One time password generating method and apparatus

• US 8,184,872 B2
• Filed: 12/03/2008
• Issued: 05/22/2012
• Est. Priority Date: 12/24/2007
• Status: Active Grant

• Current Assignee: Feitian Technologies Company Limited
• Original Assignee: Feitian Technologies Company Limited
• Inventors: Lu, Zhou, Yu, Huazhang
• Primary Examiner(s): Chawan, Sheela
• Application Number:
  US12/326,942
• Publication Number:
  US 20090161924A1
• Time in Patent Office: 1,266 Days
• Field of Search: 382/124, 382/115, 382/125, 382/118, 382/190, 382/116, 382/218, 382/305, 382/100, 382/181, 382/209, 382/217, 382/117, 713/186, 713/187, 713/185, 713/193, 713/182, 713/189, 713/184, 726/7, 726/18, 726/5, 726/27, 726/2, 726/3, 726/16, 726/17, 340/5.52, 340/5.82, 340/5.8, 340/5.53, 340/5.6, 340/5.81, 340/5.83, 340/5.1, 340/5.2, 340/5.51, 340/5.54, 235/382, 235/380, 235/375, 902/2
• US Class Current: 382/124
• CPC Class Codes: G06V 40/12 Fingerprints or palmprints

Abstract

The invention relates to a one-time password generating method and an apparatus. The method includes steps of collecting fingerprint images, extracting fingerprint feature data from those fingerprint images, and comparing the fingerprint feature data with one or more pre-stored fingerprint feature templates for authentication. After the authentication is passed, a one-time password is generated by the corresponding fingerprint feature template or a user'"'"'s secret corresponding to the template. The invention also discloses a one-time password apparatus, including a fingerprint collecting unit, a fingerprint feature extracting unit, a storage unit, a comparison unit, a one-time password generating unit, a control unit, and an output unit. By adding fingerprint authentication function to a one-time password generating apparatus, the invention avoids disadvantages such as no user authentication in the present apparatus, only for a single user, and imitation of the apparatus by others when it is lost or theft, as a result, increases security of the apparatus.

Claims

1. A one time password generating method comprising the steps of:

collecting fingerprint images;

extracting fingerprint feature data;

comparing said fingerprint feature data with a pre-stored fingerprint feature template, said pre-stored fingerprint feature template being a valid user'"'"'s fingerprint feature template; and

generating a one time password after a match being found.

2. The one time password generating method according to claim 1, wherein before said step of collecting fingerprint images, the method further including a step of triggering a signal to collect said fingerprint images.

3. The one time password generating method according to claim 1, wherein said comparison being a step of comparing said fingerprint feature extracted with at least one of said fingerprint feature templates pre-stored separately.

4. The one time password generating method according to claim 1, wherein said one time password being generated by said fingerprint feature template or a user'"'"'s secret corresponding to said template.

5. The one time password generating method according to claim 4, wherein said one time password being generated by computing said user'"'"'s secret and a dynamic factor, or by computing said fingerprint feature template'"'"'s value and a dynamic factor with preset password generating algorithm.

6. The one time password generating method according to claim 5, wherein said dynamic factor includes an event and/or a time factor.

7. The one time password generating method according to claim 1 further including a step of evening or merging fingerprint images collected from a plurality of times after said fingerprint images are collected.

8. The one time password generating method according to claim 1, further including a step of selecting an optimal fingerprint image collected from a plurality of times after said fingerprint images are collected.

9. The one time password generating method according to claim 1, wherein said valid user'"'"'s fingerprint feature template including more than one fingerprint feature template.

10. The one time password generating method according to claim 1, wherein said pre-stored fingerprint feature templates are those from many valid users'"'"' fingerprint feature templates.

11. A one time password generating apparatus comprising:

a fingerprint image collecting unit for collecting fingerprint images under control of a control unit;

a fingerprint feature extracting unit for extracting fingerprint feature data from said fingerprint images collected by said fingerprint image collecting unit under control of said control unit;

a storage unit for storing a fingerprint feature template under control of said control unit, said fingerprint feature template being a valid user'"'"'s fingerprint feature template;

a comparison unit for comparing said fingerprint feature data collected by said fingerprint feature extracting unit with those fingerprint feature templates in said storage unit, and returning a comparison result to said control unit;

said control unit being for starting a one time password generating unit according to said comparison result and sending a one time password to an output unit;

said one time password generating unit being for generating said one time password with a pre-stored one time password generating algorithm under control of said control unit and sending it to said control unit; and

said output unit being for outputting said one time password under control of said control unit.

12. The one time password generating apparatus of claim 11, further including a trigger unit for sending a signal to said control unit to trigger said fingerprint image collecting unit.

13. The one time password generating apparatus of claim 11, wherein said output unit includes a screen, a blue-tooth communication interface, or an infrared communication interface.

14. The one time password generating apparatus of claim 13, further including a battery unit for power supply.

15. The one time password generating apparatus of claim 11, wherein said output unit being a USB communication interface.

16. The one time password generating apparatus of claim 15, wherein said USB communication interface being used as a power supply for the apparatus.

17. The one time password generating apparatus of claim 11, wherein said fingerprint image collecting unit including an infrared fingerprint sensor, a fingerprint scanner, a CCD, or a CMOS image sensor.

18. The one time password generating apparatus of claim 11, wherein said storage unit stores more than one fingerprint feature templates corresponding to one valid user.

19. The one time password generating apparatus of claim 11, wherein said storage unit stores a plurality of said fingerprint feature templates corresponding to more valid users.

20. The one time password generating apparatus of claim 11, further including an input unit for inputting one or more fingerprint feature templates into the apparatus.