AUTHENTICATION SYSTEM

• US 20130151359A1
• Filed: 06/11/2012
• Published: 06/13/2013
• Est. Priority Date: 06/13/2011
• Status: Active Grant

• Current Assignee: Kazunori Fujisawa
• Original Assignee: Kazunori Fujisawa
• Inventors: FUJISAWA, Kazunori
• Granted Patent: US 9,111,270 B2
• Time in Patent Office: Days
• US Class Current: 705/17
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

An authentication system is provided that authenticates a member using the member'"'"'s mobile terminal. The authentication system includes a mobile terminal, a shop computer, and a head office server. The head office server includes an authentication unit. The authentication unit compares member identification information read by the shop computer with member identification information stored in a member database. Additionally, the authentication unit compares a one-time password (OTP) password with the OTP of the mobile terminal generated by the server-side OTP generation unit and received from the shop computer. The authentication unit authenticates a member based on the results of the comparison. That is, the authentication unit authenticates a member as a valid member if the former member identification information and OTP match the latter member identification information and OTP.

Claims

1. An authentication system, comprising:

a mobile terminal configured to include a terminal-side OTP generation unit that generates an one-time password (OTP) based on member identification information, and to display the member identification information and the generated OTP in barcode form;

a shop computer configured to read the member identification information and the OTP that are displayed by the mobile terminal in barcode form;

a head office server configured to include a member database configured such that data about each member and member identification information have been stored in association with each other, a server-side OTP generation unit configured to generate an OTP based on the member identification information and an authentication unit configured to authenticate the member, and connected to the shop computer and a Point of Sale (POS) system;

wherein the authentication unit compares the member identification information read by the shop computer with the member identification information stored in the member database, compares the OTP generated by the server-side OTP generation unit with the OTP of the mobile terminal received from the shop computer, and authenticates the member as a valid member if the former member identification information and OTP match the latter member identification information and OTP.

2. The authentication system of claim 1, wherein the authentication unit sets a period of validity within a predetermined range for the OTP generated by the server-side OTP generation unit, and then compares the OTP generated by the server-side OTP generation unit with the OTP received from the shop computer.

3. The authentication system of claim 2, wherein:

the mobile terminal can convert the OTP generated by the terminal-side OTP generation unit into text information such as numerical values, and can also display the resulting text information;

the server can convert the OTP generated by the server-side OTP generation unit into text information such as numerical values, and can also send the resulting text information to the shop computer; and

the shop computer can display the text information received from the server.

4. The authentication system of claim 3, wherein the terminal-side OTP generation unit generates the OTP using OTP generation software that is downloaded from the server-side OTP generation unit.

5. The authentication system of claim 4, wherein the mobile terminal comprises a camera unit configured to read member identification information that is indicated on a member card in barcode form, and a display unit configured to display the member identification information that is read by the camera unit, in barcode form.

6. The authentication system of claim 1, wherein:

the mobile terminal can convert the OTP generated by the terminal-side OTP generation unit into text information such as numerical values, and can also display the resulting text information;

the server can convert the OTP generated by the server-side OTP generation unit into text information such as numerical values, and can also send the resulting text information to the shop computer; and

the shop computer can display the text information received from the server.

7. The authentication system of claim 6, wherein the terminal-side OTP generation unit generates the OTP using OTP generation software that is downloaded from the server-side OTP generation unit.

8. The authentication system of claim 7, wherein the mobile terminal comprises a camera unit configured to read member identification information that is indicated on a member card in barcode form, and a display unit configured to display the member identification information that is read by the camera unit, in barcode form.

9. The authentication system of claim 1, wherein the terminal-side OTP generation unit generates the OTP using OTP generation software that is downloaded from the server-side OTP generation unit.

10. The authentication system of claim 9, wherein the mobile terminal comprises a camera unit configured to read member identification information that is indicated on a member card in barcode form, and a display unit configured to display the member identification information that is read by the camera unit, in barcode form.

11. The authentication system of claim 1, wherein the mobile terminal comprises a camera unit configured to read member identification information that is indicated on a member card in barcode form, and a display unit configured to display the member identification information that is read by the camera unit, in barcode form.