ID authentication
AssigneeTechnology Business Management Limited
InventorDavid L. McNeight
Life of this patent
Estimating the term…
Abstract
A method for ID authentication, in which equipment involved in a transaction requests a password from a physically separate but limited-range communicating device, which automatically supplies a password in response to such request and communicates it to the equipment, the password is assessed as valid or invalid and the transaction approved or not accordingly.
Claims17
A method for ID authentication using communication equipment that requires entry of a password to authorise its use for carrying out a current transaction, in which the password is supplied by a limited-range communicating device separate from the communication equipment, the password being a one-time password generated by the communication equipment and transmitted to the device and stored thereon in a password memory during a previous transaction therewith, whereby the equipment generates the password using an algorithm unique to the equipment operating on a seed number incremented at each transaction, and in that, for the current transaction, the equipment checks the password supplied to it by the device by applying a reverse algorithm to generate the seed number used to create it, and wherein the password stored in the password memory on the device is overwritten by a new password generated by the equipment for use at the next succeeding transaction with the device.
Apparatus for carrying out a secure transaction using communication equipment that requires entry of a password to authorise its use for carrying out transactions, comprising:
- a limited-range communicating device separate from the communication equipment, having a memory for storing a password;
- one-time password generating means in the communication equipment and transmitter means for transmitting a password generated thereby to the device to be stored in said memory;
- stored password retrieving means in the communication equipment operative during a transaction to retrieve the stored password to validate the transaction;
- retrieved password validating means in the communication equipment;
- in which the password generating means uses an algorithm unique to the equipment operating on a seed number incremented at each transaction, and in that the password validating means checks a retrieved password by applying a reverse algorithm to generate the seed number used to create it, authorising the transaction if it does, and declining to authorise the transaction if it does not;
- and
- the password generating means being operative to generate a new password when a current transaction has been validated and transmit it to the device to overwrite the password stored therein for use at a next succeeding transaction with the device.
Dependencies are inferred from the claim text.