System, device, and method of generating and utilizing one-time passwords

A method comprising:

• (a) generating a particular one-time password (OTP) string that is based on one or more pre-defined OTP string construction rules,
• wherein the particular OTP string is not a purely-random string,
• wherein the particular OTP string provides to a behavioral monitoring unit a capability to extract user-specific behavioral typing patterns from a way in which a user types characters of said particular OTP via a keyboard of an electronic device;
• (b) sending said particular OTP string to a message-receiving device of said user, via an electronic message selected from the group consisting of:
• an electronic mail (email) message, a Short Message Service (SMS) text message;
• (c) monitoring user interactions of said user on said electronic device while said user enters data in response to a request to enter said particular OTP string;
• (d) extracting from said user interactions, that were performed while said user entered data in response to the request to enter said particular OTP string, a user-specific behavioral characteristic;
• (e) based on said user-specific behavioral characteristic, determining whether said user is authenticated or non-authenticated;
• wherein generating said particular OTP string comprises:
• intentionally and deterministically generating an OTP string that includes, anywhere in said OTP string, at least:
• a first character, followed immediately by a second character, followed immediately by a third character;
• wherein the second character is located, in a QWERTY keyboard, immediately neighboring to the first character and also immediately neighboring to the third character.

A system comprising:

• one or more processors to execute code,
• wherein the one or more processors are operably associated with one or more memory units to store code,
• wherein the one or more processors are configured to perform:
• (a) generating a particular one-time password (OTP) string that is based on one or more pre-defined OTP string construction rules,
• wherein the particular OTP string is not a purely-random string,
• wherein the particular OTP string provides to a behavioral monitoring unit a capability to extract user-specific behavioral typing patterns from a way in which a user types characters of said particular OTP via a keyboard of an electronic device;
• (b) sending said particular OTP string to a message-receiving device of said user, via an electronic message selected from the group consisting of:
• an electronic mail (email) message, a Short Message Service (SMS) text message;
• (c) monitoring user interactions of said user on said electronic device while said user enters data in response to a request to enter said particular OTP string;
• (d) extracting from said user interactions, that were performed while said user entered data in response to the request to enter said particular OTP string, a user-specific behavioral characteristic;
• (e) based on said user-specific behavioral characteristic, determining whether said user is authenticated or non-authenticated;
• wherein the determining of step (e) comprises:
• determining whether said user is authenticated or non-authenticated, based on whether (I) a freshly-calculated value of said user-specific behavioral characteristic, that was derived from the way in which said user entered said particular OTP string, matches (II) a class-wide reference value that had previously been calculated for a group of users based on data entry previously performed by said user, wherein said group of users includes said user.

A system comprising:

• one or more processors to execute code,
• wherein the one or more processors are operably associated with one or more memory units to store code,
• wherein the one or more processors are configured to perform:
• (a) generating a particular one-time password (OTP) string that is based on one or more pre-defined OTP string construction rules,
• wherein the particular OTP string is not a purely-random string,
• wherein the particular OTP string provides to a behavioral monitoring unit a capability to extract user-specific behavioral typing patterns from a way in which a user types characters of said particular OTP via a keyboard of an electronic device;
• (b) sending said particular OTP string to a message-receiving device of said user, via an electronic message selected from the group consisting of:
• an electronic mail (email) message, a Short Message Service (SMS) text message;
• (c) monitoring user interactions of said user on said electronic device while said user enters data in response to a request to enter said particular OTP string;
• (d) extracting from said user interactions, that were performed while said user entered data in response to the request to enter said particular OTP string, a user-specific behavioral characteristic;
• (e) based on said user-specific behavioral characteristic, determining whether said user is authenticated or non-authenticated;
• wherein the determining of step (e) comprises:
• determining whether said user is authenticated or non-authenticated, based on whether (I) a freshly-calculated value of said user-specific behavioral characteristic, that was derived from the way in which said user entered said particular OTP string, matches (II) a class-wide reference value that had previously been calculated for a group of users based on data entry previously performed by said user, wherein said group of users excludes said user.

A system comprising:

• one or more processors to execute code,
• wherein the one or more processors are operably associated with one or more memory units to store code,
• wherein the one or more processors are configured to perform:
• (a) generating a particular one-time password (OTP) string that is based on one or more pre-defined OTP string construction rules,
• wherein the particular OTP string is not a purely-random string,
• wherein the particular OTP string provides to a behavioral monitoring unit a capability to extract user-specific behavioral typing patterns from a way in which a user types characters of said particular OTP via a keyboard of an electronic device;
• (b) sending said particular OTP string to a message-receiving device of said user, via an electronic message selected from the group consisting of:
• an electronic mail (email) message, a Short Message Service (SMS) text message;
• (c) monitoring user interactions of said user on said electronic device while said user enters data in response to a request to enter said particular OTP string;
• (d) extracting from said user interactions, that were performed while said user entered data in response to the request to enter said particular OTP string, a user-specific behavioral characteristic;
• (e) based on said user-specific behavioral characteristic, determining whether said user is authenticated or non-authenticated;
• wherein generating said particular OTP string comprises:
• intentionally and deterministically generating an OTP string that includes, anywhere in said OTP string, at least:
• a first character, followed immediately by a second character, followed immediately by a third character;
• wherein the second character is located, in a QWERTY keyboard, immediately neighboring to the first character and also immediately neighboring to the third character.