| 摘要 |
PROBLEM TO BE SOLVED: To provide a solution that realizes an authentication system to allow mistyped passwords.SOLUTION: A user inputs S31 a password at a user device, whose processor receives S31 the password, retrieves a stored derived value S33 derived from a derivation function, preferably a cryptographic one-way function, applied to a reference password, scrambles S35 the received password using a function taking the derived value as a variable to obtain a scrambled password, and sends S36 the scrambled password to an authentication server. In the case where the stored derived value cannot be retrieved, the processor uses the derivation function to generate S34 a derived value from the received password. In the case where the password is received during generation of a new password, the processor generates and stores a derived value from the new password. The apparatus comprises the authentication server. |
