One-Time Passcodes with Asymmetric Keys

摘要

Protecting the security of an entity by using passcodes is disclosed. A user's passcode device generates a passcode. In an embodiment, the passcode is generated in response to receipt of user information. The passcode is received by another system, which authenticates the passcode by at least generating a passcode from a passcode generator, and comparing the generated passcode with the received passcode. The passcode is temporary. At a later use a different passcode is generated from a different passcode generator. In these embodiments, there are asymmetric secrets stored on the passcode device and by the administrator. This adds more security so that if the backend servers are breached, the adversary cannot generate valid passcodes. In some embodiments, the passcode depends on the rounded time.

主权项

1. A method comprising enrolling a user based on at least one of the following: his or her biometric prints, his or her selection of visual images or his or her selection of a PIN; and at the completion of this enrollment generating asymmetric secrets based on a semiconductor that detects the arrival of photons.