METHOD USING ELECTRONIC CHIP FOR AUTHENTICATION AND CONFIGURING ONE TIME PASSWORD

• US 20100319058A1
• Filed: 06/16/2009
• Published: 12/16/2010
• Est. Priority Date: 06/16/2009
• Status: Abandoned Application

• Current Assignee: Ares International Corp.
• Original Assignee: Ares International Corp.
• Inventors: CHEN, Chia-Hong
• Application Number:
  US12/485,143
• Publication Number:
  US 20100319058A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

A method using an electronic chip for authentication and configuring an one time password uses a one time password generated at a one time password service end replacing a personal identification number required in authenticating operations on an electronic chip (IC cards, such as smart card, hardware secure module(HSM)e, EMV chip . . . etc.). Before operating on the electronic chip, a request for the one time password is sent to the one time password service end; or the one time password with access condition is applied in advance, and is used as a key to authenticate operations on the electronic chip. The method enhances privacy of the password and provides added application method for improved confidentiality.

Claims

1. A method using an electronic chip for authentication and configuring a one time password, a client end registering in a one time password service end as a member in advance, comprising:

a) making a request to said one time password service end;

b) verifying if a registration record existed;

c) authorizing a one time password upon verifying the registration record existed at step b;

d) authenticating said electronic chip with said one time password;

e) examining if access conditions of said one time password are satisfied; and

f) operating on said electronic chip upon said access conditions of said one time password are satisfied following step e.

2. The method of claim 1, wherein said authentication with said one time password is performed in a one time password verification unit of said electronic chip at step d.

3. The method of claim 1, wherein said access conditions are configured by a Security Officer (SO) at step e.

4. The method of claim 3, wherein said access conditions comprises performing said authentication with said one time password within time limitation at step e.

5. The method of claim 3, wherein access conditions comprises performing said authentication with said one time password upon particular events are triggered at step e.

6. The method of claim 3, wherein said access conditions comprises uses said one time password when upon permitted authentication count is higher than zero at step e.

7. The method of claim 1, wherein examine uses a private key or a public key stored in a private storage unit of said electronic chip upon access conditions of said one time password are satisfied at step f.

8. The method of claim 1, wherein examine uses a private key or a public key stored in a public storage unit of said electronic chip upon access conditions of said one time password are satisfied at step f.

9. A method using an electronic chip for authentication and configuring a one time password, a client end registering in an one time password service end as a member in advance to generate a one time password protocol and to form a one time password generator, comprising:

a) triggering said one time password generator to generate a one time password;

b) authenticating an electronic chip with said one time password;

c) examining if access conditions of said one time password are satisfied following step b; and

d) operating on said electronic chip upon said access conditions of said one time password are satisfied following step c.

10. The method of claim 9, wherein said one time password generator is triggered to generate said one time password upon said OTP generation protocol is satisfied at step a.

11. The method of claim 9, wherein said authentication with said one time password is performed in a one time password verification unit in said electronic chip at step b.

12. The method of claim 9, wherein said access conditions are configured by a Security Officer (SO) at step c.

13. The method of claim 12, wherein said access conditions comprises performing said authentication with said one time password within time limitation at step c.

14. The method of claim 12, wherein access conditions comprises performing said authentication with said one time password upon particular events are triggered at step c.

15. The method of claim 12, wherein said access conditions comprises uses said one time password when upon permitted authentication count is higher than zero at step c.

16. The method of claim 9, wherein examine uses a private key or a public key stored in a private storage unit of said electronic chip upon access conditions of said one time password are satisfied at step d.

17. The method of claim 9, wherein examine uses a private key or a public key stored in a public storage unit of said electronic chip upon access conditions of said one time password are satisfied at step d.