High-safety user multi-authentication system and method

• US 9,992,193 B2
• Filed: 04/19/2016
• Issued: 06/05/2018
• Est. Priority Date: 04/19/2016
• Status: Active Grant

• Current Assignee: Kuang-Yao Lee
• Original Assignee: Kuang-Yao Lee
• Inventors: Lee, Kuang-Yao
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/132,501
• Publication Number:
  US 20170302658A1
• Time in Patent Office: 777 Days
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

A high-safety user multi-authentication system, comprising: a server having a user habit information and a key generator for generating a real key corresponding to the user habit information and at least one bait key; and a user application unit disposed on a communication device having a user interface, a key receiving unit for receiving the real key and the at least one bait key from the server, an OTP (one time password) generator for generating a real OTP based on the real key and at least one bait OTP based on the at least one bait key; wherein the real OTP is provided to the user interface when the communication device is operated according to the user habit information.

Claims

1. A high-safety user multi-authentication system, comprising:

a server having a user habit information and a key generator for generating a real key corresponding to the user habit information and at least one bait key;

a user application unit disposed on a communication device having a user interface, a key receiving unit for receiving the real key and the at least one bait key from the server, an OTP (one time password) generator for generating a real OTP based on the real key and at least one bait OTP based on the at least one bait key;

a device identification information corresponding to the communication device so that, only after using the device identification information to identify the communication device, the server transmits the real key and the at least one bait key to the communication device; and

an illegal user determining unit used to determine whether a current user is an illegal user according to at least one operation action from the current user;

wherein the real OTP is provided to the user interface when the communication device is operated according to the user habit information.

2. The high-safety user multi-authentication system of claim 1, further comprising a login unit for receiving the real OTP or the at least one bait OTP from the communication device.

3. The high-safety user multi-authentication system of claim 2, wherein, when the login unit receives the at least one bait OTP, a bait information is transmitted to the communication device.

4. The high-safety user multi-authentication system of claim 3, further comprising a recording unit for recording the at least one operation action from a current user after the bait information is provided on the user interface.

5. The high-safety user multi-authentication system of claim 1, wherein, the user habit information is at least one action applied to the communication device by a user.

6. A high-safety user multi-authentication method executed on a user multi-authentication system including a server and a user application unit disposed on a communication device, the method comprising:

generating a real key corresponding to a user habit information and at least one bait key by a key generator arranged in the server;

receiving the real key and the at least one bait key by a key receiving unit arranged in the communication device;

generating a real OTP based on the real key and at least one bait otp based on the at least one bait key by an OTP generator arranged in the communication device;

providing the real OTP on a user interface of the communication device only when the communication device is operated according to the user habit information;

using a device identification information on the server to identify the communication device;

transmitting the real key and the at least one bait key to the communication device only after identifying the communication device; and

determining whether the current user is an illegal user by an illegal user determining unit according to at least one operation action from the current user.

7. The high-safety user multi-authentication method of claim 6, further comprising:

receiving the real OTP and the at least one bait OTP by a login unit.

8. The high-safety user multi-authentication method of claim 7, further comprising:

bait OTP transmitting a bait information to the communication device when the login unit receives the at least one bait OTP.

9. The high-safety user multi-authentication method of claim 8, further comprising:

bait information recording the at least one operation action from a current user by a recording unit after the bait information is provided on the user interface.

10. The high-safety user multi-authentication method of claim 6, wherein the user habit information is at least one action applied to the communication device by a user.