Transaction-specific shared secret in one-time password device
OwnerKenneth Wade Reeseinventor
Life of this patent
Estimating the term…
Abstract
Embodiments are directed to generation and verification of one-time passwords. A one-time password is generated by an apparatus of an authenticating party in response to a one-time password production request. The one-time password is based on a secret value shared between the apparatus and a relying party. The shared secret value is based on a private key of the apparatus and on a public key of the relying party, and is unique to the relying party and to the production request.
Claims25
An apparatus for one-time password (OTP) transactions with a relying party, the apparatus comprising:
- a key pair manager to access a set of asymmetric cryptographic keys including a public key and a private key;
- a relying party interface to receive a public key of a first relying party;
- a shared secret generator to generate a first shared secret value based on the private key and on the public key of the first relying party in response to a first OTP production request;
- and
- an OTP sequence generator to generate a first OTP sequence based on the first shared secret value in response to the first OTP production request, wherein the first OTP sequence is unique to the first relying party and to the first OTP production request.
A machine-implemented method for one-time password (OTP) transactions with an authenticating party, the method being carried out by computing hardware of an OTP verifier device, the method comprising:
- generating a set of asymmetric cryptographic keys including a public key and a private key;
- sending a first OTP production request and the public key to the authenticating party;
- receiving a first OTP sequence from the authenticating party in response to the first OTP production request, the first OTP sequence being based on a first shared secret value, and being unique to the authenticating party and to the first OTP production request, wherein the first shared secret value is based on the public key and on a private key of the authenticating party;
- locally generating a verification copy of the first shared secret value based on the private key and on the public key of the authenticating party;
- locally generating a verification copy of the first OTP sequence based on the verification copy of the first shared secret value;
- comparing the first OTP sequence received in response to the first OTP production request against the verification copy of the first OTP sequence to produce a comparison result;
- and
- in response to the comparison result being a match, indicating successful verification of the first OTP sequence.
At least one machine-readable storage medium comprising instructions that, when executed on computing hardware of a one-time password presenter, cause the computing hardware to perform operations of:
- generating a set of asymmetric cryptographic keys including a public key and a private key;
- receiving a public key of a first relying party;
- generating a first shared secret value based on the private key and on the public key of the first relying party in response to a first OTP production request;
- and
- generating a first OTP sequence based on the first shared secret value in response to the first OTP production request, wherein the first OTP sequence is unique to the first relying party and to the first OTP production request.
Dependencies are inferred from the claim text.