METHOD AND SYSTEM FOR AUTHENTICATING USERS WITH A ONE TIME PASSWORD USING AN IMAGE READER

• US 20090249077A1
• Filed: 03/31/2008
• Published: 10/01/2009
• Est. Priority Date: 03/31/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Trinchini, Patrizio, Gargaro, Gianluca
• Granted Patent: US 8,024,576 B2
• Time in Patent Office: Days
• US Class Current: 713/183
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A method and system to authenticate users with a one time password by using a visual communication channel. The method and system may include using a device to capture a sequence of images being displayed and decrypt an encrypted one time password contained in the sequence of images.

Claims

1. A method for authenticating users with a one time password using a visual communication channel, comprising:

requesting access to a protected resource that requires authentication,

receiving a sequence of images that are displayed upon a monitor of the user, wherein the sequence of images represents an encrypted data stream that contains a one time password which has a lifetime validity period,

placing a hardware decoder near or against the monitor to capture the sequence of images as they are being displayed, wherein the hardware decoder has at least one data photodiode and at least one synchronization photodiode,

converting the sequence of images into the encrypted data stream, decrypting the encrypted data stream to obtain the one time password and presenting the one time password on a display,

submitting the one time password for authentication, and

accessing the protected resource if the submitted one time password was properly decrypted from the encrypted data stream and the lifetime validity period of the one time password did not expire.