Global Patent Index - EP 1766848 A1

EP 1766848 A1 20070328 - METHOD, SYSTEM AND COMPUTER PROGRAM FOR PROTECTING USER CREDENTIALS AGAINST SECURITY ATTACKS

Title (en)

METHOD, SYSTEM AND COMPUTER PROGRAM FOR PROTECTING USER CREDENTIALS AGAINST SECURITY ATTACKS

Title (de)

VERFAHREN, SYSTEM UND COMPUTERPROGRAMM ZUM SCHUTZ DES BENUTZERLEUMUNDS VOR SICHERHEITSATTACKEN

Title (fr)

PROCEDE, SYSTEME ET PROGRAMME INFORMATIQUE DESTINE A PROTEGER DES INFORMATIONS D'UTILISATEUR CONTRE DES ATTAQUES DE SECURITE

Publication

EP 1766848 A1 20070328 (EN)

Application

EP 05759341 A 20050620

Priority

  • CA 2005000955 W 20050620
  • US 87099004 A 20040621
  • CA 2471917 A 20040622

Abstract (en)

[origin: WO2005125084A1] A method, system and computer program is provided for protecting against one or more security attacks from third parties directed at obtaining user credentials on an unauthorized basis, as between a client computer associated with a user and a server computer is provided. The server computer defines a trusted Public Key Cryptography utility for use on the client computer. The Public Key Cryptography utility is operable to perform one or more cryptographic operations consisting of encrypting/decrypting data, authenticating data, and/or authenticating a sender, decrypting and/or verifying data. The user authenticates to the Public Key Cryptography utility, thereby invoking the accessing of user credentials associated with the user, as defined by the server computer. The Public Key Cryptography Utility facilitates the communication of the user credentials to the server computer, whether directly or indirectly via an authentification agent, the server computer thereby authenticating the user. In response, the server computer providing access to one or more system resources linked to the server computer to the user. The present invention also provides a series of methods enabling the server computer to authenticate the user by operation of the Public Key Cryptography utility and/or based on enrolment of the user and providing the Public Key Cryptography utility to the user.

IPC 8 full level

H04L 9/30 (2006.01); G06F 21/31 (2013.01); G06F 21/33 (2013.01); G06F 21/44 (2013.01); H04L 9/32 (2006.01); H04L 29/06 (2006.01)

CPC (source: EP)

G06F 21/31 (2013.01); G06F 21/33 (2013.01); G06F 21/445 (2013.01); H04L 63/08 (2013.01); H04L 63/14 (2013.01); G06F 2221/2117 (2013.01); G06F 2221/2119 (2013.01)

Citation (search report)

See references of WO 2005125084A1

Designated contracting state (EPC)

AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU MC NL PL PT RO SE SI SK TR

DOCDB simple family (publication)

WO 2005125084 A1 20051229; AU 2005255513 A1 20051229; EP 1766848 A1 20070328

DOCDB simple family (application)

CA 2005000955 W 20050620; AU 2005255513 A 20050620; EP 05759341 A 20050620