Some embodiments provide systems and methods for confidentially and securely provisioning data to an authenticated user device. A user device may register an authentication public key with an authentication server. The authentication public key may be signed by an attestation private key maintained by the user device. Once the user device is registered, a provisioning server may send an authentication request message including a challenge to the user device. The user device may sign the challenge using an authentication private key corresponding to the registered authentication public key, and may return the signed challenge to the provisioning server. In response, the provisioning server may provide provisioning data to the user device. The registration, authentication, and provisioning process may use public key cryptography while maintaining confidentiality of the user device, the provisioning server, and then authentication server.

Confidential authentication and provisioning

It is provided a method a method for establishing a first secure and authorized connection between a smart card (504) and a first device (501) in a network (100), wherein the first device (501) comprises a second secure connection to a second device (502), wherein the method comprises storing a first security data; transferring the first security data between the first device (501) and the second device (502); providing the first security data at the first device (501); establishing a binding between the smart card (504) and the first device (501) via the first secure and authorized connection utilizing the first security data; authorizing the binding between the smart card (504) and the first device (501); and sending a second security data from the smart card (504) to the first device (501) via the first secure and authorized connection whereas the second security data may be usable for authentication of the first device (501) to the network (100).

Method for establishing a secure and authorized connection between a smart card and a device in a network

The transaction card of the invention comprises a Card Verification Value (CVV) generator unit that generates a new CVV code each time the card user is invited to enter his CVV code, typically in a remote transaction. The CVV code is displayed on a screen on the transaction card. The screen can be a liquid crystal display (LCD) screen or any similar or newer display technology.

Transaction Card with dynamic CVV

Embodiments of the present application relate to an identity authentication method and apparatus The method comprises: a terminal device receives a service request, and collects first biological authentication information about a user according to the service request; compare the first biological authentication information with preset biological authentication information, and when the two pieces of information are consistent, read a pre-stored digital signature certificate private key; digitally sign the service request according to the digital signature certificate private key, and generate a biological information verification message; and send the biological information verification message to a server, such that the server reads a pre-stored digital signature certificate public key corresponding to the digital signature certificate private key, and the server returns, after verifying and signing the biological information verification message according to the digital signature certificate public key, authentication result information to the terminal device Thus, the security and convenience of a payment operation of a user can be improved

Identity authentication method and apparatus

A system for tracking containers and logistics using a biometric identity card and a CSD (Container Security Device). The system comprises: a container security device control unit which receives, in accordance with the result of an authentication, container biometric authentication card information from the container biometric identity card, and generates container status information including lock information obtained, and an open message obtained when the container is opened; a container tracking communication terminal unit, periodically generates current location information, and transmits the container status information and the current location information through a wireless communication system; and a container tracking server and the current location information, stores the received information, receives selected container identity information, extracts the container status information and the current location information corresponding to the container identity information, and displays the extracted information at container tracking center.

System for tracking containers and logistics using a biometric identity card and a csd

The present invention discloses a method and system for remote password based authentication using smart cards for accessing a communications network. The disclosed method does not require a remote authentication sever to maintain a table of passwords for all users. The disclosed method and system also support mutual authentication. It not only prevents the illegal use of system resources by an impersonator, the user can also authenticate the identity of the remote authentication server.

Method and system for remote password based authentication using smart cards for accessing a communications network

The invention discloses a key generating method and system based on identity in the computer communication and electronic business applying domain, which comprises the following steps: setting system parameter; generating user information; producing original key; detecting original key; generating reinforced key; producing user key. The system comprises the following parts: system parameter generating mode, user information generating mode, original key generating mode, original key detecting mode, reinforced key generating mode and user key generating mode. The invention solves the problem of reliability for safe channel and key trust, which prevents kinds of jactitation attack.

Cryptographic key generation method and system based on identity

This electronic bank authentication system includes: (1) intelligent cards (IC), (2) the card reader (CR), with a terminal, reads and writes on IC and (3) the server connects to CR via the net. CR (1) receives the biological feature info (BFI) via the terminal; (2) uses the system private key to secretly signs on the first function value which input is BFI; (3) generates the user private key (UPK) and stores it into IC. IC (1) uses UPK to signs on the second function value which input is the message to be signed; (2) sends the signed message to the server via CR. The server uses the pre-stored BFI and the system public key to authenticate the signature.

Electronic bank identification method, system and intelligent card adopting the method

This invention provides a remote authentication method based on an intelligent card password, the intelligent card applying said method, a server and a system and a method for changing passwords and a system, in which, the password remote authentication method includes: the server utilizes a first Has function value inputting a system cryptographic key and a second Has inverse function value withthe user password as the input to generate ciphered user information to be stored in an intelligent card, when a remote server is logged on, the intelligent card uses the second Has function value with the user password as the input to act on the ciphered user information in the same mode to the inverse function of the second Has function to get the second ciphered user information, computes the third Has function value with the second ciphered user information as the input to send the log-on request information containing the third Has function value to the server, which verifies the third Has function value so as to authenticate passwords.

Long-distance password identifying method based on smart card, smart card, server and system

The invention relates to a binary domain password generating method, which comprises: based on fixed prime q, finding binary domain QD1, making its h(D1) contain prime factor q, while D1 is the non-square factor with large prime factor; the large prime p meets that gcd(q, p-(D1/P)=1, while (D1/P) means Lerade mark; obtaining non-maximum binary domain QD, while D=D1p2; building binary password mechanism in QD, while the system only publishes parameter D.

Xiaolei Dong

Papers

Method and system for remote password based authentication using smart cards for accessing a communications network

Cryptographic key generation method and system based on identity

Electronic bank identification method, system and intelligent card adopting the method

Long-distance password identifying method based on smart card, smart card, server and system

Quadratic region code producing method and signature method