Visa Europe Limited

Matthew Johnson

Boris Taratine

Simon Peter Rust

Andrew Warren Rounds

Malcolm Lewis

A system for verifying a request for access to data is provided, the system comprising a first moduleand a second module. The first moduleis arranged to generate a password, and the second moduleis arranged to receive a password associated with a request for data, validate the received password, and enable access to the requested data. The system is such that the first and second modulesshare a secret that has been uniquely assigned thereto, the shared secret being for use in generation and validation of a said password. Furthermore, the first moduleis communicatively disconnected from the second module

Method and system for verifying an access request

Systems and methods for use in verifying a request for access to data in a system comprising a first module having access to a first trusted indicator of time, a second module having access to an untrusted indicator of time and a computing device having access to a second trusted indicator of time. The first module generates a password using at least the first trusted indicator of time. The second module receives a password associated with the request for access to data and validates the received password using at least the untrusted indicator of time. The second module then causes a message to be transmitted to the computing device, the message comprising data indicative at least of the untrusted indicator of time used to validate the received password. The computing device then generates data indicative of a comparison between the untrusted indicator of time and the second trusted indicator of time, and uses the generated data to provide said access to data.

Trust is established between a service provider () and a client () of the service provider (). The client () is associated with a party that is known by an identity provider (), and the identity provider () is trusted by the service provider (). The identity provider () contacts () the party () via a predetermined medium, and requests the party to identify itself. The identity provider () determines whether the identity of the identifying party () corresponds to an identity held by the identity provider () for the party and shares a secret () with the identifying party () in the event that the identity provider () has determined that the identity of the identifying party () is the same as said identity held by the identity provider ().

Method and system for establishing trust between a service provider and a client of the service provider

A system for verifying a request for access to data is provided, the system comprising a first module and a second module. The first module is arranged to generate a password, and the second module is arranged to receive a password associated with a request for data (received at step), validate the received password, and enable access to the requested data. The system is such that the first and second modules share a secret that has been uniquely assigned thereto, the shared secret being for use in generation and validation of a said password. Furthermore, the first module is communicatively disconnected from the second module.

Growing community of inventors

Bedfordshire, United Kingdom

Matthew Johnson