# US 8,543,829 B2 · Token device re-synchronization through a network solution > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,543,829 B2 - Document ID: US8543829B2 - Status: Granted - Kind: B2 - Application number: 11/620,321 - Filed: 2007-01-05 - Published: 2008-07-10 - Granted: 2013-09-24 - Earliest claimed: 2007-01-05 - Assignees: eBay Inc. - Applicants: Christopher Jurgen von Krogh - Inventors: Christopher Jurgen von Krogh - Web page: https://patentgrep.com/patent/US8543829B2 ## CPC - H04L 63/0838: {using one-time-passwords} - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/445: {by mutual authentication, e.g. between devices or programs} - H04L 9/0863: {involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067)} - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/102: {Entity profiles} - G06F 2221/2119: Authenticating web pages, e.g. with suspicious links - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 2209/56: Financial cryptography, e.g. electronic payment or e-cash - H04L 2209/80: Wireless - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system is illustrated as including a One-Time Password (OTP) device operatively coupled to a computer system to receive data, and a server operatively coupled to the computer system via a network connection. A method is illustrated as including initiating a transmission control protocol (TCP) and internet protocol (IP) connection, requesting a current time, receiving the current time, and updating a clock to reflect the current time. An apparatus including one or more processors to generate two or more clock values, pass these two or more clock values through a hashing function to generate two or more One Time Password (OTP) tokens, display these two or more OTP tokens on a screen, transmit data through a Universal Serial Bus (USB), and receive data through a Universal Serial Bus (USB). ## Claims ### Claim 1 A system comprising: a One-Time Password (OTP) device operatively coupled to a computer system to receive data from the computer system; and a server of a site being accessed by the computer system, the server of the site being operatively coupled to the computer system through a network connection, the OTP device generating a first OTP token value and a second OTP token value using a clock synchronized with a clock of an authentication server separate from the server of the site being accessed, the first OTP token value being used to verify, at the computer system, an OTP token value generated by the authentication server and received from the server of the site being accessed by comparing the first OTP token value to a series of OTP token values presented at the same time that are received from the server of the site being accessed for a matching OTP token value in the series, and the second OTP token value being sent to the server of the site for verification against a token of the authentication server in a two factor authentication process. ### Claim 2 (depends on 1) The system of claim 1, wherein the OTP device comprises a cell phone or a Personal Digital Assistant (PDA). ### Claim 3 (depends on 1) The system of claim 1, wherein the data is current time data. ### Claim 4 (depends on 1) The system of claim 1, wherein the OTP device is operatively coupled to the computer system via a Universal Serial Bus (USB). ### Claim 5 (depends on 4) The system of claim 4, wherein the USB transmits and receives data through a Blue Tooth connection. ### Claim 6 (depends on 1) The system of claim 1, wherein the server of the site being accessed is further to verify a login of a user associated with the computer system prior to sending the first OTP token value to the computer system for verification. ### Claim 7 A method comprising: receiving, at an authentication server, a request to get current time, the request received from a One-Time Password (OTP) device; and transmitting the current time of the authentication server, via a network connection, to the OTP device, the current time of the authentication server being used to synchronize a clock in the OTP device to reflect the current time of the authentication server, the synchronized clock in the OTP device being used to generate a first OTP token value and a second OTP token value, the first OTP token value being used to verify, at a computer system coupled to the OTP device, an OTP token value generated by the authentication server and received from a server of a site being accessed by the computer system associated with the OTP device by comparing the first OTP token value to a series of OTP token values presented at the same time that are received from the server of the site being accessed for a matching OTP token value in the series, and the second OTP token value being sent to the server of the site being accessed for verification in a two factor authentication process, the authentication server being different from the server of the site being accessed. ### Claim 8 (depends on 7) The method of claim 7, further comprising transmitting the current time to the OTP device using a Blue Tooth connection. ### Claim 9 (depends on 7) The method of claim 7, further comprising receiving via the network connection the current time request. ### Claim 10 (depends on 9) The method of claim 9, wherein the current time request is processed by a clock application. ### Claim 11 (depends on 9) The method of claim 9, further comprising receiving the current time at a second port. ### Claim 12 A non-transitory computer-readable medium having instructions stored thereon for causing a suitably programmed computer to execute a method, the instructions comprising: a first set of instructions to send a request relating to current time from a One-Time Password (OTP) device to an authentication server device; a second set of instructions to receive the current time at the OTP device; and a third set of instructions to synchronize a clock in the OTP device to reflect the current time of the authentication server device, the clock in the OTP device being used to generate a first OTP token value and a second OTP token value, the first OTP token value being used to verify, at a computer system coupled to the OTP device, an OTP token value generated by the authentication server and received from a server device of a site being accessed by the computer system associated with the OTP device by comparing the first OTP token value to a series of OTP token values presented at the same time that are received from the server of the site being accessed for a matching OTP token value in the series, and the second OTP token value being sent to the server device of the site being accessed for verification in a two factor authentication process, the authentication server device being different from the server device of the site being accessed. ### Claim 13 An apparatus comprising: one or more processors configured to: generate two or more clock values at a One-Time Password (OTP) device; pass the two or more clock values through a hashing function to generate two or more One Time Password (OTP) tokens; display the two or more OTP tokens on a screen, one of the two or more OTP tokens being used to verify, at a computer system coupled to the OTP device, an OTP token generated by the authentication server and received from a server of a site being accessed by the computer system associated with the OTP device by comparing a first OTP token to a series of OTP tokens presented at the same time that are received from the server of the site being accessed for a matching OTP token in the series and another of the two or more OTP tokens being sent to the server of the site for verification against a token received from an authentication server in a two factor authentication process, the authentication server being different from the server of the site being accessed; transmit data through a Universal Serial Bus (USB); and receive data through a Universal Serial Bus (USB). ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the one or more processors: transmit data through a Blue Tooth enabled transmitter; and receive data through a Blue Tooth enabled receiver. ### Claim 15 (depends on 13) The apparatus of claim 13, wherein the one or more processors receive electrical power through the USB. ### Claim 16 (depends on 13) The apparatus of claim 13, wherein the one or more processors control the recharging of one or more batteries. ### Claim 17 (depends on 13) The apparatus of claim 13, wherein the one or more processors control the use of one or more buttons used to obtain two or more OTP tokens. ### Claim 18 A method comprising: at a One-Time Password (OTP) device coupled to a computer system, initiating a transmission control protocol (TCP) and internet protocol (IP) connection; requesting a current time from a clock of an authentication server device; receiving the current time from the authentication server device; and synchronizing a clock in the OTP device to reflect the current time of the authentication server device, the clock in the OTP device being used to generate a first OTP token and a second OTP token, the first OTP token being used to verify, at the computer system, an OTP token generated by the authentication server and received from a server device of a site being accessed by the computer system, associated with the OTP device by comparing the first OTP token to a series of OTP tokens presented at the same time that are received from the server of the site being accessed for a matching OTP token in the series, and the second OTP token being sent to the server device of the site being accessed for verification in a two factor authentication process, the authentication server device being different from the server device of the site being accessed. ### Claim 19 (depends on 18) The method of claim 18, further comprising: sending the current time request to a specific port; receiving the current time request by a clock application; and transmitting the current time to a port. ### Claim 20 An apparatus comprising: at a One-Time Password (OTP) device couple to a computer system, means for initiating a transmission control protocol (TCP) and internet protocol (IP) connection; means for requesting a current time from a clock of an authentication server device; means for receiving the current time from the authentication server device; and means for synchronizing a clock in the OTP device to reflect the current time, the clock in the OTP device being used to generate a first OTP token and a second OTP token, the first OTP token being used to verify, at the computer system, an OTP token generated by the authentication server and received from a server device of a site being accessed by the computer system associated with the OTP device by comparing the first OTP token to a series of OTP tokens presented at the same time that are received from the server of the site being accessed for a matching OTP token value in the series, and the second OTP token being sent to the server device of the site being accessed for verification in a two factor authentication process, the authentication server device being different from the server device of the site being accessed.