Method and apparatus for verifying a person's identity or entitlement using one-time transaction codes

摘要

A method for verifying a person's identity is of the general type which comprises storing a personal pattern of a pre-determined number of locations on a grid in association with personal identification data, and subsequently using the pattern in a verification process. According to the invention, the subsequent verification process comprises the steps of: (a) presenting to the person a challenge grid of locations occupied by a pseudo-random set of symbols, and challenging the person to identify a response set of symbols occupying locations in the challenge grid corresponding to the stored personal pattern; (b) receiving from the person the response set; (c) generating from the challenge grid and the stored pattern a verification set of symbols occupying locations in the challenge grid corresponding to the stored personal pattern; (d) comparing the response set of symbols with the verification set of symbols; and (e) verifying the identity of the person if the response set is the same as the verification set.

主权项

1. A method for verifying an identity of a person, comprising a registration step of storing for the person in a verification device a personal pattern of a number of locations on a grid in association with personal identification data, anda subsequent verification step which comprises:
(a) presenting to the person, via a user terminal, a challenge grid of locations occupied by a pseudo-random set of symbols, wherein the challenge grid does not include transaction specific information, and challenging the person to: identify a response set of symbols occupying locations in the challenge grid corresponding to the stored personal pattern, and input to the user terminal the response set; (b) causing the user terminal to transmit to the verification device the response set of symbols and the challenge grid having an identifier for identifying the challenge grid; (c) receiving the response set and the challenge grid having the identifier in the verification device from the user terminal and causing the verification device to generate, upon receipt of the response set and the challenge grid having the identifier, a verification set of symbols by applying the stored personal pattern to the received challenge grid having the identifier, the verification set of symbols being those symbols occupying locations in the received challenge grid having the identifier corresponding to the stored personal pattern; (d) comparing the response set of symbols with the verification set of symbols; and (e) verifying the identity of the person by determining whether the response set of symbols is the same as the verification set of symbols.