US 2017/0286957 A1 · Mutual Authentication of a User and Service Provider

Abstract

The present invention relates to a method and system for mutual authentication of a user and service provider, said method comprising acts of: authenticating an event by a key generation module (KGM), said event is generated on a computing device by a user, sending a shared secret of registered user for the event by an authentication server to the key generation module (KGM), generating one time key by the KGM for the event, transmitting the one time key by appending the shared secret to registered user mobile device, and performing at least one of: authenticating the user for said event by the KGM when a registered user enters the one-time key on the computing device within a predetermined time period, or terminating the event upon receipt of predefined key sequence from the mobile device.

Claims20

Dependent claims

A computer-implemented method for authentication of an event, the method comprising:

receiving, at a key generation module (KGM), a notification of an event generated at a computing device;
transmitting the notification of the event to an authentication server;
receiving, at the KGM, from the authentication server, a shared secret provided by a user previously registered for the event;
generating, by the KGM, a one-time key for the event;
appending the shared secret to the one-time key to generate an appended key;
causing the appended key to be transmitted to a mobile device associated with the user previously registered for the event;
and
authenticating the event in response to receiving a notification from the computing device within a predetermined time period indicating the one-time key was entered at the computing device.

5 more elements

Dependencies are inferred from the claim text.

Mutual Authentication of a User and Service Provider

Life of this patent

Mutual Authentication of a User and Service Provider

Life of this patent

Abstract

Claims20