Method for authorizing a user accessing a software based system using an unsecured access medium has a two stage encryption process that ensures users are authorized before the system can be accessed

摘要

Method for authorizing a user accessing a software based system. The authorization method is based on a system of two public and two private keys as well as a character string that is first encrypted by the software system that is to be accessed. The invention also relates to a corresponding device for implementing the method with a service terminal (2) and a user terminal (1). Authorization method in which a user of a software system (2) is given a first private key and a first public key. When the user applies to the software system the public key is transmitted so that the system can check it. If the user is authorized the system encodes a character string with the public key and transmits it back to the user and transmits it together with a second public key to the user. The user decodes the string with his private key and re-codes it with the second public key to send it back to the system. The software system decodes the string with a second private key. If the decoded string agrees with the initial string the user is authorized.