WO2008017776A2

WO2008017776A2 - Method and system of authenticating users in a communication network

Info

Publication number: WO2008017776A2
Application number: PCT/FR2007/051714
Authority: WO
Inventors: Arnaud Brun; Carlos Flores Elias
Original assignee: France Telecom
Priority date: 2006-08-11
Filing date: 2007-07-24
Publication date: 2008-02-14
Also published as: FR2904902A1; WO2008017776A3

Abstract

The invention relates to an authentication method comprising a step of requesting access to a communication network (R1; R3) by a user (A) equipped with a first terminal (1) able to establish communication with at least one second terminal (3), characterized in that the method further comprises: a step of inserting a field and a biometric datum (DBn) of the user (A) in a message M1; M2); a step of sending said message (M1; M2) to the second terminal (3); a step of detecting said field; and a step of comparing the biometric datum (DBn) with the prerecorded biometric datum (DBrefn).

Description

AUTHENTIC METHOD AND SYSTEM OF USING SATELLITE UTILITIES IN A CATI ON COMMON NETWORK

Dom nity of the invention

The present invention relates to communication networks in which users equipped with a communication terminal (fixed, mobile, or hybrid) can send messages or make phone calls. It relates more particularly to the authentication of users of such networks when sending a message or remission of a phone call.

Prior art

Currently, when a user's terminal receives a message of the multimedia message type MMS, SMS message, email, etc. or a phone call, the number or name of the sender of the message or the phone call can be displayed on the terminal screen. This feature allows the user who receives the message or call to identify the sender.

However, there is nothing to guarantee to the recipient user of the message or the call that this identity has been verified by the operator of the communication network and, consequently, that the message or the call sent comes from a authenticated user. Fixed and / or mobile network operators can currently identify the terminals used by their subscribers to connect to their networks during communications, but they do not have the means to authenticate users who use these terminals. There are methods and systems allowing a user to authenticate with a high level of security by using as authentication data a biometric data such as a fingerprint, iridian or voice. However, authentication based on a biometric data is used in very different fields than communications. It is mainly used to allow access to certain types of machines such as computers or at locations (door opening systems).

Obi et and succinct description of the invention

The present invention aims to overcome these disadvantages by providing a solution for secure authentication of users in a communication network when sending a message or remission of a phone call. To this end, the invention relates to an authentication method comprising a step of requesting access to a communication network by a user equipped with a first terminal capable of establishing a communication with at least a second terminal, characterized in that the method further comprises: a step of inserting a field and a biometric data of the user into a message, a step of sending said message to the second terminal, - a step of detecting said field, and a step of comparing the authentication biometric data with a prerecorded biometric data item.

Thus, thanks to the method of the invention, a user can authenticate with his correspondents in the communication network. Indeed, by sending a message containing a biometric data of the user that is compared by an authentication server with a reference biometric data, the operator of the communication network can perform strong authentication of its subscribers . The sender of a message or a telephone call can thus be securely authenticated by both the operator and the recipient (s) of the message or call for each request for access to the network. Communication.

According to one aspect of the invention the method further comprises: a step of assigning a value to said field. In this case, the message sent by the user is enriched with an authentication field which is assigned a specific value for authentication of the sender of the message by means of the biometric data transmitted with this message. According to another aspect of the invention, the request for access to the communication network comprises sending a message by the user from the first terminal to the second terminal, and the method further comprises: a step of returning said message by a first computer to a second computer, a step of conveying said message to the second terminal, and a step of notification by said second terminal according to said value. The recipient of the message is thus informed that the sender of the message has been authenticated.

When the request for access to the communication network comprises a transmission of a call by the user from the first terminal to the second terminal (3), the method further comprises: a step of returning the message by a first computer to a second computer, a step of routing said message to the first and second terminals, and a step of transmitting said call by said first terminal to said second terminal in response to receiving said message, and a step of notification by the second terminal according to said value. It is thus possible, thanks to the invention, to authenticate by biometric data a telephone call from a user. The effective transmission of the telephone call is thus subordinated to the prior authentication of the user sending the call.

In a variant, the method as described above is characterized in that said message is an MMS message comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header including said field.

The present invention also relates to a first terminal comprising - means for requesting access to a communication network, and means for establishing a communication with at least one second terminal, characterized in that the terminal further comprises: - means for inserting a field and a biometric data of a user into a message, means for sending said message to the second terminal.

The invention also relates to an authentication system comprising: means for detecting a field in a message, and means for comparing a biometric data item included in said message with a pre-recorded biometric data item. As for the method described above, the system of the invention provides a solution to the sender of a message or a phone call to authenticate securely to its correspondents.

In a variant, the authentication system as described above is characterized in that the system further comprises: means for assigning a value to said field.

In one variant, the authentication system as described above is characterized in that the request for access to the communication network comprises sending a message by a user from the first terminal to the second terminal, and the system further comprises: means for returning the message by a first computer to a second computer, means for conveying said message to the second terminal, and means for notification by said second terminal according to said value.

In one variant, the authentication system as described above is characterized in that the request for access to the communication network comprises a transmission of a call by a user from the first terminal to the second terminal and the system further comprises: means for returning the message by a first computer to a second computer, - means for routing said message to the first and second terminals, and means for transmitting said call by said first terminal to said second terminal in response to the receipt of said message, and - means for notification by the second terminal according to said value.

In one variant, the terminal as described above is characterized in that said message is an MMS message comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header comprising said field.

In one variant, the authentication system as described above is characterized in that said message is an MMS message comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header comprising said field.

The present invention further relates to a computer program, comprising program code instructions for performing at least one of the steps of a method as described above, when said program is run on a computer.

Such a program, once embedded in a terminal, provides the user with the tools to authenticate to his correspondents when he accesses the network to send them a message or make a phone call. The invention also relates to a computer program product, comprising program code means, stored on a computer readable medium, for implementing at least one of the steps of a method as described above. when said program is running on a computer.

Brief description of the drawings

The features and advantages of the present invention will emerge more clearly from the following description, given by way of non-limiting indication, with reference to the appended drawings, in which: FIG. 1 is a schematic view of a network architecture in which is implemented a system and an authentication method according to the invention, - Figure 2 is a flow chart of an embodiment of an authentication method when sending an MMS message according to a mode of embodiment of the invention, FIG. 3 is a flowchart showing the steps performed during the transmission of an MMS message with authentication from the terminal of the transmitter according to the invention, FIG. 4 is a flowchart showing the steps performed by an MMS center during the transmission of an MMS message with authentication in accordance with the invention, Figure 5 is a flow chart showing the steps performed by a cent MMS authentication when receiving an MMS message according to the invention, Figure 6 is a flow chart of an implementation of an authentication method when issuing a call. telephone according to another embodiment of the invention, - Figure 7 is a flow chart showing the steps performed during the transmission of a telephone call with authentication from the transmitter terminal according to the invention, FIG. 8 is a flowchart showing the steps performed by an MMS center during the transmission of an MMS message In accordance with the invention, FIG. 9 is a flowchart showing the steps performed by an MMS authentication center when receiving an issuer authentication MMS message. telephone call according to the invention.

Detailed description of the methods of carrying out the invention

The present invention proposes a solution for allowing a user of a fixed and / or mobile communication network (GSM, GPRS, UMTS, I nternet, etc.) to identify himself to the network operator and, thus, to authenticate with the correspondents to whom he wishes to send a message (MMS message, SMS, email, etc.) or to which he wishes to make a voice telephone call.

According to the invention, during a request for access to a communication network initiated by sending a message or a telephone call from its terminal (mobile phone, smartphone, PDA, etc.), the user sends biometric authentication data that allows its operator to uniquely identify it and, therefore, to authenticate its message or call to the recipient (s).

For this purpose, as described later in detail, the invention uses for example the technology of multimedia messaging service called MMS ("Multimedia Messaging Service") for sending the biometric authentication data of the user. For the sake of simplicity, most of the elements used in the present invention and pertaining to this technology will be qualified with the term MMS (eg MMS message). However, the invention relates to sending the biometric authentication data of a user by all types of messages, e.g. not only of the MMS type.

The biometric authentication data DBn considered in the present invention corresponds to any biometric information making it possible to uniquely identify a person. This data can be, for example, a fingerprint, Indian or voice. According to the data biometric used by the operator for authentication, the terminal of the user will be equipped with means for entering this data. For example, the user's terminal may be equipped with a fingerprint sensor, a sensor for capturing a photo of his iris, or a voice recorder allowing the user to record a standard sentence and associated biometrics software. The biometric capture means are well known and will not be described in more detail.

Figure 1 illustrates an architecture in which the invention can be implemented. This architecture comprises a terminal 1 of a user A, a terminal 3 of a user B, an MMS center 10 and an authentication center 20. The MMS center 10 allows the exchange of MMS messages between the terminal 1 of the user A and user B terminal 3 through a communication network R1 (eg GSM network, GPRS or UMTS). The MMS center 10 can also exchange MMS messages with the authentication center 20 via a network R2. Terminals 1 and 2 can establish telephone communications over an R3 network. The networks R1, R2 and R3 can be fixed or mobile communication networks managed by different or identical operators. In the following description, the user A will be considered as the sender of the message or the telephone call and the user B the recipient of the message or the call.

The MMS 10 manages the routing of MMS messages both in the MMS environment to which it belongs and to other MMS environments or other mail servers. In known manner, the MMS center consists of one or more servers comprising modules (software) for processing MMS messages (eg routing, storage, adaptation).

The MMS center is also connected to value-added services ("VAS Applications"), a database for managing subscribers and their location (for example: HLR for "Home Location Register" for the mobile network) , billing systems, and MMS user information databases (eg, presence information) (not shown in Figure 1). These network elements under the control of a multimedia messaging service provider ("MMS content provider") allow access to the MMS services to subscriber users via a telecommunications network. The different entities of an MMS message exchange system communicate through a set of dedicated interfaces.

Regarding the terminals 1 and 3, they must be equipped with an MMS client 2, respectively 4 which is embedded in the terminal. The MMS client (also called MMS-UA for "MMS User Agent") is a user application software embedded on the terminal that allows the composition, presentation, sending and receipt of MMS messages. MMS clients 2 and 4 are attached to an MMS environment corresponding to the R1 network (eg GSM, GPRS or UMTS) of the sending and receiving terminal subscription. In accordance with the invention, the MMS clients 2 and 4 of the terminals 1 and 3 further comprise instructions for integrating an authentication biometric data into an MMS message and sending this MMS message by integrating an authentication field into the MMS message. header of the message. Indeed, the authentication of a user by transmission of a biometric data item in an MMS message according to the present invention must be able to integrate into existing MMS environments. For this purpose, as described later in detail, a specific "Mode Authentication" field is added in the MMS messages which, depending on its value, will enable the MMS center 10 and the authentication center 20 to process in a particular way. this message to perform the authentication of the user.

The biometric authentication data DBn of the user is inserted into a given page of the MMS message (for example the last one).

Finally, as explained below, the MMS client of each terminal comprises according to the invention, instructions for, according to the value of the authentication field present in the header of the MMS message received, inform the user recipient of the message or phone call of the sender user authentication. The authentication center 20 comprises processing means, such as for example a server 21, in connection with the communication network R2 and a storage unit 22 in which the reference biometric data of all the users registered with the service are stored. authentication. The server 21 is programmed to, when it receives an MMS message with a biometric authentication data DBn, compare this data with the reference biometric data DBref corresponding to the identity of the user indicated as issuer of the MMS message. A first example of implementation of the authentication method of a user according to the invention in the case where the latter wishes to send an MMS message to another user is described in connection with FIG. In this example, the user A of Figure 1 sends an MMS message to the user B. The first step (step S1) is to compose and send an MMS message.

More precisely and as illustrated in FIG. 3, the user A conventionally composes on his terminal an MMS message M1 which he wishes to send to the user B (step S11). This operation consists for the user to enter the address of the recipient user of the message and to edit the multimedia elements that he wishes to transmit with the message.

After this composition, during the request for access to the communication network (for example the network R1), that is to say when the user A decides to send his message (when he presses the button

"Send for example), the terminal 1 automatically performs the following actions / treatments: input of the authentication biometric data DBn of the user A (for example fingerprint, iridian or voice) (step S12), adding a new page ("slide") SLn in the message MMS M1 (here in the last position in the body of the message) and insertion in this page of the biometric authentication data DBn (step S13), adding, in the header of the MMS message M1 of the "Authentication-Mode" field to the value 1 (step S14), sends the MMS message M1 thus constituted to the terminal 3 of the user B using the architecture MMS, that is to say the interface MM1 between the terminal 3 and MMS center 10 of the operator through which the message passes (step S15).

Figure 4 describes the processing steps performed by the center

MMS when receiving the MMS message M1. Once the MMS message M1 has been received by the MMS center 10 (step S21), the latter determines whether an authentication field ("Authentication-Mode") is present in the message header (step S22). If this is not the case, the MMS message M1 will be treated as a conventional MMS message (step S23), that is to say directly forwarded to its recipient, here the user B. If an authentication field is present in the header of the MMS message M1, the MMS center 10 verifies the value assigned to this field (step S24). If the value indicates that there is no page containing a biometric authentication data (eg "Authentication-Mode" field = 0), the message

MMS M1 will be treated as a conventional MMS message (step S23). If, on the contrary, the value of the field corresponds to an indication that a page SLn containing a biometric data item is present in the message (eg "Authentication-Mode" field = 1), the MSS center 10 transmits the message to the server 21 the authentication center 20 via the MM7 / SOAP interface

(Step S25 and Step S2 of Figure 2).

On receipt of the MMS message M1, the server 21 of the authentication center performs the processing specific to the authentication of the user A.

More precisely and as illustrated in FIG. 5, once the message has been received (step S31), the server 21 extracts the biometric data item.

DBn contained in the last page (slide) of the MMS message M1 (step S32). It also extracts from the identifier of the issuer (this identifier can be either its telephone number if the issuer is a user of a mobile or fixed network, or his e-mail address if the issuer is a user of an internet network) indicated in the MMS message M1 the biometric reference data DBref registered in the name of the user A in the storage unit 22 (step S33). The server 21 then determines by comparison whether these two biometric data come from the same user (step S34). If the two biometric data correspond (DBn = DBref), the user A is identified and the server 21 deletes the last page SLn of the MMS message M1 containing the biometric data item (step S35) and then sends the message to the MMS center 10 (step S36 and step S3 in Fig. 2). In the other case, that is to say, if the received biometric authentication data does not correspond to the reference biometric data recorded for the user A, the server 21 sends an SMS message to the user A signaling the failure of its authentication and blocks the MMS message M1 (step S37). The processing of the server 21 for the MMS message M1 is then completed (step S38)

As indicated above, in the case of positive authentication, the MMS 10 receives the MMS message M1 returned by the server 21 of the authentication center 20 (step S3). The MMS center 10 then routes the MMS message M1 to the terminal 4 of the user B (step S4). The MMS 4 client of the terminal 3 detects the "Authentication-Mode" field present at the value 1 in the message header and informs the user B that the sender of the message, the user A, has been authenticated. by the operator (for example by displaying a specific icon on the terminal screen) (step S5). The MMS message M1 is then played in a conventional manner on the terminal 3 of the user B (step S6).

The "Authentication-Mode" authentication field inserted in the MMS message header can take three values, namely 0, 1 (MMS-specific values) or 2 (telephone-specific value).

Depending on the value of this field, the operator's network, that is to say the MMS center 10 and the authentication center 20, and the recipient's terminal perform different actions on the MMS messages which are respectively shown in the two tables below.

When the "Authentication-Mode" field is absent from the header of the MMS message, the latter is processed conventionally by the MMS center and the recipient's terminal.

A second embodiment of the method for authenticating a user according to the invention is described next in the case where the latter wishes to transmit a phone call to another user. In this example, user A of Figure 1 calls user B.

When the user A initiates a request for access to the communication network (for example the network R3) to establish a telephone communication with the user B by dialing, for example, conventionally on his terminal the telephone number of B and pressing the "Appe / er" button (step S10), the terminal 1 automatically performs, as shown in FIG. 7, the following actions / processes: - entry of the biometric authentication data DBn of the user A (for example fingerprint, iridian or voice) (step S41), creation of an M2 MMS message containing a single page (SU) (step S42), - insertion in this page of the biometric authentication data DBn ( step S43), adding, in the header of the MMS message M2 of the "Authentication-Mode" field to the value 2 (step S44), sends the M2 MMS message thus constituted to the terminal 3 of the user B using the MMS architecture, that is to say the interface MM1 between the terminal 3 and MMS center 10 of the operator through which the message passes (step S45 and S20 of Figure 6).

FIG. 8 describes the processing steps performed by the MMS center when it receives the MMS message M2. Once the M2 MMS message has been received by the MMS center 10 (step S51), the latter detects the presence of the authentication-mode authentication field present in the message header as well as the value 2 assigned to this field. (Step S52) and transmit the message to the server 21 of the authentication center 20 via the interface MM7 / SOAP (step S53 and step S30 of Figure 6).

Upon receipt of the message MMS M2, the server 21 of the authentication center performs the processing specific to the authentication of the user A.

More precisely and as illustrated in FIG. 9, once the message has been received (step S61), the server 21 extracts the biometric data item. DBn contained in the SU (slide) page of the M2 MMS message (step S62). It also extracts from the identifier of the sender (this identifier can be either his telephone number if the sender is a user of a mobile or fixed network, or his e-mail address if the sender is a user of an internet network) indicated in the MMS message M2 the biometric reference data DBref registered in the name of the user A in the storage unit 22 (step S63).

The server 21 then determines by comparison whether these two biometric data come from the same user (step S64). If the two biometric data correspond, the user A is identified and the server 21 deletes the page SU of the MMS message M2 containing the biometric data item (step S65) and then sends the message MMS 2 to the MMS center 10 (step S66 and step S40 on Figure 2). In the other case, that is to say, if the received biometric authentication data does not correspond to the reference biometric data recorded for the user A, the server 21 sends an SMS message to the user A signaling the failure of its authentication and blocks the M2 MMS message (step S67). The processing of the server 21 of the MMS message M2 is then completed (step S68). When the authentication is positive (DBn = DBref), two cases are distinguished: in the case where the authentication field

"Authentication-Mode" of the message header is set to 1 (in case user A wishes to sent an authenticated MMS message): server 21 sends MMS message M1 cleared of page SLn, destined for B and having as origin field the number of A (step S3, FIG. 2). in the case where the "Authentication-Mode" authentication field of the message header is set to 2 as in the example considered here (in which case user A wishes to issue an authenticated telephone call): the server 21 sends the M2 MMS message cleared of the page SL1, to B and having as origin field the number of A (step S40). The server 21 also sends a second M2 MMS message cleared of the page SU, to A and having as origin field the number of B (step S40 '). The MMS center 10 routes the first MMS message M2 to the terminal 4 of the user B (step S50) and the second MMS message M2 to the terminal 1 of the user A (step S50).

When it receives the message MMS M2, the MMS client 2 of the terminal 1 triggers the transmission of the telephone call to the terminal 3 of the user B (step S70) (the message MMS M2 received by A has the field " Authentication-Mode "in its header set to 2 and the issuer of the indicated message is B)

For its part, the terminal 3 of the user B receives the message MMS

M2 and the call request from the terminal 1 of the user A. The terminal 3 informs the user B that he has a call request (by ringing for example) while the MMS client 4 of the terminal 3, which has detected the "Authentication-Mode" field present at the value 2 in the message header, at the same time informs the user B that the sender of the message, the user A, has been authenticated by the user. operator (for example by displaying a specific icon on the terminal screen) (step SSO). User B can then take the telephone call in a conventional manner on his terminal 3 (step S90).

In the case of the transmission of a telephone call, the "Authentication-Mode" authentication field inserted in the MMS message header can only take the value 2. The three tables below indicate the actions the operator's network (ie the MMS center and the authentication center), the terminal of the sender of the call and the terminal of the recipient of the call at the time of the call. receiving a message with an "Authentication-Mode" field set to 2.

Since the authentication process is initiated by sending an MMS message by the MMS client of the terminal of the sender of a message or a telephone call, the MMS client may further comprise means for activating / deactivating this feature, for example by allowing the user to select / deselect this feature in a menu displayed on the screen. When this feature is not enabled, the MMS client does not send an MMS message with an authentication biometric data and an authentication field, and its user will not be authenticated.

Furthermore, when registering with the authentication service of the present invention, the user must provide his operator with a biometric data item which will be registered as a reference biometric data item in the storage unit of the data center. operator authentication. This biometric reference data may be, for example, sent by the user by MMS message to the authentication center server when registering for the service.

The present invention is described in connection with MMS message exchange systems comprising mobile terminals. However, these systems may also include fixed terminals able to send / receive MMS messages. For this purpose, it suffices that the fixed terminal is equipped with an MMS client similar to that embedded on the mobile terminals.

In the case of authentication when sending a message, the method and system of the invention are not limited only to the case of sending an MMS message as described above but to the sending of a message. any type of message and in particular SMS messages and emails or emails.

In the case of sending an SMS message, the terminal of the sender of the message sends an MMS message consisting of two pages: a first page containing the text that wants to send the sender corresponding to the SMS message, and a second page containing the authentication biometric data (the MMS message further containing in its header an "Authentication-Mode" field set to 1 as previously described). In the case of sending an email, the terminal of the sender of the message sends an MMS message consisting of two pages: the first N-1 pages containing the various elements contained in the email to be transmitted (in particular, the text of the email is contained in the first page), and the N ^IΘmΘ page containing the biometric authentication data (the message MMS further containing in its header an "Authentication-Mode" field set to 1 as previously described). Finally, optionally, the authentication center server may be provided with a successive authentication failure counter for the same user and include instructions for, beyond a predetermined number of failures determined, always prohibit any message or call for this user and invite him to contact his customer service in an SMS message.

Although the invention has been described from the example of MMS, it concerns all types of messages.

Claims

REVENDI CATI ONS

1. Authentication method comprising a step of requesting access to a communication network (R1; R3) by a user (A) equipped with a first terminal (1) able to establish a communication with at least a second terminal (3), characterized in that the method further comprises: a step of inserting a field and a biometric data item (DBn) of the user (A) into a message (M1; M2), a step sending said message (M1; M2) to the second terminal (3), a step of detecting said field, and a step of comparing the biometric data item (DBn) with a pre-recorded biometric data item (DBrefn).

2. Method according to claim 1, characterized in that the method further comprises: a step of assigning a value to said field.

3. Method according to claim 2, characterized in that the access request to the communication network (R1) comprises sending a message by the user (A) from the first terminal (1) to the second terminal (3), and the method further comprises: - a step of returning said message by a first computer to a second computer (10), a step of conveying said message to the second terminal (3), and a notification step by said second terminal according to said value.

4. Method according to claim 2, characterized in that the request for access to the communication network (R3) comprises a transmission of a call by the user (A) from the first terminal (1) to the second terminal (3) and the method further comprises: a step of returning the message by a first computer (21) to a second computer (10), a step of conveying said message to the first and second terminals (1, 3), and - a step of transmitting said call by said first terminal

(1) to said second terminal (3) in response to receiving said message, and a step of notifying the second terminal (3) according to said value.

5. Method according to any one of claims 1 to 4 characterized in that said message is an MMS message comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header comprising said field.

6. First terminal (1) comprising means for requesting access to a communication network (R1; R3), and - means for establishing a communication with at least a second terminal (3), characterized in that the terminal further comprises: means for inserting a field and a biometric data item (DBn) of a user (A) into a message (M1; M2), - means for sending said message (M1; M2) to destination of the second terminal (3).

7. Authentication system comprising: means for detecting a field in a message (M1; M2), and means for comparing a biometric data item (DBn) included in said message (M1; M2) with a data item pre-recorded biometric (DBrefn).

8. Authentication system according to claim 7, characterized in that the system further comprises: means for assigning a value to said field.

9. Authentication system according to claim 8, characterized in that the request for access to the communication network (R1) comprises sending a message by a user (A) from the first terminal (1) to the second terminal (3), and the system further comprises: - means for returning the message by a first computer to a second computer (10), means for conveying said message to the second terminal (3), and means for notification by said second terminal as a function of said value.

10. Authentication system according to claim 8, characterized in that the request for access to the communication network (R3) comprises a transmission of a call by a user (A) from the first terminal (1) to the second terminal (3) and the system further comprises: means for returning the message by a first computer (21) to a second computer (10), means for conveying said message to the first and second terminals (1, 3), and means for transmitting said call by said first terminal (1) to said second terminal (3) in response to receiving said message, and means for notification by the second terminal (3) according to said value.

11. Terminal according to claim 6 characterized in that said message is an MMS message comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header comprising said field. 12 authentication system according to any one of claims 7 to 10 characterized in that said message is a message

MMS comprising a body and a header, said body comprising at least one page (SLn) containing said biometric data, said header comprising said field.

A computer program comprising program code instructions for performing at least one of the steps of a method according to claims 1 to 5 when said program is executed on a computer.

A computer program product, comprising program code means, stored on a computer readable medium, for implementing at least one of the steps of a method according to claims 1 to 5, when said program runs on a computer.