AUTHENTICATION SYSTEM

摘要

A user having a computer hardware device can perform a secure transaction by entering on the device user data comprising unique knowledge of the user (such as a password) or biometric information of the user or both, generating with the device processor a pseudo random number, and generating a seed for a public/private key pair by combining the user data and the pseudo random number. The key pair is generated with the seed and transmitted to the server. Also a digital signature is created with the private key and the user data and also transmitted to the server. The digital signature is verified using the public key and if the user data matches previously stored user data, the transaction is allowed to proceed.

主权项

1. A method for a user having a computer hardware device, the hardware device comprising a processor and memory, to perform secure transactions using the device, the method comprising the steps of:
a. entering on the device user data comprising (i) unique knowledge of the user or (ii) biometric information of the user or both; b. generating with the device processor a pseudo random number; c. generating on the hardware device with the processor a seed for creating a public/private key pair by combining (i) the user data and (ii) the pseudo-random number; d. generating with the processor a public/private key pair with the seed; e. transmitting the public key and user data to the server; f. generating with the processor a digital signature with the private key and the user data; and g. transmitting to the server the digital signature.