METHODS AND DEVICES FOR AUTHENTICATION
    1.
    发明公开

    公开(公告)号:EP4372588A1

    公开(公告)日:2024-05-22

    申请号:EP22306706.7

    申请日:2022-11-18

    申请人: Metal Gear

    摘要: One aspect concerns a method carried out by a first device (101) comprising a processor and memory, said method comprising:
    - initiating an authentication session for authenticating a user of the first device with N second devices (1021-102N), with N>=2, and with a third device (103)
    - obtaining (S201) an asymmetric key pair comprising a public key and a private key;
    - obtaining (S203, S204) an identifier for the authentication session from the third device, wherein the identifier is unique to the authentication session;
    - transmitting (S205) the identifier and the public key to the second devices;
    - if a message is received (S208) from any second device indicating this second device received an identical identifier in the past, aborting the authentication session; else receiving first data from the user and carrying out user authentication (S300) with the third device based on the first data;
    - if user authentication fails, aborting the authentication session; else obtaining (S301, S305) a respective challenge from each of the second devices;
    - for each challenge, signing (S307) the challenge with the private key and sending (S308) the signed challenge to the respective second device the challenge was received from;
    - if a message is received (S311, S314, 5316, S319) from any of the second devices indicating that a challenge failed, aborting the authentication session; else receiving a message indicative of successful user authentication from each second device.
    Other aspects concern a method seen from the second device, as well as devices implementing the methods.