Method and system for generating one-time passwords

Device for one-time password generation, the one-time password being used for user authentication by a restricted resource, wherein the device is provided with a mathematical algorithm for generating one-time passwords, and wherein a one-time password is generated by the mathematical algorithm using at least one user-specific password generation parameter, wherein the device further is arranged to:

• transmit a request to a restricted resource, said request configured to cause said restricted resource to instigate the generation of said at least one user specific password generation parameter by a trusted entity;
• receive, in response to said request to the restricted resource, the at least one user-specific password generation parameter together with an identity of the associated restricted resource to which the password generation parameter makes authentication possible;
• use a first password generation parameter of said at least one password generation parameter to generate a one-time password for use in user authentication at a first restricted resource, and
• use a second password generation parameter of said at least one password generation parameter to generate a one-time password for use in user authentication at a second restricted resource, wherein the second restricted resource is different from the first restricted resource, and wherein the first and second password generation parameters are distinct.

System for one-time password generation, the one-time password being used for user authentication by a restricted resource, wherein the one-time password is generated by means of a mathematical algorithm in a user-specific device, and wherein the one-time password is generated by the mathematical algorithm using at least one user-specific password generation parameter, wherein the system comprises:

• a first trusted entity configured to, in response to a first request from a first restricted resource, generate a first password generation parameter and transmit said first password generation parameter to the user-specific device, the first password generation parameter configured for use by said user-specific device for the generation of one-time passwords to be used in user authentication at the first restricted resource, and
• a second trusted entity configured to, in response to a second request from a second restricted resource, generate a second password generation parameter and transmit said second password generation parameter to the user-specific device, the second password generation parameter configured for use by said user-specific device for the generation of one-time passwords to be used in user authentication by the second restricted resource,
• wherein:
• the second restricted resource is different from the first restricted resource;
• the first and second password generation parameters are distinct;
• and
• said first request is transmitted by said first restricted resource in response to a first access request received from the user specific device;
• and
• said second request is transmitted by said second restricted resource in response to a second access request received from said user specific device.