One-time-password authentication method and device

A method for authenticating a dynamic password, wherein said method comprises the following steps:

• receiving, by a token server, a third cipher text, the second random number and the token serial number from the client, and decoding the third cipher text by using the token serial number and the second random number so as to obtain the dynamic password;
• and
• searching, by the token server, a corresponding torrent file according to the token serial number, and authenticating the dynamic password by using the found torrent file, if the dynamic password is authenticated successfully, sending information of authentication successful to the application server;
• otherwise, sending information of authentication unsuccessful to the application server.

A client, wherein said client comprises:

• a communication module configured to build NFC communication with the NFC dynamic token;
• a first obtaining module configured to obtain the token serial number of the NFC dynamic token;
• a second obtaining module configured to obtain the dynamic password from the NFC dynamic token;
• a storing module configured to save the second random number;
• an encryption module configured to encrypt the dynamic password by using the token serial number and the second random number so as to obtain a third cipher text;
• a sending module configured to send the third cipher text, the second random number and the token serial number to the token server;
• and
• a receiving module configured to receive the information of authenticating successful or the information of authenticating unsuccessful from the application server.

A token server, wherein said token server comprises:

• a receiving module configured to receive a third cipher text, a second random number and a token serial number from the client;
• a decoding module configured to decode the third cipher text by using the token serial number and the second random number so as to obtain the dynamic password;
• a searching module configured to search a corresponding torrent file according to the token serial number;
• an authenticating module is configured to authenticate the dynamic password by using the torrent file found by the searching module;
• and
• a sending module configured to send information of authenticating successful to the application server when the dynamic password is authenticated successfully by the authenticating module;
• or send information of authenticating unsuccessful to the application server when the dynamic password is authenticated unsuccessfully by the authenticating module.