Patent ID: 8909937

Claim:
An access control system, comprising: a handheld device is configured for storing a user identification; an access control server, is configured for: storing a user identification set, connecting to the handheld device within a first time interval, determining that the user identification of the handheld device is included in the user identification set, generating a one-time password (OTP) seed set, and transmitting the OTP seed set to the handheld device; and a terminal recording device is configured for: connecting to the handheld device within a second time interval, and performing a two-way identification certification with the handheld device according to the OTP seed set, enabling the handheld device for performing a data access to the terminal recording device after achieving the two-way identification certification, wherein the handheld device is further configured for: storing a first public key and a first private key, wherein the access control server is further configured for: storing a second public key and a second private key, wherein the terminal recording device is further configured for: storing a terminal key, and the OTP seed set comprises a first OTP seed set and a second OTP seed set; wherein the access control server and the terminal recording device are further configured for: storing a random numeric value and a separate time numeric value, said values are synchronized through a predefined remote connection between the access control server and the terminal recording device; and wherein the access control server is further configured for: storing the terminal key, determining that the user identification of the handheld device is included in the user identification set according to the first public key and the second private key, generating an environmental parameter according to the random value and the time numeric value, performing a one-way calculation on the environmental parameter and the user identification to generate the first OTP seed set, performing a one-way calculation on the environmental parameter and the terminal key to generate the second OTP seed set, and transmitting the first OTP seed set and the second OTP seed set to the handheld device.