Mobile Device Authentication Using Cryptographic Keys and Fingerprints

The system performs preliminary device fingerprinting and cryptographic key pair generation during device enrollment before actual authentication occurs. The server stores device fingerprints and public keys in advance, so that during authentication, only the encrypted one-time passcode needs to be verified, significantly simplifying the real-time authentication process while maintaining high security.

The patent introduces cryptographic keys and device fingerprints as intermediary elements between the user and the authentication system. Instead of directly authenticating user credentials, the system uses device-specific cryptographic proofs as intermediaries that verify both device integrity and user identity, thereby establishing trust without requiring complex continuous monitoring.

The system pre-generates one-time passcodes and encrypts them with the device's public key during the enrollment phase. This preliminary preparation means that during actual authentication, the server only needs to decrypt and verify the passcode using the stored private key, rather than performing complex cryptographic operations in real-time, thus reducing authentication latency.

The authentication process is segmented into distinct phases: enrollment (where cryptographic materials are prepared) and authentication (where verification occurs). By separating these phases, the system can perform time-intensive cryptographic setup operations once during enrollment, then execute rapid verification during authentication, minimizing the time loss during actual login operations.