Patent ID: 8656459
Filing Date: 2014-02-18
Classification: H04L,H04W

Abstract:
1. A method for inhibiting phishing, the method comprising: sending information from a mobile network device to a website server, wherein the information comprises an initial seed that is used by both the mobile network device and the website server to separately compute an identical series of one time passwords, wherein the initial seed further comprises a token formed from fingerprint information unique to the mobile network device; generating a one time password at the mobile network device from the information; receiving, by the mobile network device, a one time password generated by the website server; comparing the one time password generated by the website server to the one time password generated at the mobile network device; if the one time password generated by the website server is identical to the one time password of the mobile network device, authenticating the website server; and handshaking continually between the mobile network device and the website server throughout a session, wherein the handshaking comprises periodically generating a new one time password by the website server and communicating the new one time password to the mobile network device, wherein the new one time password generated by the website server is received by the mobile network device and compared to a new one time password generated at the mobile network device.