摘要 |
A system and a method for providing an OTP by using an interrogator are provided to authenticate a user of an OTP device, and keep security even if the OTP of the user is lost or stolen. An authentication server(1) stores a fixed key of the user, a personal inquiry function generating a one-time inquiry for checking whether the user knows the fixed key, and a right response value for the one-time inquiry. The authentication server processes an authentication result by comparing the response value received from the user with the stored response value. An inquiry terminal(5) includes the same inquiry function as the personal inquiry function of the server. The fixed key of the user is set to an image. The inquiry function matches each image with a predetermined number. The response value is the number corresponding to the image matched with the fixed key. The inquiry terminal displays all images and the numbers matched with each image.
|