Patent ID: 11966907
Assignee: YOONGNET INC.
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 3:
4. A mobile cross-authentication system comprising:
a computer terminal device comprising a computer terminal device processor and a computer terminal device memory storing computer terminal device instructions;
a portable terminal device comprising a portable terminal device processor and a portable terminal device memory storing portable terminal device instructions; and
an authentication server device comprising an authentication server device processor and an authentication server device memory storing authentication server device instructions, wherein:
the computer terminal device, the portable terminal device and the authentication server device are separated hardware devices that communicate with each other via a data communication network;
the computer terminal device processor, executing the computer terminal device instructions, causing the computer terminal device to determine that using a service requires an online authentication; and in response to the determination, to transmit an authentication request to the authentication server device;
the authentication server device processor, executing the authentication server device instructions, causing the authentication server device to receive, from the computer terminal device, the authentication request, and to request, from the computer terminal device, a user's portable terminal device identification information, wherein the user's portable terminal device identification information comprises a first telephone number of the portable terminal device;
the computer terminal device processor, executing the computer terminal device instructions, causing the computer terminal device to transmit, to the authentication server device, the telephone number of the portable terminal device, in response to the request for the portable terminal device identification information, received from the authentication server device;
the authentication server device processor, executing the authentication server device instructions, causing the authentication server device to receive, from the computer terminal device, the telephone number of the portable terminal device, to generate an online authentication code (Ocode) and a mobile authentication code (Mcode), to transmit the generated Ocode to the computer terminal device, and to transmit the generated Mcode to the portable terminal device by using the portable terminal device identification information, wherein the Ocode and the Mcode are one-time random authentication codes and configured to be deleted when the Ocode and the Mcode are unused within a predetermined time threshold;
the portable terminal device processor, executing the portable terminal device instructions, causing the portable terminal device to receive, from the authentication server device, the Mcode, and to display the received Mcode;
the computer terminal device processor, executing the computer terminal device instructions, causing the computer terminal device to receive, from the authentication server device, the Ocode, and to display the received Ocode;
the computer terminal device processor, executing the computer terminal device instructions, causing the computer terminal device to receive a user input of the Mcode displayed on the portable terminal device, and to transmit, to the authentication server device, the Mcode;
the portable terminal device processor, executing the portable terminal device instructions, causing the portable terminal device to receive a user input of the Ocode displayed on the computer terminal device, and to transmit, to the authentication server device, the Ocode;
the authentication server device processor, executing the authentication server device instructions, causing the authentication server device to:
receive, from the computer terminal device, the Mcode,
receive, from the portable terminal device, the Ocode,
in response to receiving the Ocode, obtain a portable terminal device number (Dev_no) by looking up and retrieving the Dev-no in a database of the authentication server device, wherein the portable terminal device number Dev_no comprises a second telephone number of the portable terminal device and further comprises any type of information that uniquely identifies the portable terminal device such as a device serial number, International Mobile Equipment Identity (IMEi), Mobile Equipment Identifier (MEID),
compare the Ocode received from the portable terminal device with the Ocode generated by the authentication server device,
compare the Mcode received from the computer terminal device with the Mcode generated by the authentication server device,
compare the second telephone number of Dev-_no with the first telephone number of the user's portable terminal device identification information,
generate an authentication result; therein the authentication result comprises a successful or failed authentication in response to the comparison of the Ocode, the Mcode, and the Dev_no; and
transmit the authentication result to the computer terminal device; and

the computer terminal device processor, executing the computer terminal device instructions, causing the computer terminal device to receive from the authentication server device, the authentication result, and to display the received authentication result.