MOBILE TERMINAL FOR PROVIDING ONE TIME PASSWORD AND OPERATING METHOD THEREOF

• US 20160191504A1
• Filed: 12/22/2015
• Published: 06/30/2016
• Est. Priority Date: 12/31/2014
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: KIM, Young Sae
• Granted Patent: US 10,057,254 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Provided are a mobile terminal for providing a one-time password (OTP) and an operation method thereof. The mobile terminal includes a first one-time password (OTP) generating module configured to provide identification information regarding each of a plurality of pieces of OTP data to a user, and output an OTP provided according to any one identification information selected by the user, and a second OTP generating module based on mobile trusted module (MTM) configured to transfer the identification information regarding each of the plurality of pieces of OTP data to the first OTP generating module according to a corresponding request from the first OTP generating module, generate an OTP by using OTP data corresponding to the selected identification information, and transfer the generated OTP to the first OTP generating module.

Claims

1. A mobile terminal comprising:

a first one-time password (OTP) generating module configured to provide identification information regarding each of a plurality of pieces of OTP data to a user, and output an OTP provided according to any one identification information selected by the user; and

a second OTP generating module based on mobile trusted module (MTM) configured to transfer the identification information regarding each of the plurality of pieces of OTP data to the first OTP generating module according to a corresponding request from the first OTP generating module, generate an OTP by using OTP data corresponding to the selected identification information, and transfer the generated OTP to the first OTP generating module.

2. The mobile terminal of claim 1, wherein the first OTP generating module and the second OTP generating module are independently configured on the basis of separate hardware.

3. The mobile terminal of claim 1, wherein the first OTP generating module comprises:

an OTP information providing unit configured to request a plurality of pieces of OTP data retained in the mobile terminal from the second OTP generating module, and provide identification information regarding each of the plurality of pieces of OTP data received from the second OTP generating module;

an OTP generation data transmitting unit configured to transmit the selected identification information and an input parameter for OTP generation to the second OTP generating module; and

an OTP output unit configured to receive the OTP generated by the second OTP generating module and output the received OTP.

4. The mobile terminal of claim 1, wherein the second OTP generating module comprises:

an OTP calculating unit configured to perform a calculation operation to generate an OTP;

an OTP storage unit configured to store a plurality of pieces of OTP data and identification information regarding each of the plurality of pieces of OTP data; and

an OTP control unit configured to control the OTP calculating unit to perform calculation by using a specific cryptographic engine on the basis of the selected identification information received from the first OTP generating module.

5. The mobile terminal of claim 4, wherein the OTP calculating unit includes a plurality of cryptographic engines for processing a plurality of cipher algorithms, and performs a calculation operation to generate the OTP by using the specific cryptographic engine according to the selected identification information.

6. The mobile terminal of claim 4, wherein the OTP calculating unit performs a calculation operation to generate the OTP by using the input parameter received from the first OTP generating module and OTP data corresponding to the specific identification information.

7. The mobile terminal of claim 1, wherein the second OTP generating module is configured within an MTM.

8. the mobile terminal of claim 1, wherein each of the plurality of pieces of OTP data is seed information used as a basic input value for generating an OTP and user-specific information, and is registered as the same value in an authentication server from which authentication is to be requested using an OTP, in advance.

9. The mobile terminal of claim 1, wherein the identification information includes identifiable information with respect to the plurality of pieces of OTP data, is stored together with the OTP data, and includes at least one of application information, ID information, and information regarding a used cryptographic engine.

10. A method for generating a one-time password (OTP) by a first OTP generating module of a mobile terminal, the method comprising:

providing identification information regarding each of a plurality of pieces of OTP data to a user;

transmitting any one identification information selected by the user and time information to a second OTP generating module based on mobile trusted module (MTM); and

receiving an OTP generated by the second OTP generating module according to the selected identification information and outputting the received OTP.

11. The method of claim 10, wherein the second OTP generating module is independently configured on the basis of hardware separately from the first OTP generating module.

12. The method of claim 10, wherein the providing comprises:

requesting the plurality of pieces of OTP data from the second OTP generating module; and

receiving identification information regarding each of the plurality of pieces of OTP data from the second OTP generating module in response to the request, and providing the received identification information to the user.

13. The method of claim 10, wherein each of the plurality of pieces of OTP data is seed information used as a basic input value for generating an OTP and user-specific information, and is registered as the same value in an authentication server from which authentication is to be requested using an OTP, in advance.

14. The method of claim 10, wherein the identification information includes identifiable information with respect to the plurality of pieces of OTP data, is stored together with the OTP data, and includes at least one of application information, ID information, and information regarding a used cryptographic engine.

15. A method for generating a one-time password (OTP) by a second OTP generating module of a mobile terminal, the method comprising:

transmitting identification information regarding each of a plurality of pieces of OTP data to a first OTP generating module;

receiving identification information selected by a user and time information from the first OTP generating module;

performing calculation to generate an OTP by using OTP data corresponding to the selected identification information and the time information; and

providing an OTP generated according to the calculation result to the user through the first OTP generating module.

16. The method of claim 15, wherein the transmitting comprises:

receiving a request for transmission of a plurality of pieces of OTP data retained in the mobile terminal from the first OTP generating module; and

transmitting identification information corresponding to each of the plurality of pieces of OTP data to the first OTP generating module.

17. The method of claim 15, wherein the calculating comprises:

performing a calculation operation for generating the OTP by using a specific cryptographic engine according to the selected identification information among a plurality of cryptographic engines for providing a plurality of cipher algorithms.

18. The method of claim 15, wherein each of the plurality of pieces of OTP data is seed information used as a basic input value for generating an OTP and user-specific information, and is registered as the same value in an authentication server from which authentication is to be requested using an OTP, in advance.

19. The method of claim 15, wherein the identification information includes identifiable information with respect to the plurality of pieces of OTP data, is stored together with the OTP data, and includes at least one of application information, ID information, and information regarding a used cryptographic engine.

20. The method of claim 15, wherein the first OTP generating module is independently configured on the basis of hardware separately from the second OTP generating module.