摘要 |
Provided is a computer implemented method for mutual authentication, comprising the steps of: generating an OTP for server verification according to an OTP generation request for server verification by an authentication server; generating, by an OTP generator, a confirmation OPT having the same condition as the OTP for server verification in order to confirm the authenticity of an online service server, and generating, by the OTP generator, a user OTP having a value to be paired with the OTP for server verification by using the same generation key as the OTP generation key used to generate the OTP for server verification while applying a calculation condition different from the calculation condition used to generate the OTP for server verification or applying the same calculation condition as the calculation condition used to generate the OTP for server verification; and generating, by the authentication server, a corresponding OTP having the same condition as the user OTP, and performing, by the authentication server, authentication of a service user by comparing whether the generated corresponding OTP and the user OTP coincide with each other. |