Patent ID: 8850540

Claim:
A method for verifying a dynamic password, comprising: generating, by a mobile device, an initial code according to token software, and transmitting the initial code to a verification server through a web page; after the initial code passes verification, generating, by the mobile device, a Diffie-Hellman (DH) key of the mobile device according to a Diffie-Hellman private key of the mobile device and by using a Diffie-Hellman algorithm, generating a token seed according to the Diffie-Hellman key of the mobile device and by using a Hash algorithm, generating a current dynamic password by performing preset algorithm processing for the token seed and current time, and transmitting the current dynamic password to the verification server through a web page; generating, by the verification server, a dynamic password of the verification server according to the received initial code and by using the same Diffie-Hellman algorithm as that used by the mobile device; and comparing, by the verification server, the dynamic password of the verification server with the dynamic password generated by the mobile device, and verifying whether the dynamic password generated by the mobile device is correct.