Methods for selectively capturing and replicating one-time password generator functionality from device to device

1. A method, carried out by a first communication device that maintains one or more one-time password (OTP) tokens for authenticating access to a corresponding one or more accounts of a user, for selectively capturing and cloning selected tokens from the first communication device to a second communication device, the method comprising:

selecting, responsive to user input, one or more of the OTP tokens resident on the first communication device and in time-synchronization with a corresponding authentication entity, yielding one or more selected tokens to be cloned;

for each selected token, sending state information to the second communication device that will enable the second communication device to generate OTP sequences corresponding to the selected token in time-synchronization with said corresponding authentication entity and said first communication device, wherein some time after sending said state information to the second communication device that enables the second device to generate OTP sequences corresponding to the selected token, the first communication device experiences a loss of synchronization of the one or more selected tokens;

after said loss of synchronization, sending a message to the second communication device to request restoration of the OTP sequences corresponding to the one or more selected tokens;

responsive to the request, receiving said state information corresponding to the one or more selected tokens; and

using said state information to restore the OTP sequences corresponding to the one or more selected tokens in proper time-synchronization with a corresponding authentication entity.

2. The method of claim 1 , wherein the first communication device maintains multiple OTP tokens, and wherein the step of selecting comprises selecting a subset of the multiple OTP tokens to be cloned.

3. The method of claim 1 , wherein the step of sending state information comprises sending, for each selected token:

a key corresponding to the selected token;

a current value of the OTP sequence corresponding to the selected token; and

a time to expiry value of the current value.

4. The method of claim 1 , wherein the step of receiving state information comprises receiving, from the second communication device:

a key corresponding to the selected token;

a current value of the OTP sequence corresponding to the selected token; and

a time to expiry value of the current value.

5. A method, carried out by a second communication device in a communication system that includes a first and second communication device and wherein the first communication device maintains one or more one-time password (OTP) tokens for authenticating access to a corresponding multiple accounts of a user, the method comprising:

receiving, from the first communication device, a request to clone at least one selected token of the one or more OTP tokens maintained by the first communication device in time-synchronization with at least one authentication entity;

coincident to the request, receiving state information associated with the at least one selected token;

using the state information to generate OTP sequences corresponding to the at least one selected token in time-synchronization with said first communication device and said corresponding at least one authentication entity, wherein some time after sending said state information to the second communication device that enables the second device to generate OTP sequences corresponding to the at least one selected token, the first communication device experiences a loss of synchronization of the at least one selected token:,

receiving a message from the first communication device to request restoration of the OTP sequences corresponding to the at least one selected token;

responsive to the request, sending said state information associated with the at least one selected token to the first communication device that will enable the first communication device to regenerate OTP sequences corresponding to the at least one selected token in time-synchronization with at least one corresponding authentication authority.

6. The method of claim 5 , wherein the step of receiving state information comprises receiving:

a key corresponding to each of the at least one selected tokens;

a current value of the OTP sequence corresponding to each of the at least one selected tokens; and

a time to expiry value of the current value corresponding to each of the at least one selected tokens.

7. The method of claim 5 , wherein the step of sending state information comprises sending:

a key corresponding to each of the at least one selected tokens;

a current value of the OTP sequence corresponding to each of the at least one selected tokens; and

a time to expiry value of the current value corresponding to each of the at least one selected tokens.

8. A method comprising:

maintaining one or more one-time password (OTP) tokens resident on a first device for authenticating access to a corresponding one or more accounts of a user, the one or more OTP tokens being time-synchronized with a corresponding authentication entity and subject to loss of said time-synchronization;

sending state information that will enable a second device to generate OTP sequences corresponding to at least one selected token of the one or more OTP tokens from the first device to the second device; and

following said loss of time-synchronization of the at least one selected token resident on the first device, sending a message to the second device to request restoration of the OTP sequences corresponding to the at least one selected token and, responsive to the request, obtaining said state information from the second device that will enable the first device to regenerate OTP sequences corresponding to the at least one selected token in proper time-synchronization with the corresponding authentication entity and said second device.

9. A communication system comprising:

a first communication device configured to maintain one or more one-time password (OTP) tokens for authenticating access to a corresponding one or more accounts of a user; and

a second communication device configured to receive state information associated with at least one selected token of the one or more tokens and to generate OTP sequences corresponding to the at least one selected token in time-synchronization with said first communication device and a corresponding at least one authentication entity, wherein some time after sending said state information to the second communication device that enables the second device to generate OTP sequences corresponding to the at least one selected token, the first communication device experiences a loss of synchronization of the at least one selected token, wherein the first communication device sends a message to the second communication device to request restoration of the OTP sequences corresponding to the at least one selected token and, responsive to the request, obtains said state information from the second communication device to enable the first device to regenerate OTP sequences corresponding to the at least one selected token in proper time-synchronization with the at least one corresponding authentication entity and the second communication device.