Securing transactions against cyberattacks

A method of securing a transaction comprising:

• sending a registration code and a cryptographic key, from a user system to a service provider prior to sending a passcode, the user system having a processor system having at least one processor, a communications interface, and a memory system;
• generating the passcode from information about the transaction, at the user system;
• sending, by the user system, the passcode generated to the service provider, for authentication in conjunction with a request to perform the transaction;
• receiving at the user system from the service provider system, a response if the passcode is valid;
• receiving, at the user system from the service provider, encrypted transaction information;
• updating the passcode generator;
• decrypting the encrypted transaction information with the cryptographic key;
• computing a new transaction passcode with the passcode generator that was updated and the transaction information;
• comparing a one-time transaction passcode received and the new transaction passcode generated;
• comparing the transaction information received with stored transaction information;
• and
• if the one-time transaction passcode received and the new transaction passcode generated match and if the transaction information received matches stored transaction information, continuing the transaction.

A method comprising:

• receiving, at a user system, user information from the user to authenticate the user;
• sending, from a user system, a request to initiate a secure transaction with service provider system;
• receiving at the user system transaction information from the user;
• encrypting the transaction information with a first encryption key;
• storing in a secure memory of the user system the encrypted transaction information;
• the transaction information including a name of a sender, which is a person or entity sending the money, a name of a person or entity receiving the money, a date associated with the transaction, an account number of the sender, an account number of a receiver, the sender's routing number, the receiver's routing number, an identifier of a product traded, the number of units exchanged, a unit price, a name of a broker, and/or an amount of money associated with the transaction;
• applying, by a secure processor a hash function to a combination of a first passcode generator and the transaction information, therein generating a first one-time transaction-passcode that is based on both the transaction information and the first passcode generator;
• applying a function, at the user system, to the first passcode generator to a generate a second passcode generator, for use for creating a second one time transaction passcode;
• applying a function, at the user system, to the first encryption key to generate a second encryption key;
• transmitting the first one-time transaction passcode and encrypted transaction information from the sender to the receiver;
• receiving, at the user system from the receiver, the second one time transaction passcode and the transaction information encrypted with a second encryption key that was generated by the receiver;
• decrypting, at the user system, the message that was received from the receiver, with the second encryption key that was generated at the user system;
• applying, at the user system, the hash function to a combination of the transaction information and the second passcode generator to generate the second passcode;
• determining, at the user system, whether the second passcode received and the second passcode generated match;
• if the second passcode received and the second passcode generated do not match terminating the method;
• determining, at the user system, whether the transaction information sent and the transaction information received match;
• if the transaction information received and the transaction information sent do not match terminating the method;
• applying, at the user system a function to a combination of the second passcode generator and the transaction information to generate a third transaction passcode;
• applying, at the user system a function to the second encryption key to generate a third encryption key;
• encrypting, at the user system, the transaction information with the third encryption key;
• transmitting from the user system to the receiver the transaction information encrypted with the third encryption key and the third transaction passcode;
• the secure memory and the secure processor being located in a secure area of the user system;
• the user system processor system and memory system that is not in the secure area, which have not access to the secure area.

A method comprising:

• at a service provider system, receiving a request to perform a secure transaction including at least a first one-time transaction passcode and encrypted transaction information that was encrypted with a first encryption key;
• decrypting, at the service provider, the transaction information;
• applying a hash function to a combination of the transaction information and a first passcode generator to generate the first one-time passcode;
• Comparing, by the service provider system, the first one-time passcode received to the first one-time passcode generated;
• if the first one-time passcode received and the first one-time passcode generated do not match, the service provider system terminating the method;
• if the first one-time passcode received and first one-time passcode generated match, then applying, by the service provider system, a hash function to the first passcode generator to generate a second passcode generator;
• applying, by the service provider system, a hash function to a combination of the second passcode generator and the transaction information received to produce a second one-time transaction-passcode;
• applying a function, by the service provider system, to the first encryption key to generate a second encryption key;
• encrypting, by the service provider system, the transaction information with the second encryption key;
• transmitting from the service provider system to the user, the second onetime transaction passcode and the encrypted transaction information that was encrypted with the second encryption key;
• receiving, at the service provider, a third one time transaction passcode and the encrypted information encrypted with a third encryption key;
• applying, by the service provider system, a function to the second encryption key to generate the third encryption key;
• decrypting the encrypted transaction information that was encrypted with the third encryption key;
• applying, by the service provider system, a function to the second passcode generator to generate the third passcode generator;
• applying, by the service provider system, a function to a combination of the third passcode generator and the transaction information to generate the third one-time passcode;
• comparing, by the service provider system, the third one-time transaction passcode received to the third one-time passcode generated and the transaction information encrypted with the third encryption key that was received to the transaction information;
• if the third one-time transaction passcode received does not match the third one-time passcode generated terminating the method;
• if the transaction information encrypted with the third encryption key that was received does not match the transaction information stored, terminating the method;
• if the third one-time transaction passcode received matches the third one-time passcode generated and if the transaction information encrypted with the third encryption key that was received matches the transaction information stored, completing the transaction.

A method of securing a transaction comprising:

• generating a first passcode from information about the transaction, at a user device, the user device having a processor system having at least one processor, a communications interface, and a memory system;
• sending, by the user device, the first passcode generated to a service provider system, for authentication in conjunction with a request to perform the transaction, the request including a first encryption of transaction information from which the first passcode was generated;
• and
• receiving at the user device from the service provider system, a second passcode generated from the transaction information with a second encryption of transaction information from which the second passcode was generated, if the first passcode is valid;
• and
• sending, by the user device to the service provider system, a third passcode generated, by the user device, from the transaction information if the second passcode is valid, the third passcode being sent with a third encryption of transaction information from which the third passcode was generated.

A method of securing a transaction comprising:

• generating a passcode from information about the transaction with a passcode generator, at a user system, the user system having a processor system having at least one processor, a communications interface, and a memory system;
• sending, by the user system, the passcode generated to a service provider system, for authentication in conjunction with a request to perform the transaction;
• receiving, at the user system from the service provider system, a response if the passcode is valid;
• wherein the transaction information includes at least information that is necessary for the transaction other than verification information and other than user identification information;
• sending a registration code and a cryptographic key to the service provider system prior to sending the passcode;
• receiving, at the user system from the service provider system, encrypted transaction information;
• updating the passcode generator;
• decrypting the encrypted transaction information with the cryptographic key;
• computing a new transaction passcode with the updated passcode generator and the decrypted transaction information;
• comparing a one-time transaction passcode received and the new transaction passcode generated;
• comparing the transaction information received with stored transaction information;
• and
• if the one-time transaction passcode received and the new transaction passcode generated match and if the transaction information received matches stored transaction information, continuing the transaction.