Patent ID: 8990906
Filing Date: 2015-03-24
Classification: G06F,H04L,H04W

Abstract:
1. A method for replacing a shared secret over a network comprising: receiving, by a communications device from an authorized user, a personal identification number and a request to generate a one-time password; storing the time and date of the request in the communications device; hashing the personal identification number; combining, by the communications device, the hashed personal identification number with a shared secret to generate a modified shared secret, the shared secret being stored in the communications device and in an authentication system; generating, by the communications device, a one-time password based on the request time and the modified shared secret; determining, by the communications device, that a security breach occurred when the request time precedes a previous request time stored in the communications device; determining, by the communications device, that due to the breach the shared secret for the authorized user is to be replaced; generating a new shared secret and an associated effective life for the authorized user; and replacing the shared secret and an associated effective life with the new shared secret and associated effective life in the communications device and in the authentication system.