Alcatel Lucent

Innovalor B.v.

Maarten Wegdam

Vijay Kumar Gurbani

Debra Lee Cook

Paulo A Santos

Wilhelmus Noort

Tom Nicolaas Van Wietmarschen

Martijn Diederik Oostdijk

Near field communication (NFC) is used for banking, access control or identification. The NFC-chip contains data verifying the identity of the holder, which is read by an NFC-chip reader. NFC-chip readers are now often online or stand-alone terminals, which may be trusted or untrusted. Trusted terminals may require a communication link to a certificate server. Untrusted terminals require a link to a server that performs the authentication steps and may require a link to a certificate server. A disadvantage of conventional NFC-chips and readers is that it can be challenging to position NFC-chip readers at remote or other arbitrary locations. A solution is found in a method for communication with an NFC-chip of a user identification document, by which a terminal obtains protected data from the NFC-chip, including the step of verifying the integrity of the protected data; and a server verifies genuineness of the NFC-chip communicating via the terminal.

NFC-chip reader

A method and apparatus are provided to allow a user of a communications device to utilize one-time password generators for two-way authentication of users and servers, i.e., proving to users that servers are genuine and proving to servers that users are genuine. The present invention removes the need for a user to have a separate physical device, e.g., token, per company or service, reduces the cost burden on the companies and allows for two-way authentication via multiple access methods, e.g., telephone, web interfaces, automatic teller machines (ATMs), etc. Also, the present invention may be utilized in consumer and enterprise applications.

Method and apparatus for generating one-time passwords

The invention includes a method and apparatus for preventing phishing attacks. A first method, for informing a user that a remote server is valid, includes receiving a request for information available from the remote server where the request includes an identifier, obtaining a dynamic personal attribute associated with the user using the identifier, and propagating the dynamic personal attribute toward the user, wherein the dynamic personal attribute is adapted for use by the user in validating the remote server. The remote server may be a web server, an authentication server, or any other remote device with which the user may desire to authenticate. A second method, for informing a user that a received message is associated with a valid website, includes obtaining a dynamic personal attribute associated with a user, generating a message for the user where the message is adapted to enable the user to request a website and includes the dynamic personal attribute associated with the user, and propagating the message toward the user. The received message may be any type of message, such as an email message, an instant message, a text message, and the like.

Method and apparatus for preventing phishing attacks

Growing community of inventors

Borne, Netherlands

Maarten Wegdam