| 摘要 |
A method for authenticating a user through a GOTP is provided to protect image arrangement of a GOTP(Graphic One-Time Password) from network hooking, phishing, and pharming by separately transmitting a sync code and the images for selecting an arrangement function for arranging the images, and arranging the images with the selected arrangement function in a user terminal. A sync code for arranging an image group stored by a user is generated(S241). The sync code and the image group are transmitted to a user terminal(S242). Deviation of a first coordinate moving value is calculated in an image screen arranged by using the sync code and the image group(S243). Deviation of a second coordinate moving value received from the user terminal is received. The user is authenticated by comparing the deviation of the first coordinate moving value with the deviation of the second coordinate moving value(S244). The sync code selects the arrangement function stored in the user terminal and is generated according to time requesting generation of the sync code. The image group includes more than one personal key image, a hole image for moving the personal key image, and a background image.
|
