175 results about "One-time password" patented technology

The invention provides a method and system for preventing identity spoofing during digital authentication processes using artificial intelligence (AI)-driven pattern recognition. The system receives an input data stream from a user attempting to authenticate, which may include biometric data, device behavior data, or user interaction data. An AI-based pattern recognition model processes this data to analyze user behavior patterns and detect any anomalies that may indicate potential spoofing attempts. The system compares the processed data against a pre-established user profile to generate an authentication decision. If anomalies are detected, the system can flag the authentication for further review or trigger additional verification steps, such as multi-factor authentication (MFA) or one-time password (OTP) prompts. The system continuously learns from user interaction data and dynamically updates the user profile to improve the accuracy of identity verification.

The invention discloses a self-service printing method based on an Internet of Things cloud platform, and the method comprises the following steps: user identity authentication and dynamic authorization: enabling a user to use a dynamic two-dimensional code or a one-time password to complete identity authentication and printing authority distribution through the Internet of Things cloud platform; lightweight cloudization of the printing task: user equipment fragments and compresses a file, and only uploads an encryption task description containing printing parameters to a cloud platform; cloud platform task scheduling: the cloud platform detects the state of the Internet of Things printing device in real time, and distributes the printing task to the optimal device according to the device load and the geographic position; distributed data transmission and edge analysis: the cloud platform transmits task fragments to an edge node through an Internet of Things protocol, and the edge device completes file recombination and analysis; by introducing a zero-knowledge encryption technology, edge calculation and dynamic task scheduling, the problems of insufficient data privacy protection, low efficiency, poor security, resource waste and the like in the prior art are solved.

An embodiment includes receiving, from a device, at an authentication service, a dynamic user identifier having a one-time password in an authentication message constructed to carry the dynamic user identifier in place of a pre-determined user identifier of a user. The embodiment locates in a profiles database, using a customized search query with a code based on the dynamic user identifier, a user profile. The embodiment receives at the authentication service, a secondary identification data of the user including a biometric information of the user. The embodiment validates the biometric information using the user profile and enables, when the validating is successful, the device to perform an operation. The enabling is not based on the authentication service validating an entirely static user identifier and is not based on the authentication service validating a manually typed password.

The described embodiments set forth techniques for transferring cellular wireless service from a source wireless device to a target wireless device with multi-factor authentication and consent of a mobile network operator (MNO) account owner of a multi-user MNO account that includes one or more MNO account members. Terms and conditions for transfer of the cellular wireless service can be presented via a native operating system user interface of a wireless device of the MNO account owner. When the target wireless device belongs to an MNO account member, the MNO account owner wireless device facilitates transfer of the cellular wireless service by allowing the MNO account owner to review terms and conditions and provide one-time passcode authentication to the target wireless device. An original equipment manufacturer (OEM) cloud network service can be used for transfer of terms and conditions information and / or the one-time passcode.

The disclosed systems and methods are directed to an implementation of time-based authentication with a contactless card based on remotely provisioned timing data. In one described implementation the timing information is provided by an external agent such as a client device and / or a remote verification server associated with the user account. The timing information is then incorporated into a cryptogram generation process executing on the contactless card, resulting in creation of an encrypted time-based token. The authentication request message that includes the time-based authentication token, may be further supplemented by the inclusion of the timing information separately encoded using, for example, public key cryptography. This modification of the authentication request message generated by the contactless card, enables an additional time-based filtering mechanism that may be performed by a third-party client device.

A computer implemented method, device and computer program device are provided including a processor; a storage medium to store a user defined password (UDP) factor and program instructions accessible by the processor; wherein, responsive to execution of the program instructions, the processor to: generate a first machine generated indicia (MGI) code indicative of the UDP factor; and generate a second MGI code indicative of a time-based one-time password (TOTP) factor; and a display to display the first and second MGI codes during an authentication operation.

A third verification factor is introduced into the two-factor authentication process, thereby establishing a robust three-factor authentication system. Specifically, a One-Time Password (OTP) that is typically generated for authentication purposes undergoes an additional layer of security by utilizing the OTP in a data authentication scheme of a user's chip-enabled credit, debit, banking, or similar card. An enhanced OTP generator sends the OTP to the card, which encrypts either the OTP or a value derived from the OTP (e.g., such as a hash of the OTP) with a cryptographic key associated with the card to create an encrypted authentication token. The encrypted authentication token is then provided to the authenticating party. Also described is an enhanced OTP generation device in the form of a passbook.

A method, apparatus, system, and non-transitory computer readable medium for performing user verification and authentication may include receiving a network request from a client device associated with an online service in response to a user access attempt of the online service associated with a user, the network request including message recipient information for a mobile-terminated (MT) short message service (SMS) message and a unique one-time password or pin (OTP) code associated with the user, calculating at least one first signature based on the network request and a shared secret key, the shared secret key shared with the client device, the at least one first signature associated with the user, transmitting a network response to the client device, the network response causing the client device to transmit a call-to-action (CTA) message to at least one user device associated with the user, and determining a status of the user access attempt.

A data monitoring system comprising a server communicatively coupled to a client device and a data module via a network. The server is configured to store a private key of a public-private key pair associated with the data module, receive a request from the client device for authenticated access to the data module, and generate an authentication key based at least on the private key and a time. The client device is configured to generate the request for authenticated access to the data module and transmit the request to the server. The data module is configured to store the private key of the public-private key pair associated with the data module, generate the authentication key based at least on the private key and the time, and grant access to the data module if the authentication key generated by the data module and the authentication key generated by the server match.

The invention discloses a mobile application program authority management method and system. The method comprises the following steps: receiving login information uploaded by a user through a mobile terminal, an equipment identifier of the mobile terminal and a timestamp when the user inputs the login information; verifying the integrity of the login information, and if the verification is passed, generating a first dynamic token based on the received data; encrypting the first dynamic token to form a one-time password token and sending the one-time password token to the mobile terminal, wherein the mobile terminal generates a second dynamic token according to the one-time password token; performing matching verification on the first dynamic token and the second dynamic token; receiving an operation instruction uploaded by the user through the mobile terminal, performing secondary identity verification on the user based on the operation instruction, and determining the authority of the user; and performing data transmission between the mobile terminal and the server or executing corresponding operation according to the authority of the user. According to the invention, the accuracy and security of identity verification are effectively improved, and the privacy leakage and abuse of the user are prevented.

An unclonable electronic device for providing a unique identifier or authenticity certificate wherein the prototype of the unclonable electronic device comprises: an ESP32 or ESP32 compatible microcontroller, having a unique chip identifier, built-in WiFi and Bluetooth functions; and a thin film transistor display having a resolution of at least 240 * 240 pixels. When a customer scans an unclonable electronic device to be validated, the server receives a message to be validated. The server generates a one-time password according to the identification of the chip of the unclonable electronic device to be verified. The server verifies whether the one-time password is consistent with the one-time password in the unique identifier or the authenticity certificate; if yes, verification succeeds; if not, verification fails, and a warning message is sent to the code scanning device.

Systems, methods, apparatuses, and computer-readable media for secure generation of one-time passcodes using a contactless card. In one example, an operating system (OS) of a device may receive a uniform resource locator (URL) and a cryptogram from a contactless card. The OS may launch an application associated with the URL. The application may transmit the cryptogram to an authentication server. The application may receive a decryption result from the authentication server indicating the authentication server decrypted the cryptogram. Based on the decryption result, the application may request an OTP. The processor may receive an OTP from an OTP generator. The application may receive an input value and compare the input value to a copy of the OTP. The application may determine that the comparison results in a match, and display, based on the determination that the comparison results in the match, one or more attributes of the account.

A method of utilizing a SIM card as a security key for subscriber identity module (SIM) swap prevention is described. The method includes receiving, from a service provider, an initial one-time password (OTP) delivery request comprising an OTP message, a mobile station international subscriber directory number (MSISDN) destined to receive the OTP message, and a SIM indicator associated with the MSISDN; determining, based on the OTP delivery request, a current international mobile subscriber identity (IMSI) associated with the MSISDN; obtaining, from a datastore based on the SIM indicator associated with the MSISDN, an IMSI of record for the MSISDN; comparing the current IMSI associated with the MSISDN and the IMSI of record for the MSISDN; and determining, based on the comparing, whether to deliver the OTP message to the MSISDN or block delivery of the OTP message to the MSISDN.

To provide a supply system that can provide an absorbent article without a registration operation of user information.SOLUTION: A supply system 100 includes a dispenser 5 for an absorbent article A and controllers (processors 11, 51) that control the discharge from the dispenser. The dispenser includes a discharge mechanism that discharges the absorbent article stored therein. The controller is configured to: generate a two-dimensional code including a one-time password generated on the basis of time at a predetermined timing and access information, and cause it to be displayed on a surface of the dispenser (S1); determine whether or not the absorbent article can be provided in response to access from a user terminal that reads the two-dimensional code (S2-1 to 5); and cause a discharge operation to be performed when the determination is affirmative (S6). The determination thereof includes determining whether or not the one-time password included in the access from the user terminal is within a valid period based on a timing of receiving the access from the user terminal.SELECTED DRAWING: Figure 1

A system and method for one time password (OTP) channel optimization is provided. The method includes: for each of a plurality of optimization criteria, and based on at least one attribute of a plurality of OTP channels, ascertaining a recommendation of the OTP channels, thereby ascertaining a plurality of recommendations for the plurality of optimization criteria respectively; in response to a verification request comprising an end user identifier, and based on at least one attribute of the end user identifier, selectively providing a first recommendation wherein the recommendations include the first recommendation; in response to a selected first OTP channel which is included in the first recommendation, instructing for a first OTP to be provided via the first OTP channel to a first device associated with the end user identifier wherein the OTP channels include the first OTP channel; and validating a first OTP entry against the first OTP.

An embodiment includes receiving, from a device, at an authentication service, a dynamic user identifier having a one-time password in an authentication message constructed to carry the dynamic user identifier in place of a pre-determined user identifier of a user. The embodiment locates in a profiles database, using a customized search query with a code based on the dynamic user identifier, a user profile. The embodiment receives at the authentication service, a secondary identification data of the user including a biometric information of the user. The embodiment validates the biometric information using the user profile and enables, when the validating is successful, the device to perform an operation. The enabling is not based on the authentication service validating an entirely static user identifier and is not based on the authentication service validating a manually typed password.

Aspects of the disclosure relate to multi-factor user authentication for card-based payment transactions using blockchain tokens. An computing platform may receive, from a computing device, transaction details associated with a card-based payment transaction corresponding to a user, wherein the transaction details comprise a card number of a payment card. The computing platform may determine, based on the card number, a user device associated with the user. The computing platform may send, to the user device, a one-time passcode (OTP). After sending the OTP, the computing platform may receive a security key. The security key may be generated based on the sent OTP and a blockchain token hash. The computing platform may, based on the received security key, send, to the computing device, a message indicating whether the transaction is approved or declined.

An embodiment includes receiving, from a device, at an authentication service, a dynamic user identifier having a one-time password in an authentication message constructed to carry the dynamic user identifier in place of a pre-determined user identifier of a user. The embodiment locates in a profiles database, using a customized search query with a code based on the dynamic user identifier, a user profile. The embodiment receives at the authentication service, a secondary identification data of the user including a biometric information of the user. The embodiment validates the biometric information using the user profile and enables, when the validating is successful, the device to perform an operation. The enabling is not based on the authentication service validating an entirely static user identifier and is not based on the authentication service validating a manually typed password.

A control system, a management method, and a management program for autonomous driving capable of reliably performing a safety check on a surrounding of an autonomous driving vehicle and reducing a risk of collision during a startup due to a check omission. Whether a safety check is performed is grasped using an in-vehicle camera that monitors a surrounding of a vehicle, a QR code (registered trademark) set at the surrounding of the vehicle, or a one-time password, and an erroneous vehicle is not subjected to a startup by using a check result in response to an instruction to start an autonomous driving by an on-site manager. Further, a range in which the autonomous driving or the remote control operation is permitted is set according to a range in which the check is performed. Accordingly, a risk of collision during a startup of the autonomous driving vehicle is reduced.

Authentication codes (e.g., a One Time Passwords) are used in various ways to provide enhanced authentication. For example, multiple authentication codes may be sent to different users in order to provide access to a first user. In addition to sending authentication codes, multiple users may have to provide authentication credentials (e.g., a username / password) in order for a first user to access a resource, such as a bank account. The use of authentication codes may be applied to communication sessions, such as voice and video communication sessions. In addition, the authentication codes may be used to approve an incoming communication, such as and incoming email.

Embodiments are directed to systems and techniques to perform authentication operations in a call center computing environment with transcoded encrypted data.

The present invention proposes a dynamic certificate update method and system, applied to an authentication server, comprising: generating a secret seed for the user and encrypting and storing it; pre-installing the secret seed in a physical token; generating a unique identifier for the user during registration and associating it with the secret seed; when the user requests the issuance or renewal of a digital certificate, generating a one-time password and a VDF result based on the current time and the secret seed using the physical token; receiving the one-time password and VDF result, and verifying the validity of the one-time secret based on the secret seed and the current time, while also verifying the VDF result to ensure time synchronization; if the verification is successful, issuing or updating the digital certificate for the user, and dynamically updating the permission information in the digital certificate based on fuzzy logic. By introducing a secret seed, combining the one-time password with the VDF result for verification, and updating permissions based on fuzzy logic, the present invention effectively meets the high requirements for identity authentication and data encryption in today's complex and ever-changing network environments.

Example embodiments provide systems and methods for validating an action using a physical token, such as a near-field-communications (NFC)-capable chip. A server may receive a request to perform the action, and may require validation from the holder of the physical token. The holder of the physical token may log into an application using their login credentials, providing a first tier of authentication. The holder may then scan the physical token with a reader on their mobile device, which provides a second tier of authentication. The scan may reveal a value for a counter on the physical token, which may be compared to a counter at the server in order to validate that the physical token has been used as expected. If the server deems it appropriate, a third (or further) tier may be required, such as scanning a photographic identification of the holder.

Systems and methods for authenticating user identity using custom visual code is disclosed. One disclosed method includes determining user identification information based on received biometric data; generating a temporary one-time password; encrypting the user identification information and the temporary one-time password; and generating a visual code based in part on the encrypted temporary one-time password and user identification information. The method may further include generating a prompt requesting a passcode or biometric data when a user device is within a predetermined threshold range of an authenticating device.

Methods, systems, and computer storage media for providing a cross-domain secure authentication engine in an item listing system are described. The cross-domain secure authentication engine is an advanced, modular system designed to handle user authentication seamlessly across different service domains, while ensuring security features and an adaptive user experience. In an item listing system, the cross-domain secure authentication engine operates based on a security-focused framework that streamlines user authentication across multiple domains without sacrificing user experience. It integrates a modal containing an iframe-based sign-in interface associated with a separate authentication domain and employs a postMessage API for cross-origin communication. Key features include dynamic modal resizing—adjusting the sign-in window to different authentication steps (like email, password, or OTP)—and parameterized iframes that remove unnecessary UI elements for a cleaner user experience. The cross-domain secure authentication engine also supports security measures and supports incremental, multi-step authentication flows to reduce user friction.

In a method for controlling access to an instrument (110) that is coupled to an interlock (112) device that controls access to the instrument (110), in which a user time-based one-time password that is unique to each user or project is periodically generated (312). A set of instrument time-based one-time passwords that correspond to each user time-based one-time password for the instrument is periodically generated (320). The set of instrument time-based one-time passwords is stored in the interlock device. The user time-based one-time password is received from a user (316). Only when the user time-based one-time password received from the user corresponds to one of the set of instrument time-based one-time passwords that is stored by the interlock device (326) then the interlock device is instructed to allow access to the instrument by the user (328). Parameters relating to use of the instrument by the user are recorded.

A portable file system structure that uses NFTs allows access to information regarding a directory structure using one or more directory NFTs. This may be used to view and / or modify the directory structure via one or more front ends. Access to one or more of the files themselves, and or decryption of encrypted content, may be obtained via one or more access NFTs, one-time passwords, and / or other authorization mechanisms. The files themselves may be stored in one or more different storage locations, such as cloud storage. The storage locations may be changed independently of the front end, and a front end associated with the directory structure may be de-associated so that another front end may be associated and then used to view and / or modify the directory structure.

Systems and methods for authenticating user identity using custom visual code is disclosed. One disclosed method includes determining user identification information based on received biometric data; generating a temporary one-time password; encrypting the user identification information and the temporary one-time password; and generating a visual code based in part on the encrypted temporary one-time password and user identification information. The method may further include generating a prompt requesting a passcode or biometric data when a user device is within a predetermined threshold range of an authenticating device.

A method of creating a trusted execution domain includes initializing, by a processing device executing a trust domain resource manager (TDRM), a trust domain control structure (TDCS) and a trust domain protected memory (TDPM) associated with a trust domain (TD). The method further includes generating a one-time cryptographic key, assigning the one-time cryptographic key to an available host key id (HKID) in a multi-key total memory encryption (MK-TME) engine, and storing the HKID in the TDCS. The method further includes associating a logical processor to the TD, adding a memory page from an address space of the logical processor to the TDPM, and transferring execution control to the logical processor to execute the TD.

Example embodiments of systems and methods for data transmission between contactless card and receiving devices are provided. In an embodiment, the contactless card may be configured to create a cryptogram based on a plurality of keys and a counter. The cryptogram may be transmitted to the receiving device. The contactless card may be configured to transmit a one-time password to the client device. The counter value may be adjusted each time the one-time password is generated, and the counter may be configured to increment in a non-monotonic sequence, the sequence associated with one or more cryptographic algorithms.