Methods and systems for authenticating users over networks

摘要

A method for authenticating users over networks includes requesting a one-time password, entering a personal identification number into a communications device, and retrieving a replaceable shared secret stored in the communications device. Moreover, the method includes generating a hashed personal identification number from the entered personal identification number, combining the hashed personal identification number with the replaceable shared secret to generate a modified shared secret, and generating a one-time password with the modified shared secret and the time of requesting the one-time password.

主权项

1. A method for authenticating users comprising:
requesting a one-time password and determining a time the request was made; comparing the request time against a previous request time; when the request time is after the previous request time, entering a personal identification number into a communications device, the personal identification number being transmitted during an enrollment process from the device to an authentication system for storage therein; retrieving, by the communications device, a shared secret stored therein; generating a hashed personal identification number from the personal identification number; generating a modified shared secret; and generating a one-time password with the modified shared secret and the request time.