-
公开(公告)号:EP4372588A1
公开(公告)日:2024-05-22
申请号:EP22306706.7
申请日:2022-11-18
申请人: Metal Gear
CPC分类号: G06F21/44 , H04L63/0869 , H04L63/0853 , G06F21/64 , G06F21/6272 , G06F21/604 , G06F2221/215120130101 , G06F2221/214120130101 , G06F2221/211720130101 , G06F2221/211520130101 , G06F2221/210320130101
摘要: One aspect concerns a method carried out by a first device (101) comprising a processor and memory, said method comprising:
- initiating an authentication session for authenticating a user of the first device with N second devices (1021-102N), with N>=2, and with a third device (103)
- obtaining (S201) an asymmetric key pair comprising a public key and a private key;
- obtaining (S203, S204) an identifier for the authentication session from the third device, wherein the identifier is unique to the authentication session;
- transmitting (S205) the identifier and the public key to the second devices;
- if a message is received (S208) from any second device indicating this second device received an identical identifier in the past, aborting the authentication session; else receiving first data from the user and carrying out user authentication (S300) with the third device based on the first data;
- if user authentication fails, aborting the authentication session; else obtaining (S301, S305) a respective challenge from each of the second devices;
- for each challenge, signing (S307) the challenge with the private key and sending (S308) the signed challenge to the respective second device the challenge was received from;
- if a message is received (S311, S314, 5316, S319) from any of the second devices indicating that a challenge failed, aborting the authentication session; else receiving a message indicative of successful user authentication from each second device.
Other aspects concern a method seen from the second device, as well as devices implementing the methods.