Patent ID: 11888844
Assignee: SECUVE CO., LTD.
Field: IT methods for management (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A method for user authentication and identity theft prevention using a one-time random key, comprising:
a user authentication message sending procedure in which, when a user authentication server including a processor receives, via a network, a notification that user authentication information matches user information in a legacy authentication system from the legacy authentication system, the processor of the user authentication server creates an authentication key by using a plurality of one-time random keys including a selected one-time random key, in response to a request for user authentication and sends a user authentication message including the created authentication key, via the network, to a user terminal;
an authentication-related value sending procedure in which the user terminal including a processor receives, via the network, the user authentication message, the processor of the user terminal creates an authentication-related value by performing a first XOR operation on the authentication key and a security key comprising the plurality of one-time random keys including the selected one-time random key, and sends the authentication-related value, via the network, to the user authentication server; and
a user authentication procedure in which the processor of the user authentication server creates a verification key by performing a second XOR operation on the plurality of one-time random keys except the selected one-time random key, and verifies whether the created verification key is identical to the authentication key, wherein the network includes at least one of a cellular network, a Wi-Fi network, a Wide Area Network (WAN), and a Local Area Network (LAN).