Patent ID: 11966907
Assignee: YOONGNET INC.
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 2:
3. A mobile cross-authentication method performed by a computer terminal device comprising a computer terminal device processor and a computer terminal device memory storing computer terminal device instructions, a portable terminal device comprising a portable terminal device processor and a portable terminal device memory storing portable terminal device instructions, and an authentication server device comprising an authentication server device processor and an authentication server device memory storing authentication server device instructions, the method comprising:
transmitting, by the computer terminal device, to the authentication server device, an authentication request upon determining that using a service requires an online authentication;
receiving, by the authentication server device, from the computer terminal device, the authentication request;
requesting, by the authentication server device, to the computer terminal device, a user's portable terminal device identification information, wherein the user's portable terminal device identification information comprises a telephone number of the portable terminal device;
transmitting, by the computer terminal device, to the authentication server device, the portable terminal device identification information, in response to the request for the portable terminal device identification information, received from the authentication server device;
receiving, by the authentication server device, from the computer terminal device, the telephone number;
generating, by the authentication server device, an online authentication code (Ocode) and a mobile authentication code (Mcode), wherein the Ocode and the Mcode are one-time random authentication codes, wherein the Ocode and the Mcode expire within a predetermined time threshold if not used;
transmitting, by the authentication server device, the generated Ocode to the computer terminal device, and the generated Mcode to the portable terminal device by using the portable terminal device identification information;
receiving, by the portable terminal device, from the authentication server device, the Mcode; and displaying the received Mcode on a display of the portable terminal device;
receiving, by the computer terminal device, from the authentication server device, the Ocode; and displaying the received Ocode on a display of the computer terminal device;
receiving, by the computer terminal device, a user input of the Mcode displayed on the portable terminal device; and transmitting to the authentication server device the received Mcode;
receiving, by the portable terminal device, a user input of the Ocode displayed on the computer terminal device; and transmitting the received Ocode to the authentication server device;
receiving, by the authentication server device, from the computer terminal device, the Mcode; and receiving, from the portable terminal device, the Ocode;
looking up, by the authentication server device processor, a portable terminal device number (Dev_no) in a database of the authentication server device using the received Ocode, and retrieving the Dev_no from the database;
comparing, by the authentication server device, the Ocode received from the portable terminal device with the Ocode generated by the authentication server device;
comparing, by the authentication server device, the Mcode received from the computer terminal device with the Mcode generated by the authentication server device;
comparing, by the authentication server device, the received Dev_no with the received telephone number of the portable terminal device identification information;
generating, by the authentication server device, an authentication result, wherein the authentication result comprises a successful or failed authentication in response to the comparison of the Ocode, the Mcode, and the Dev_no;
transmitting, by the authentication server device, an authentication result that comprises the authentication success or the authentication fail to the computer terminal device; and
receiving, by the computer terminal device, from the authentication server device, the authentication result; and displaying the received authentication result.