authentication, the one capable of ensuring the highest level of security is known as â € œstrong authenticationâ €. This type of system is in most cases an authentication with at least two factors, that is a â € œpasswordâ €, or a â € œPINâ € known to the user, and an object owned by the user himself, for for example an OTP key, or â € œtokenâ € (â € œtokenâ €).

An OTP key is an electronic device, usually of small size, which is issued, for example, by a credit institution to its current account holders. The OTP key generates a dynamic code, ie a code that changes periodically, or at the request of the user, which is usually forwarded by pressing a button on the device itself.

However, OTP keys involve non-negligible costs for their management, procurement and distribution.

Another disadvantage is represented by the fact that a user who wishes to access a reserved area of the online bank, for example to set up a banking operation, must have the key with him. In addition, the OTP keys are powered by batteries with a limited life of more than a few years. Once exhausted, the battery must be replaced, with considerable inconvenience for the user, especially in the case of urgent banking operations. The authentication systems provide for the use of a static password, ie fixed, or dynamic, as it changes with each new use. Even in this case, however, the password can be "intercepted", ie stolen by an attacker.

In this case, whether the password is static or dynamic, it is necessary for the user to request a new key from the service provider who will also have to disable the stolen key. The “dynamic password”, just log in, or “reset”, the system to make the stolen key unusable.

There are also authentication systems that provide for the authentication of a user through the SIM of a mobile phone.

Other systems, on the other hand, require the user to make a call to the supplier of a service, for example by calling a specially dedicated toll-free number, in order to access the service. Authorization to access the service is granted by the authentication system once the caller's telephone number has been recognized.

However, telephone numbers can be subject to hacking, such as â € œspoofingâ €, alteration, â € œimpersonationâ €. In particular, it is possible to "deceive" the authentication system and make a phone call appear as made from a specific telephone number even without being in possession of the user's telephone terminal associated with that telephone number.

Summary of the invention

It is therefore an object of the present invention to provide a method for strong authentication which is capable of overcoming the aforementioned drawbacks of known methods.

It is also an object of the present invention to provide strong authentication equipment that has the same advantages.

These and other purposes are achieved by a method for strong authentication of a user, according to the invention, comprising the steps of:

â ’preparation of a telephone terminal in correspondence with a user, said telephone terminal being provided with a display display;

∠’user interaction with a computer interface page via an interaction device;

∠’insertion of a plurality of authentication credentials by the user in said interface page;

â ’sending by said computer of said plurality of authentication credentials to a management unit;

∠’processing of said plurality of authentication credentials by said management unit and generation of a result, or outcome, of said processing;

â ’authorization / prohibition for said user by the management unit to access a predetermined service based on the result, or the outcome of said processing;

whose main feature is that said processing includes the phases of:

- execution, by said management unit, of a call to said telephone terminal, said call being associated with a calling number;

- display of said calling number on said display of said telephone terminal, said calling number coinciding with, or containing, an authorization code;

- introduction by said user of a code in said interface page, in particular said code entered corresponding to said authorization code;

â ’sending by said computer of said code entered by said user to said management unit; - verification by said management unit of a correspondence between a code entered by said user in said interface page and said authorization code coinciding with, or contained in the calling number, said verification generating said result, or outcome.

In particular, the aforementioned plurality of authentication credentials entered by the user on the interface page may include at least one telephone number associated with the user's telephone terminal.

In particular, the execution step, by said management unit, of a call to said telephone terminal is performed by dialing said telephone number entered by said user in said interface page together with said authentication credentials.

Alternatively, the execution step, by said management unit, of a call to said telephone terminal is carried out by dialing a telephone number indicated by said user in a preliminary step of registering the user for the service.

Preferably, the authorization code coincides with the calling number shown on the display of the user's telephone terminal.

In a possible embodiment, the authorization code can be deduced from the calling number displayed on the display of the user's telephone terminal.

In particular, the authorization code may coincide with a part of the calling number shown on the display of the user's telephone terminal.

In particular, the authorization code can be a predetermined part of the calling number displayed on the user's display, for example, the last n digits of the calling number, where n can be between 3 and 10. Alternatively, the characters of the calling number that coincide with the authorization code can be those that occupy a predetermined position within the calling number, for example the first, third and seventh position.

In particular, the authorization code and / or the calling number can be generated dynamically by the management unit, so as to change with each new access request by the user.

In one possible embodiment, the interaction of the user with the interface page occurs through an internet connection. More in detail, the interface page is associated with a predetermined web page.

Advantageously, the internet connection is made through an electronic device.

In particular, the management unit can authorize / prohibit a specific transaction, for example a home banking service, on the basis of the outcome of said processing.

In particular, there is a preliminary phase of registration by the user to a predetermined service, said registration phase including the indication of a plurality of authentication credentials, i.e. personal data, by the user. comprising at least one telephone number associated with said telephone terminal.

Advantageously, the plurality of authentication credentials includes at least one of the following personal data:

∠’a Userid;

∠’a Password;

â ’a telephone number associated with said telephone terminal;

â ’or a combination thereof.

In particular, the electronic device comprising through which the user connects to the aforementioned web page can be chosen from:

∠’a portable PC;

â ’a notebook;

â ’a tablet;

â ’a mobile phone;

or a combination thereof.

The elaboration phase can include:

â 'a first verification of the correspondence of authentication credentials entered by the user in the interface page with predetermined authentication credentials, for example password and userid indicated by the user during a registration phase for a service, called first verification by generating a first result, or outcome;

∠'a second check initiated if the first result, or outcome, of the first check is positive, i.e. if the credentials entered correspond to the predetermined credentials, said second check being able to verify a correspondence between an authorization code entered in the interface page by the user and the authorization code transmitted by the management unit to the telephone terminal.

In particular, if the first outcome is negative, the management unit denies access to the service, if, on the other hand, the first outcome is positive, the management unit makes the call to the telephone terminal of the ™ user and then starts the second verification phase.

According to another aspect of the invention, strong user authentication equipment includes:

â 'a management unit capable of processing a plurality of authentication credentials of a user and generating a result, or outcome, of such processing to authorize / forbid said user access to a predetermined service on the basis of said result, result, said management unit comprising means of telephone communication to a telephone terminal of said user, said call being associated with a calling number adapted to be displayed on a display of said telephone terminal, said calling number containing, or coinciding with, said authorization code;

∠’an interaction device of said user with said management unit, said interaction device comprising:

â ’means of displaying an interface page;

∠’means of inserting alphanumeric characters for the insertion of said authentication credentials in said interface page; â ’means of sending said authentication credentials to said management unit.

In particular, the management unit verifies the correspondence of the authentication credentials with predetermined authentication credentials including the authorization code transmitted to the user's telephone terminal.

In particular, the central management unit can include:

- a server in connection with the interface device, said server being able to verify the correspondence between the plurality of authentication credentials entered in the interface page by the user with predetermined authentication credentials stored on a database present on the server ;

â 'an auxiliary device comprising the aforementioned means for transmitting the authorization code to the user's telephone terminal, said auxiliary device being connected to the server and starting the execution of the call to the user's telephone terminal at the request of the server to transmit the authorization code.

In a foreseen embodiment, at each access request by the user, the auxiliary device generates a new authorization code and makes the call to the user's telephone terminal.

In particular, the auxiliary device makes a call to the user's telephone terminal in such a way as to visualize on the display of the telephone terminal a calling number containing, or coinciding, with the authorization code.

Preferably, the auxiliary device generates the calling number and / or the authorization code dynamically, ie in such a way as to be different for each access request made by the user.

In a possible embodiment, the calling number and / or the authorization code can be selected from a plurality of calling numbers and / or authorization codes stored in the auxiliary device.

Alternatively, the calling number and / or authorization code can be randomly generated by the auxiliary device.

Detailed description of some embodiments As illustrated in block diagram 100 of Figure 1, a method for strong user authentication, according to the invention, comprises an initial phase of user interaction with an interface page through an interaction device equipped with a computer, or processing means, block 101. The user then proceeds to insert in the interface page, for example by typing keys, or using a touch screen, a plurality of credentials and to send the plurality of authentication credentials to a management unit, block 102.

A call follows from the management unit to the user's telephone terminal, block 103. In particular, the call is associated with a calling number which is shown on the display of the user's telephone terminal. More specifically, the calling number matches, or contains, an authorization code.

This step is performed by means of telephone communication to the telephone terminal, for example a cellular telephone 30. The means for making the call may reside in an auxiliary device 40 (see Figures 3 and 4) in connection with a server 20 in which the There is a database in which the authentication credentials of users registered for a specific service are stored, for example a home banking service and possibly a telephone number associated with the user. In this case, therefore, the management unit 50 comprises the server 20 and the auxiliary device 40. More in detail, the means for making the call, upon request of the server 20, make the call to the telephone terminal 30.

The method also provides for a verification phase by the management unit, and in particular the server 20, of the correspondence between the plurality of authentication credentials with a plurality of predetermined credentials, in particular registered in a preliminary phase by the User, and a code entered in the interface page and sent by the user with an authorization code sent by the telephone communication means to the user's telephone terminal, block 104. The server 20 performs, in particular, a matching between the code entered by the user on the interface page and sent via the interaction device and the predetermined authorization code. In an envisaged embodiment, the authorization code can be a part, for example the last n digits of the calling number displayed on the display of the user's telephone terminal. In particular, n can be between 3 and 10, for example n = 4.

The verification phase ends with the generation of a result, or outcome. More precisely, if the outcome of the verification is positive, that is, if the authentication credentials and the code entered by the user on the interface page coincide with the predetermined authentication credentials, the user is authorized to access the service requested, or to the reserved page, block 110.

If, on the other hand, the outcome of the verification is negative, i.e. if the authentication credentials and / or the code entered by the user on the interface page do not coincide with the predetermined authentication credentials, access to the service is denied, block 105.

In the variant of the method illustrated in figure 2, there is a phase of insertion in the interface page by the user of authentication credentials, such as userid and password, block 102a.

There follows, therefore, a check, or â € œmatchingâ €, of the credentials entered in the interface page by the user with the predetermined credentials present in the aforementioned database, block 104a.

If the verification carried out by server 20 fails, access to the service is denied, block 105.

If, on the contrary, the verification is successful, the server 20 forwards to the auxiliary device a request to make a call to the user's telephone terminal, block 103.

The user then displays the calling number on the telephone terminal display, and enters the authorization code on the interface page and then sends it to server 20, block 102b.

The server 20 then forwards the code received from the user 60 to the auxiliary device 40 which verifies its correspondence with the authorization code and provides the server 20 with a result, or outcome of this verification. If the verification carried out by the auxiliary device 40 fails, the server 20 denies access to the service, block 105.

If, on the contrary, the verification gives a positive result, the server 20 authorizes the use of the service to the user, block 110.

In a variant envisaged by the invention and schematically illustrated in figure 4, the verification of the correspondence of the code entered in the interface page by the user with the authorization code is performed directly by the server 20.

In this case, a step is provided in which the auxiliary device 40 communicates to the server 20 the authorization code transmitted to the telephone terminal 30 of the user 60 by means of the telephone call.

In one possible embodiment, the interaction of the user with the interface page occurs through an internet connection. More in detail, the interface page is associated with a predetermined web page which the user 60 accesses by typing a web address, or URL, associated with it on an electronic device, such as a laptop, a PC, a notebook, a PDA, a tablet, a smart-phone, etc.

In a particular embodiment envisaged and schematically illustrated in Figure 5, the interface device 10 through which the user connects to the server 20 can be a computer 10 of an ATM 70 connected via a telematic network to the server 20 itself.

The above description of a specific embodiment is able to show the invention from a conceptual point of view so that others, using the known technique, will be able to modify and / or adapt this specific embodiment in various applications without further research. and without departing from the inventive concept, and, therefore, it is understood that such adaptations and modifications will be considered as equivalent to the specific embodiment. The means and materials for carrying out the various functions described may be of various nature without thereby departing from the scope of the invention. It is understood that the expressions or terminology used have a purely descriptive purpose and therefore not limitative.

Claims (10)

CLAIMS 1. Method for strong authentication of a user including the steps of: â ’preparation of a telephone terminal in correspondence with a user, said telephone terminal being provided with a display display; ∠’interaction of said user with an interface page through an interaction device; ∠’insertion of a plurality of authentication credentials by said user in said interface page; â ’sending of said plurality of authentication credentials to a management unit; ∠’processing, by said management unit, of said plurality of authentication credentials and generation of a result, or outcome, of said processing; â ’authorization / prohibition to said user by said management unit to access a predetermined service based on said result, or outcome of said processing; characterized by the fact that said processing includes the steps of: - execution, by said management unit, of a call to said telephone terminal, said call being associated with a calling number; - display of said calling number on said display of said telephone terminal, said calling number coinciding with, or containing, an authorization code; - verification by said management unit of the correspondence between a code entered by said user in said interface page and said authorization code, said verification generating said result, or outcome. 2. Method, according to claim 1, wherein said calling number and / or said authorization code is generated dynamically by said management unit, whereby said calling number and / or said authorization code is different at each new access request by said user. Method according to claim 1, wherein said interface page is a web page, said interaction of said user with said interface page being realized through an internet connection to said web page. 4. Method, according to claim 1, in which a preliminary registration phase by said user for a predetermined service is provided, said registration phase providing for the indication by said user of a plurality of authentication credentials and a telephone number associated with said user. 5. Method according to claim 1, in which said processing step comprises the steps of: - a first verification of the correspondence of authentication credentials entered by said user in said interface page with predetermined authentication credentials, said first verification generating a first result, or outcome; - a second check initiated if said first result, or outcome, of said first check is positive, i.e. if said credentials entered correspond to said predetermined credentials, said second verification being able to verify a correspondence between an authorization code entered in said interface page by said user and said authorization code contained in, or coinciding with, said calling number of said call made by said management unit to said telephone terminal of said user. 6. Equipment for the strong authentication of a user characterized by the fact of including: â 'a management unit capable of processing a plurality of authentication credentials of a user and generating a result, or outcome, of such processing to authorize / forbid said user access to a predetermined service on the basis of said result, or as a result, said management unit comprising telephone communication means suitable for making a call to a telephone terminal of said user, said call being associated with a calling number adapted to be displayed on a display of said telephone terminal of said user, said calling number containing, or coinciding with, an authorization code, said management unit being able to verify the correspondence between a code entered in said interface page by said user and said authorization code, generating said result or outcome; ∠’an interaction device of said user with said management unit, said interaction device comprising: â ’means of displaying an interface page; ∠’means of inserting alphanumeric characters for the insertion of said authentication credentials in said interface page; â ’means of sending said authentication credentials to said management unit. 7. Apparatus according to claim 6, wherein said central management unit comprises: - a server in connection with said interface device, said server being able to perform a verification of correspondence between said plurality of authentication credentials inserted in said interface page by said user with predetermined authentication credentials stored on a database present in said server; - an auxiliary device in connection with said server, said auxiliary device comprising said telephone communication means adapted to make said call associated with said calling number to said telephone terminal of said user at the request of said server. 8. Apparatus according to claim 7, wherein at each request for access to said service by said user, said auxiliary device generates a new authorization code and makes said call to said telephone terminal of said user, said call being associated with a calling number adapted to be displayed on a display of said telephone terminal, said authorization code being contained in, or coinciding with, said calling number. 9. Apparatus according to claim 8, wherein said authorization code comprises: â ’a calling number selected from a plurality of calling numbers stored in said auxiliary device. 10. Apparatus according to claim 8, wherein said authorization code comprises: ∠’a calling number generated dynamically by said auxiliary device, so that said calling number and / or said authorization code is different for each access request by said user.