7 results about "Server authentication" patented technology

This invention provides an authentication server, authentication system, authentication device, authentication method, and authentication program that can reduce processing load while ensuring security. [Solution] The authentication server 2 includes a processor 11 that acquires captured images and performs authentication processing. Based on processing instruction information 42, the processor selectively executes, for each frame constituting the captured image, a biometric information matching process that compares it with registered biometric information and determines whether the person to be authenticated is a registered person, a body expression matching process that determines whether the body expression of the person to be authenticated satisfies the conditions, and a liveness determination process that confirms whether it is a living being, thereby authenticating the person to be authenticated. The processing instruction information indicates whether or not the biometric information matching process, body expression matching process, and liveness determination process should be executed for each frame, and each process is set to be executed in at least one frame.

Technology related to authentication using an intermediary is disclosed. In one example, a method for authentication can include intercepting a first authentication response destined for a server. The first authentication response identifies a server authentication service and is digitally signed by an identity service provider. The first authentication response can be authenticated using a cryptographic key of the identity service provider to validate an identity service provider signature included in the first authentication response. In response to validating the identity service provider signature, a second authentication response can be sent to the server that identifies the server authentication service.

This invention discloses a method for automatically allocating service packets IP addresses based on an OpenVPN environment in the field of Virtual Private Network (VPN) technology. The method includes configuring multiple first IP address pools for first ID groups based on the OpenVPN server's management interface, associating each first IP address pool with a corresponding filter ID, setting the IP range for each first IP address pool, authenticating a second ID using server authentication, and obtaining the attributes of the filter ID corresponding to the second ID after successful authentication. Based on these attributes, the method matches the corresponding IP address pool within the first IP address pools to obtain the second IP address pool. This invention achieves non-overlapping IP address allocation by developing automated CCD files as configuration scripts and combining this with matching IP addresses to the attributes of the filter IDs used for authenticated user access. This avoids conflicts and allows for the allocation of different IP segments based on the user's service packet status, effectively improving the efficiency of IP address allocation management.

A method for registering a mobile device including an embedded Universal Integrated Circuit Card (eUICC) at a mobile network server includes determining subscriber identification information and deriving a first key. Then a registration request is sent to the mobile network server. The eUICC signs first random data with the first key and sends it to the mobile network server. The server produces a server authentication key and authenticates the eUICC, and if successful, grants limited access. The eUICC signs first or second random data with a second key and sends a registration message comprising the signed first or second random data to the mobile network server, which determines the validity of the signed first or second random data, and if valid, grants regular access to the eUICC. Further an embedded Universal Integrated Circuit Card, a mobile network server and a computer program product are disclosed.

A method for registering a mobile device including an embedded universal integrated circuit card (eUICC) at a mobile network server is disclosed. The method includes determining subscriber identification information and deriving a first key. Then, a registration request is sent to the mobile network server. And the eUICC signs first random data by using the first secret key and sends the first random data to the mobile network server. The server generates a server authentication key and authenticates the eUICC, and if successful, grants restricted access. The eUICC signs the first or second random data with a second key and sends a registration message comprising the signed first or second random data to the mobile network server, the mobile network server determines validity of the signed first or second random data, and if valid, the mobile network server sends a registration message comprising the signed first or second random data to the eUICC. And if so, granting regular access to the eUICC. Further disclosed herein are an embedded universal integrated circuit card, a mobile network server and a computer program product.

A physical access control (PAC) system includes a reader device configured to receive credential information from a credential device; a beacon transmitting device configured to transmit a beacon signal detectable by the credential device; and an mauthentication server. The authentication server includes a first communication channel configured to communicate information with the credential device; a second communication channel configured to communicate information with the reader device; and server processing circuitry. The server processing circuitry is configured to receive beacon signal information from the credential device and send beacon signal authentication information to the credential device; receive credential information from the reader device when the beacon signal is authenticated; and initiate access to a physical access portal conditional on authentication of the credential information.

A method performed by an authentication server (14) in a home network (3) of a user equipment (1), UE, for obtaining a subscription permanent identifier, SUPI. The method comprises: - receiving a subscription concealed identifier, SUCI, which comprises an encrypted part in which at least a part of the SUPI is encrypted, and a clear-text part which comprises a home network identifier and an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the SUPI in the SUCI, - determining a de-concealing server (19) to use to decrypt the encrypted part of the SUCI; - sending the SUCI to the de-concealing server (19), and - receiving the SUPI in response. Methods performed by a UE and a de-concealing server are also disclosed. Furthermore, UEs, de-concealing servers, authentication servers, computer program (133) and a memory circuitry (12) are also disclosed.