Patent ID: 9002750
Filing Date: 2015-04-07
Classification: G06F,G06Q,H04L,H04W

Abstract:
1. A computer-implemented method for secure user authentication using a one-time password, comprising: storing, on a first computing device, a one-time password application; storing on a back-end server a valid personal identification number (PIN) value and a valid shared secret for the user; receiving entry on the first computing device of a purported PIN value of the user; dynamically synthesizing a purported shared secret on the first computing device by the one-time password application using the purported PIN value of the user, wherein no part of the valid PIN value is stored on the first computing device; generating a purported one-time password value on the first computing device based on the purported shared secret; receiving entry of the purported one-time password value by the back-end server in an attempt to log on the back-end server from a second computing device; calculating a time frame window of one-time password values by the back-end server and comparing with the one-time password value received; and allowing log on to the back-end server from the second computing device when a one-time password value in the window corresponds to the received one-time password value.