Patent ID: 8424057
Filing Date: 2013-04-16
Classification: H04L,H04W

Abstract:
1. A method for inhibiting phishing, the method comprising: initially sending information from a mobile network device to a website server, wherein the information comprises a token formed from fingerprint information unique to the mobile device, and the information includes an initial seed that is used by both the mobile network device and the website server to separately compute an identical series of one time passwords, wherein the website server sets cookie information to facilitate identification of the mobile network device; generating a one time password at the mobile network device from the information; generating a one time password at the website server from the information; sending the one time password generated at the website server to the mobile network device when the mobile network device subsequently accesses the website server; comparing the one time password generated at the website server to the one time password generated at the mobile network device; if the one time password generated at the website server is the same as the one time password of the mobile network device, authorizing use of the website server; and handshaking continually between the mobile network device and the website server throughout a session, wherein the handshaking comprises periodically generating a new one time password by the website server and communicating the new one time password to the mobile network device, wherein the new one time password generated by the website server is received by the mobile network device and compared to a new one time password generated at the mobile network device.