Patent ID: 8522024
Filing Date: 2013-08-27
Classification: H04L

Abstract:
1. An authentication method, wherein the method comprises receiving, by a server, transaction data and a first value entered by a user from a client, in which the first value is got according to a dynamic factor by a dynamic password token and the transaction data comprises a username; searching, by the server, for a seed of the dynamic password token corresponding to the transaction data, correcting the dynamic factor of the server according to the first value, generating a first dynamic password according to the corrected dynamic factor and the seed, and converting the first dynamic password to a first authentication password and a second authentication password according to a preset rule comprising taking data with preset length out from the first dynamic password, converting the taken data to letters and setting the letters to be the first authentication password, and setting the rest data of the first dynamic password to be the second authentication password; or taking, by the server, data with preset length out from the first dynamic password, setting the taken data to be the first authentication password, converting the rest part data of the first dynamic password to letters and setting the letters to be the second dynamic password; returning, by the server, authentication information to the client and the authentication information comprising a first authentication password; generating, by the dynamic password token, a second dynamic password according to the dynamic factor and the seed pre-stored in the dynamic password token, and converting the second dynamic password to a third authentication password and a fourth authentication password according to the preset rule comprising taking, by the dynamic password token, data with preset length out from the second dynamic password, converting the taken data to letters and setting the letters to be the third authentication password, and setting the rest data of the second dynamic password to be the fourth authentication password; or taking, by the dynamic password token, data with preset length out from the second dynamic password, setting the taken data to be the third authentication password, and converting the rest data of the second dynamic password to letters and setting the letters to be the fourth authentication password; confirming, by the client, that the server is legitimate after determining, by the user, that the first authentication password and the third authentication password are identical; and authenticating the client or executing transaction, by the server, according to the fourth authentication password and the second authentication password.