Systems and methods for device authentication

1. A computer-implemented method for providing access to secure information, the method comprising:

receiving, at a portable one-time password (OTP) device, a first OTP from a computing device attempting to access secure information from a system and generated by the computing device;

verifying, by the portable OTP device, whether the first OTP is valid, wherein verifying whether the first OTP is valid comprises:

generating a plurality of OTPs;

determining, by the portable OTP device, whether the first OTP matches one of the plurality of OTPs; and

if the first OTP matches one of the plurality of OTPs, then determining that the first OTP is valid; and

if the first OTP is valid, then performing the operations of:

generating, by the portable OTP device, a second OTP for accessing the secure information; and

transmitting, by the portable OTP device, the second OTP to the computing device.

2. The method of claim 1 , wherein generating the plurality of OTPs comprises inputting a time value from a first timer into a first encryption algorithm to generate at least one of the plurality of OTPs, wherein the first timer is synchronized with a second timer in the computing device.

3. The method of claim 2 , wherein generating the second OTP comprises inputting a time value from a third timer into a second encryption algorithm to generate the second OTP, wherein the first and second encryption algorithms are different.

4. The method of claim 2 , wherein generating the second OTP comprises inputting a time value from a third timer into a second encryption algorithm to generate the second OTP, wherein the third timer and the first timer are asynchronous.

5. The method of claim 2 , wherein generating the second OTP comprises inputting a count value from a counter into a second encryption algorithm to generate the second OTP.

6. The method of claim 5 , wherein the count value is incremented each time a user logs into an account including the secure information.

7. The method of claim 1 , wherein generating the plurality of OTPs comprises, for at least one of the plurality of OTPs, inputting a count value from a first counter into a first encryption algorithm to generate the at least one of the plurality of OTPs, wherein the first counter is synchronized with a second counter in the computing device.

8. The method of claim 7 , wherein generating the second OTP comprises inputting a count value from a third counter into a second encryption algorithm to generate the second OTP, wherein the first and second encryption algorithms are different.

9. The method of claim 7 , wherein generating the second OTP comprises inputting a count value from a third counter into a second encryption algorithm to generate the second OTP, wherein the third counter and the first counter are asynchronous.

10. The method of claim 1 , wherein the plurality of OTPs are generated using a current time value from a timer, one or more time values preceding the current time value and one or more time values subsequent to the current time value.

11. The method of claim 1 , wherein the plurality of OTPs are generated using a current count value from a counter, one or more count values preceding the current count value and one or more count values subsequent to the current count value.

12. The method of claim 1 , further comprising:

generating, by the OTP device, an alert indicating that the first OTP has been received.

13. A portable one-time password (OTP) device for providing access to secure information, the device comprising:

one or more processors; and

a machine-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving via a wireless link a first OTP and an identifier from a computing device attempting to access secure information from a system the first OTP generated by the computing device;

determining whether the received identifier is in an access list;

verifying, by the portable OTP device, whether the first OTP is valid, wherein verifying whether the first OTP is valid comprises:

generating a plurality of OTPs;

determining, by the portable OTP device, whether the first OTP matches one of the plurality of OTPs; and

if the first OTP matches one of the plurality of OTPs, then determining that the first OTP is valid; and

if the first OTP is valid and the received identifier is in the access list, then performing the operations of:

generating, by the portable OTP device, a second OTP for accessing the secure information; and

transmitting the second OTP to the computing device via the wireless link.

14. The system of claim 13 , wherein instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising:

generating, by the OTP device, an alert indicating that the first OTP has been received.

15. A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a machine, cause the machine to perform operations comprising:

receiving, at a portable one-time password (OTP) device via a wireless link, a first OTP from a computing device attempting to access secure information from a system the first OTP generated by the computing device;

generating, by the portable OTP device, a second OTP;

verifying, by the portable OTP device, whether the first OTP matches the second OTP; and

if the first OTP matches the second OTP, then performing the operations of:

generating, by the portable OTP device, a third OTP for accessing the secure information, wherein the third OTP is different from the first OTP; and

transmitting, by the portable OTP device, the third OTP to the computing device via the wireless link.

16. The non-transitory machine-readable medium of claim 15 , wherein the instructions, when executed by the machine, further cause the machine to perform operations comprising:

generating, by the OTP device, an alert indicating that the first OTP has been received.