One-Time Passcodes with Asymmetric Keys

A method comprising:

• generating, via a machine, a code that is valid temporarily, wherein the code is based on information associated with a user;
• and determining whether an attempted access is permitted, based on the code that is generated only after a valid authentication from a user selecting visual images displayed by this machine to the user.

A method comprising:

• generating, via a machine, a code that is valid temporarily, wherein the code is based on the time;
• and determining whether an attempted access is permitted, based on encrypting the code with a user key.

A system comprising at least one machine-readable medium storing instructions that cause one or more processors to perform a method including at least determining whether a submitted passcode is valid, by at least generating a generated passcode from a passcode generator and a key;

• comparing the submitted passcode to the generated passcode;
• if the submitted passcode matches the generated passcode granting access to a secure entity.

A system comprising at least one machine-readable medium storing instructions that cause one or more processors to perform a method including at least determining whether a submitted encrypted passcode is valid, by at least generating a generated passcode from the time and a key;

• decrypting the submitted passcode, and comparing the decrypted, submitted passcode to the generated passcode;
• if the decrypted, submitted passcode matches the generated passcode, then granting access to a secure entity.

A method comprising:

• generating a registration code using a Diffie-Hellman exchange wherein a user and an administrator that grants access to a secure entity both derive the same passcode generator from the registration code.

The claim of method 28 wherein said photodetector is made from a semiconductor.

A system comprising a machine-readable medium storing thereon instructions for an Application Program Interface (API) having an argument for a passcode generator, an administrator key and a user ID;

• wherein the passcode generator and administrator key are value derived from user information or random information;
• and
• wherein the passcode generator and administrator keys are values from which deriving the user information is expected to be intractable.

A system comprising a machine-readable medium storing thereon instructions for an Application Program Interface (API) having an argument for an administrator key and the time and a user ID;

• wherein the administrator key is a value derived from user information or random information or both;
• and wherein the administrator keys are values from which deriving the user information is expected to be intractable.