专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008113951A2 METHOD FOR THE UNIQUE AUTHENTICATION OF A USER BY SERVICE PROVIDERS 审中-公开
标题翻译：服务提供者对用户进行单一认证的方法
公开(公告)号：WO2008113951A2
公开(公告)日：2008-09-25
申请号：PCT/FR2008050306
申请日：2008-02-25
申请人： FRANCE TELECOM , CANARD SEBASTIEN , MALVILLE ERIC , TRAORE JACQUES , GUILLOTEAU STEPHANE
发明人： CANARD SEBASTIEN , MALVILLE ERIC , TRAORE JACQUES , GUILLOTEAU STEPHANE
IPC分类号： H04L29/06 , H04L9/32 , H04L12/22
CPC分类号： H04L63/0421 , H04L9/3013 , H04L9/3257 , H04L63/0815 , H04L63/0823 , H04L63/126 , H04L2209/04
摘要： The invention relates to a method for the unique authentication of a user (U) by at least one service provider (SP), said method comprising the preliminary phase of federating identities between an identity (user@sp) of the user by said service provider and an identity (user@idp) of the user (U) by an identity provider (IdP). According to the invention, the preliminary identity federation phase comprises the following steps: for the user (U), generating an alias ([alias]) of the user for the service provider (SP) and transmitting to the identity provider (IdP) a masked alias ([alias]masqué) derived from the alias; for the identity provider (IdP), associating said masked alias ([alias]masqué) for this service provider (SP) with the user's identity (user@idp) by the identity provider (IdP), and transmitting elements to the user (U) so that the user can calculate a signature ( s ) of a message {msg) containing the unmasked alias ([alias]); for the user (U), calculating said signature ( s ) and transmitting to the service provider (SP) said message {msg) with said signature ( s ); and for the service provider (SP), checking said signature ( s ), authenticating the user (U) and associating said alias ([alias]) with the user's identity (user@sp) by the service provider (SP).
摘要翻译：本发明涉及一种用于由至少一个服务提供商（SP）对用户（U）的唯一认证的方法，所述方法包括由所述服务提供商（SP）在用户的身份（用户@ sp）之间的联合身份的初步阶段以及身份提供者（IdP）的用户（U）的身份（user @ idp）。根据本发明，初步身份联合阶段包括以下步骤：对于用户（U），为服务提供商（SP）生成用户的别名（[别名））并向身份提供商（IdP）a发送来自别名的蒙版别名（[alias]masqué）对于身份提供商（IdP），通过身份提供者（IdP）将用于该服务提供商（SP）的所述被屏蔽的别名（[alias]masqué）与用户的身份（user @ idp）相关联，并向用户（U ），使得用户可以计算包含未屏蔽的别名（[alias]）的消息{msg）的签名; 对于用户（U），计算所述签名并且向所述服务提供商（SP）发送具有所述签名的所述消息（msg）; 并且对于服务提供商（SP），检查所述签名，认证用户（U）并且将所述别名（[别名））与服务提供商（SP）的用户身份（user @ sp）相关联。

IPRDB

热门服务

关于我们

友情链接

联系方式