Patent ID: 8869238

Claim:
A method for authenticating a transaction between a user system and a host system, the method comprising: sending, from the host system to the user system, a first text-reading test (TRT) image, the first TRT image comprising user system information as understood by the host system; receiving, from the user system, confirmation of whether the user system information matches actual user system information; terminating a session between the user system and the host system when the user system information as understood by the host system does not match the actual user system information; allowing the session to proceed when the user system information as understood by the host system matches the actual user system information, comprising; receiving, from the user system, information associated with the transaction; generating a time-limited one-time password (OTP) using the host system; processing the information associated with the transaction using the host system to transform the information into a second TRT image containing the OTP and details of the transaction, such that the OTP and the details are both embedded in the second TRT image as distorted text; sending, from the host system to the user system, the second TRT image in a format that is viewable by the user on the user system; receiving, from the user system, input verifying the OTP and the details in the second TRT image; and automatically authenticating the transaction using the host system based on the input from the user system.