US 2014/0237552 A1Published application

Authenticating medium, authenticating terminal, authenticating server, and method for authentication by using same

OwnerSeung Hun YOOinventor

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention relates to an authenticating medium, an authenticating terminal, an authenticating server, and a method for authentication by using same. According to the present invention, an operating code for creating an authentication requesting code is periodically updated, and thus the authentication requesting code is also periodically changed. Thus, even if the authentication requesting code or the operating code exchanged through networks is leaked to other users, the security of an account may be maintained, and thus the security may be enhanced. In addition, even if users do not remember authentication codes for granting authorization, the codes recorded in an authentication medium are periodically updated and automatically authenticated, and which may prevent damages that may occur when users forget the authentication codes or the authentication codes are set using numbers that are easy to memorize.

Claims14

Dependent claims

An authentication server for exchanging data with a plurality of terminals over a network and authenticating a right to access an account in response to a request from the terminal, the authentication server comprising:

an authentication unit for computing an authentication code using a predetermined function using one or more operation codes recorded on an operation code list as independent variables when an authentication request for a specific account is received from the terminal, comparing the computed authentication code with an authentication request code included in an authentication request received from the terminal, and authenticating a right to access the specific account only if the computed authentication code is identical to an authentication request code;
a code generation unit for generating one or more new operation codes whenever the authentication unit performs a predetermined number of authentications on the specific account and sending the one or more new operation codes to the terminal that has requested the authentication;
and
a code management unit for recording the generated operation codes on an operation code list of the corresponding account when the new operation codes are generated by the code generation unit and selectively deleting at least some of existing operation codes if necessary;
wherein the code management unit matches the operation codes, included in the operation code list, with the respective independent variables included in the function, assigns a predetermined sequential position to each of the independent variables, and sequentially matches the operation codes with the respective independent variables according to a predetermined sequence whenever a new operation code is generated.

2 more elements

An authentication method in a system including an authentication medium for storing data required for authentication, a terminal for requesting authentication using an authentication request code generated based on the data stored in the authentication medium, and an authentication server for comparing the authentication request code with an authentication code in response to the request from the terminal and selectively performing an authentication procedure, the authentication method comprising:

(A) generating, by the authentication medium or the terminal, the authentication request code using a predetermined first function using operation codes included in a first operation code list stored in the authentication medium as independent variables;
(B) sending, by the terminal, an authentication request, including the authentication request code, to the authentication server;
(C) comparing, by the authentication server that has received the authentication request, an authentication code, generated using a second function identical to the first function and using operation codes included in a second operation code list stored in the authentication server as independent variables, with the authentication request code and selectively performing the authentication;
(D) generating, by the authentication server, a new operation code if the authentication is successful in the authentication server, sending the new operation code to the terminal, recording an operation code identical to the new operation code transmitted by the terminal in the second operation code list in a time sequence in which the new operation code was generated, and simultaneously deleting an oldest operation code from the second operation code list;
and
(E) transferring, by the terminal that has received the new operation code from the authentication server, the received new operation code to the authentication medium, recording, by the terminal or the authentication medium, the new operation code in the first operation code list in a time sequence in which the new operation code was received, and selectively deleting at least some of existing operation codes from the first operation code list if necessary.

3 more elements

Dependencies are inferred from the claim text.