Telecom Italia S.p.a.

Gaetano Di Caprio

Corrado Moiso

Paolo De Lutiis

Paolo Vailati

A method and system for out-of-band authentication of messages transmitted, e.g. as packets, on a communication network, whereby a first stream of data is received by a sender control module from a sender; the first stream of data is transmitted over a first channel, e.g. a non-secure data channel, toward a receiver control module; the sender control module generates authentication data of the first stream of data; the authentication data are transmitted from the sender control module to the receiver control module on a second channel, e.g. a secure data channel, distinct from the first channel; and a stream of data received by the receiver control module is checked using the authentication data. Before sending the authentication data, the sender control module transmits a control message including synchronization data to the receiver control module over the second channel.

Out-of band authentication method and system for communication over a data network

A telecommunications service to be obtained for a user is split into a plurality of service components. A telecommunications terminal determines the most appropriate service provider for each service component; each of the service components is obtained by a corresponding service provider; and the telecommunications terminal invokes the functionality of each service component according to the service to be obtained. This is particularly useful for wireless mobile telecommunications terminals.

Method for obtaining telecommunications services through a telecommunications terminal

A system and method for authenticating a subscriber of a first network to access application services through a second network, wherein the second network is a packet data network. The system includes a mobile station connected to a cellular network and apt to generate access-request messages enclosed in data packets, the access-request messages being expressed with a syntax that complies with an application-level protocol; an allocation server apt to allocate an address in the second network to the subscriber and to provide a mapping between the subscriber's address and a first subscriber's identifier; a gateway which interfaces the first network to the second network and assigns the subscriber's address to the mobile station; a service token injector linked with the gateway and apt to intercept the data packets generated from the endpoint station and directed to the second network through the gateway and to capture in the data packet at least the subscriber's address, and an identity authority logical entity linked with the service token injector.

Growing community of inventors

Turin, Italy

Gaetano Di Caprio