Expected response one-time password
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsWael Ibrahim, Upendra Mardikar
Life of this patent
Estimating the term…
Abstract
A system may generate a seed one-time password (OTP). The system may also perform steps including transmitting the seed OTP to a user device, receiving a response OTP from the user device, and calculating an expected response OTP by applying a function to the seed OTP. The system may then compare the response OTP to the expected response OTP and send a result in response to comparing the response OTP to the expected response OTP.
Claims20
A method comprising:
- transmitting, by a processor, a seed one-time password (OTP) to a user device;
- receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device;
- calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device;
- determining, by the processor, that the response OTP satisfies the expected response OTP;
- and
- sending, by the processor, a result in response to the determining.
A computer-based system, comprising:
- a processor;
- and
- a tangible, non-transitory memory configured to communicate with the processor, the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising:
- transmitting, by the processor, a seed OTP to a user device;
- receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device;
- calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device;
- determining, by the processor, that the response OTP satisfies the expected response OTP;
- and
- sending, by the processor, a result in response to the determining.
An article of manufacture including a non-transitory, tangible computer readable storage medium having instructions stored thereon that, in response to execution by a processor, cause the processor to perform operations comprising:
- transmitting, by the processor, a seed OTP to a user device;
- receiving, by the processor, a response OTP generated by the user device, in response to an integrity module confirming that the user device is in good health based on the seed OTP being passed to a security utilities software development kit (SDK) on the user device;
- calculating, by the processor, an expected response OTP by applying a function to the seed OTP, wherein the function is based on an identifier of the user device and a fingerprint of the user device;
- determining, by the processor, that the response OTP satisfies the expected response OTP;
- and
- sending, by the processor, a result in response to the determining.
Dependencies are inferred from the claim text.