METHOD FOR PERSONALIZING AN AUTHENTICATION TOKEN
An authentication token using a smart card that an organisation would issue to its customer, the smart card having a processor for executing a software application that is responsive to a user input to generate a one-time password as an output. The smart card co-operates with an interface device for inputting the user input and displaying the one-time password. The authentication token may be used in combination with a remote authentication server for validation of the password and hence authentication of the user.
1 . A method for personalizing an authentication token responsive to a user input from an authentication token interface device to generate a secure password comprising:
requesting from the authentication token, by a personalization device in communication with the authentication token, a serial number of the authentication token;
establishing an encrypted session between the authentication token and the personalization device upon receipt of the serial number;
sending, by the personalization device to the authentication token, an initial seed value and an initial secret key responsive to authentication of the serial number;
storing, by the personalization device, the initial seed value and the initial secret key; and,
transferring, by the personalization device to the authentication token, the initial seed value and the initial secret key used by the authentication token to generate the secure password.