Method and apparatus for the secure identification of the owner of a portable device
Methods for the authentication of a web site by a visitor to the web site. The visitor uses a device, such as a portable device like a cell phone to compute a dynamic identification string and a one-time password. The dynamic identification string is sent to a service provider, such as a certification service server associated with the web site. In response, the server computes a one-time password that is transmitted to the visitor's device. The device computed one-time password can then be compared to the server computed one-time password in order to authenticate the web site.
1. A method for authenticating a web site, comprising the steps of:
distributing, between potential web site visitors, a device to compute a dynamic code and a one-time password;
providing the web site with a certification service server to receive the computed dynamic code and to compute the one-time password;
computing, by the device, the dynamic code;
computing by the device the one-time password corresponding to the computed dynamic code;
transmitting the computed dynamic code to the certification service server;
receiving the computed dynamic code by the certification service server;
computing the one-time password by the certification service server; and
comparing, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
2. The authentication method of claim 1 , further comprising the steps of:
transmitting the certification service server computed one-time password to the device; and
wherein the step of comparing comprises: comparing, by the device, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
3. The authentication method of claim 1 , wherein the step of comparing comprises: comparing, by the visitor, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
4. The authentication method of claim 3 , further comprising the step of displaying the certification service server computed one-time password to the visitor.
5. A method for authenticating a service provider, comprising the steps of:
distributing, between potential service provider visitors, a device to compute a dynamic code and a one-time password;
providing the service provider with a certification service server to receive the computed dynamic code and to compute the one-time password;
computing, by the device, the dynamic code;
computing by the device the one-time password corresponding to the computed dynamic code;
transmitting the computed dynamic code to the certification service server;
receiving the computed dynamic code by the certification service server;
computing the one-time password by the certification service server; and
comparing the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.
6. The authentication method of claim 5 , further comprising the steps of:
transmitting the certification service server computed one-time password to the device; and
wherein the step of comparing comprises: comparing, by the device, the device computed one-time password to the received certification service server computed one- time password, in order to authenticate the service provider.
7. The authentication method of claim 5 , wherein the step of comparing comprises: comparing, by the visitor, the device computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.
8. The authentication method of claim 7 , further comprising the step of uttering the certification service server computed one-time password to the visitor.
9. A method for authenticating a web site, comprising the steps of:
providing a software module to compute a dynamic code and a one-time password;
providing the web site with a certification service server to receive the computed dynamic code and to compute the one-time password;
computing, by the software module, the dynamic code;
computing, by the software module, the one-time password corresponding to the computed dynamic code;
transmitting the computed dynamic code to the certification service server;
receiving the computed dynamic code by the certification service server;
computing the one-time password by the certification service server; and
comparing the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
10. The authentication method of claim 9 , further comprising the steps of:
transmitting the certification service server computed one-time password to the software module; and
wherein the step of comparing comprises: comparing, by the software module, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
11. The authentication method of claim 9 , wherein the step of comparing comprises: comparing, by a web site visitor, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the web site.
12. The authentication method of claim 11 , further comprising the step of displaying the certification service server computed one-time password to the visitor.
13. A method for authenticating a service provider, comprising the steps of:
providing a software module to compute a dynamic code and a one-time password;
providing the service provider with a certification service server to receive the computed dynamic code and to compute the one-time password;
computing, by the software module, the dynamic code;
computing, by the software module, the one-time password corresponding to the computed dynamic code;
transmitting the computed dynamic code to the certification service server;
receiving the computed dynamic code by the certification service server;
computing the one-time password by the certification service server; and
comparing the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.
14. The authentication method of claim 13 , further comprising the steps of:
transmitting the certification service server computed one-time password to the software module; and
wherein the step of comparing comprises: comparing, by the software module, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.
15. The authentication method of claim 13 , wherein the step of comparing comprises: comparing, by a web site visitor, the software module computed one-time password to the received certification service server computed one-time password, in order to authenticate the service provider.
16. The authentication method of claim 15 , further comprising the step of uttering the certification service server computed one-time password to the visitor.