Authorization method and system in data transfer systems

The invention relates to a method for authorization in data transmission systems, and a device for its execution.

It is known that when telebanking the user permanent addition to his Password (? IN) for each transaction additionally a transaction number (TAN) is required. Such TAN's are received in the mail in larger blocks to the user. There is therefore the risk that third parties of such TANs become aware and in conjunction with the password abuse can make. The risk is increased by the fact that Such TAN's virtually an unlimited validity have.

Also known are call-back systems in which the called System is stored by a callback when a rule Number verifies that the calling system is authorized and not a foreign system impersonates a legitimate system. The disadvantage of the call-back systems is that a unauthorized user, which is any one of a source a functional access to the legitimate calling system has given, among these unlawfully obtained permission problems can work, as the call-back system only checks whether called by a legitimate principle system has been.

D1 (WO 96 00485 A) discloses a method and apparatus for authorizing a User in terms of too relevant in every service. A modified therefor Pager calculated based on a request code, a password and an internal Encryption methods, a response code, which the service users in a further Terminal is inputted. After a positive review is the desired service for the Users enabled.

The invention has for its object a method and apparatus for authorization to create in the data transfer, the security is increased. This task is accomplished by the method and apparatus according to the independent claims.

Wireless telecommunications devices such as mobile phones or Pagers often have the ability to short (alpha-) numeric messages (Z. B. the Short Message Service = SMS service) to receive and display on their display. The present invention uses this possibility, a TAN or a comparable password to transfer.

According to the present invention, the user transmitted via a Data input device his identification (user ID, password o. Ä.) and / or an identification ID of the data input device together with a request to generate a TAN (or a comparable password) to a computer, which the Authorization process takes over and then briefly authorization computer is called. This is authorization computer by a random alphanumeric or numeric only TAN (or a comparable password) or calculated taken from a file. Then, by the authorization computer parallel to the existing connection with the data input device, via another transmission TAN (or an equivalent Password) is transmitted to a receiver. This receiver For example,<sl><li>a) a radio receiver with a display or monitor such. B. a cell phone, a pager (z. B. a pager receiver)</li><li>b) a specially crafted reception card within the Data input device which via radio or a fixed Wiring is addressed,</li><li>c) a mailbox,</li><li>d) a fax or</li><li>d) a voice output device such as a fixed instalierter speakers or a (voice) telephone</li></sl>be. For this purpose, the authorization computer the requisite (s) Telephone, paging or fax numbers, e-mail or network address (es). The relevant data are usually in the authorization computer stored. However, it is possible that the authorization computer in turn, these data from a database obsolete, which is located on another computer. in this respect can the authorization computer using the inventive Process is by itself an access to these make another computer.

The authorized user can then forwarded him TAN (or Enter the comparable password) into his data input device manually and send back to the authorization computer. at automated process takes place according to the invention an automatic Transmission of the TAN (or the comparable password). The authorization computer now verified the correspondence between all (awarded by him) valid TAN's (or comparable Passwords) and allows for this authorization check a Release of the data flow between the data input device and a Receiving unit.

When TAN (or the comparable password) may be a act only once usable TAN. However, there are other limitations as the user time and / or the number or size of the transferred files for the validity of the TAN (or comparable Password) possible.

After authorized in the aforementioned way connecting, now data from the data input device to the receiving unit (Or vice versa; full duplex) are received.

It is obvious that, for additional security, these data can also be encrypted.

Both the data entry device, and the authorization computer and the receiving unit may be computer normal (human). The invention works platform independent, ie it is independent of processor types, operating systems and / or control electronics (Z. B. the receiver unit) and / or input / output units (Z. B. the data input device and the receiving unit).

The security of this system is that only an authorization the devices have a data transfer from the data input device to the receiving unit by the authorization computer will be shown. This is through the use of separate transmission paths between the file player and the authorization computer einseits and the authorization computer and the TAN transfer On the other hand, is achieved. To that extent, the different Invention of call-back systems in which only one review the data input device and the authorization computer takes place.

The inventive method allows to perform various security levels.

At the lowest level of security according to the invention is in the data input device as a receiver, a radio receiver, for example, incorporated in the form of a plug-in card, so that only with this specific device a data transmission to the receiving unit possible is. To increase this reliability can be provided, that this radio receiver with a user identification element, operated, for example, a magnetic or chip card can be. The user identification element can also graphical methods such as checking a fingerprint or Image identifying the user work.

The additional security level according to the invention is that the authorization computer which TAN (or the comparable password) sent to a pager or a similar device. In this Case, one of authorization only if the data input device and the pager in accessing the same person. Only then is it is possible that the image displayed on the display of the pager TAN (or a comparable password) entered in the data input device and is sent back to the authorization computer from there.

At a pager transmitted data are known to be, however, be intercepted. Another security level according to the invention can be obtained in such a way that the authorization computer and in the pager matching encryption modules in use are.

Instead of pagers or mobile phones can also in inventive Way be another receiver provided. This can be a Mailbox, be a fax or a voice output device. As voice output device are inventively fixed speaker or the transfer of the language to a defined telephone extension possible. In the speech output devices is a language Issue of TAN (or the comparable password).

It is obvious that also the transmission to such Receivers can be encrypted.

If instead of a pager, a mobile phone, in particular a GSM mobile phone, is in use, then it is possible as a result of encryption of the relevant Transmission technology according to the invention to other encryption mechanisms without. In this case, the display is TAN (or the comparable password) on the display the phone.

Another security level of the invention can achieved by be that of the data input device and the authorization computer a connection is only established if the data input device transmits a corresponding password. This password can present invention have a much longer time Validity own as the TAN.

Another security level of the invention can achieved by be that even the use of the data input device also requires a password.

It is obvious that a combination of the aforementioned is safety levels.

The invention is universal in the field of data transmission systems usable. This applies for example also for the Internet and intra-networks, Local Area Networks (LAN), Wide Area Networks (WAN) etc ..

The system in question is outside the classical computer, for example, used in physical access control. The user gives this example on a mounted near the door Keyboard (= data input device) his personal password. Of the Authorization computer checks the password, if necessary. Also in connection with access on the concrete - for concrete Period. If the relevant password is valid (still), transmitted the authorization computer to a mobile phone or the Special door locking system konzepierte, functional with a Pager similar device, the TAN (or the comparable password). Then this is TAN (or the comparable password) manually by the user via the keyboard attached to doors entered and automatically forwarded to the authorization computer. After successful verification is done by the authorization computer a signal for the release of the door locking mechanism. This release may possibly. Be temporary. The receiving unit in this case, simple in technical terms its nature, since it only the signal for the release of the door locking mechanism so has to process that question electrical mechanics the door opening releases.

Thus it is possible to construct a system in which different People different permission to different apprehended have spaces.

The specific application fields include, for example:<ul><li>data center</li><li>airports</li><li>ministries</li><li>inch</li><li>Border crossings</li><li>Security areas</li><li>banks</li><li>safes</li><li>garages</li><li>Park homes</li><li>cars</li></ul>

The whole system gets its security from the combination several different basic principles and factors:<sl><li>(1) "what-you-have" (which does not want to duplicate (GSM) smart card) So a physical unique, not Verlus dictating that they can be passed.</li><li>(2) "what-you-know" (the PIN of GSM smart card and the own user name in the data input device and / or authentication server), So know-how that is not inadvertently can be passed or accidentally</li><li>(3) DES encryption and cryptographic authentication in the GSM network itself, characterized resistance to eavesdropping and spoofing attacks</li></sl>

This is to system compromise combining at least three - each very unlikely for themselves - Events from emergencies:<sl><li>a) physical loss of (mobile) chip card, the pager or a stranger access to the mailbox, the fax or Voice output device,</li><li>b) publication of the PIN of the recipient (eg. B. from the smart card or the phone) and</li><li>c) knowledge of the transmitted TAN or comparable Password.</li></sl>

An accidental coincidence of these factors is virtually ruled out especially as in this case, the successful attack on the system, the intimate knowledge of the access method and Userid presupposes that not in an attack in the normal case given is. In addition, the user has the option, his user id at losing his chip card into the authentication server immediately block or be blocked.

Another advantage of the support on GSM is that the user during the authorization process at all times is, eg in access problems or doubts as to its Identity from the system administrator can be called directly.

This solution has the advantage of being very safe, cost-effective and with conventional, widespread and secure hardware can be realized.

Another inventive solution is that the authorization computer and receiving unit, a device is.

Further advantages and possible applications of the invention from the hereinafter mentioned embodiment in connection with the drawing.

An authorized user operates a data input device 1). here About it sends the request to generate or select and Returning a TAN (or a comparable password) to an authorization computer 2). The authorization computer 2) generates the TAN (or a comparable password). The authorization computer 2) is the number or data address, z. B. the E-mail or the recipient (3) network address of the user's Data input device 1) is known. He sends to a receiver 3) (Not shown in detail) TAN (or an equivalent Password). The receiver 3), a pager 31) or a mobile phone 32) be. However, the receiver 3) can also be the E-mail address of a Mailbox (not shown), a facsimile machine 33) or a voice output device be. The voice output device may be a permanently installed be speaker 34) or a telephone 35). The user reads this TAN (or a comparable password) from the receiver 3) from, or she hears the voice and gives them manually in the data input device 1). transmitted the data input device 1) now the TAN (or a comparable password) to the Authorization computer 2). The authorization computer 2) is checked, whether these TAN (or the comparable password) is still valid. To this purpose, the authorization computer be programmed to that the validity of the TAN (or the comparable password) between they were sent to the receiver 3) and transmission via the data input device 1) is limited in time. The temporal Limiting example, can take two minutes. If the TAN (or the comparable password) is valid, then provides the Authorization computer 2) a compound to a receiving unit 4) forth. Now the user for the duration of the maintenance this compound capable of data from the data input device 1) to be transmitted to the receiving unit 4) and / or receive.

It is obvious that this data for further securing can be encrypted.

It is also conceivable that not only the TAN (or comparable Password) for its validity for a time limit has, but also that the duration of the maintenance of the connection between the data input device 1) and the receiving unit 4) is limited. In this way it can be avoided that a "Leased line" between the data input unit 1) and the receiving unit 4) is produced, which in turn a vulnerability could represent.

The authorization computer 2) and the receiving unit 4) can have a his only computer. In this case, a first access is made to a data processing program which the authorization process (Generation and transmission of the TAN) in the manner described above performs. In a second step, the data is transmitted.

It can even the data input device (1), the authorization computer 2) and the receiving unit 4) can be a single computer. In this case is carried out a first access to a data processing program, which the authorization process (generation and transmission TAN performs to the recipient) in the manner described above. It was only after the authorization of the user receives a full or limited to certain areas of computer access.

LIST OF REFERENCE NUMBERS

<dl tsize="21" compact="compact"><dt>The data input device</dt><dd>1)</dd><dt>authorization computer</dt><dd>2)</dd><dt>receiver</dt><dd>3)</dd><dt>pager</dt><dd>31)</dd><dt>mobile</dt><dd>32)</dd><dt>Fax machine</dt><dd>33)</dd><dt>speaker</dt><dd>34)</dd><dt>phone</dt><dd>35)</dd><dt>receiving unit</dt><dd>4)</dd></dl>