Patent ID: 8752156
Filing Date: 2014-06-10
Classification: H04L,H04W

Abstract:
1. A method for detecting unauthorized copies of a soft token that runs on a mobile device, comprising: receiving, from a user, multiple authentication requests including token codes generated by the soft token; receiving, from the mobile device and in connection with the authentication requests, multiple samples of a set of random bits; generating multiple predicted samples of the set of random bits based on at least one sample of the set of random bits previously received from the mobile device; testing whether the received samples of the set of random bits match the predicted samples of the set of random bits; and identifying the use of an unauthorized soft token copy in response to the testing indicating that the received samples of the set of random bits do not match the predicted samples of the set of random bits, wherein each of the received samples conveys only partial information for identifying the set of random bits.