Methods and systems for secure user authentication
US9768963B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Feb 2, 2011 |
| Grant date | Sep 19, 2017 |
| Priority date | — |
| Expiry date | Jun 3, 2032 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L9/3228
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Methods and systems for secure user authentication using a OTP involve, for example, pre-storing a OTP application on a first computing device for generating a valid OTP value for the user responsive to receiving entry of a valid PIN value of the user, no part of the valid PIN value is stored on the first computing device and pre-storing on a back-end server the valid PIN value and a valid shared secret for the user. Upon receiving entry of a purported PIN value of the user, a purported shared secret is dynamically synthesized on the first computing device by the OTP application based on the purported PIN value of the user and a purported OTP value is generated on the first computing device. When entry of the purported OTP value is received by the back-end server in an attempt to log on the back-end server from a second computing device, the back-end server cryptographically calculates a window of OTP values, and log on to the back-end server from the second computing device is allowed if the calculated window of OTP values corresponds to the received OTP value.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.