System and method of mobile authentication
A method for two factor authentication is described. The method comprises a server receiving an activation code for verification from a mobile device. The server generates an encrypted secret key using the activation code The secret key is encrypted and sent to the mobile device. The server receives a first token generated by the mobile device. The server generates a second token using the secret key, determines whether the first token is identical to the second token, and syncs information with the mobile device.
1. A method, comprising:
receiving, at a server, an activation code from a mobile device for verification, wherein the activation code has been encrypted with a public key at the mobile device;
decrypting the activation code by the server using a private key;
creating, at the server, a secret key using the activation code;
encrypting, at the server, the secret key;
sending the encrypted secret key to the mobile device;
receiving, at the server, a first token generated by the mobile device using the secret key for authentication regarding a credit account;
generating, at the server, a second token using the secret key;
determining whether the first token is identical to the second token;
syncing information on the server with the mobile device;
wherein syncing information on the server with the mobile device comprises:
sending encrypted authorization data regarding the credit account; and
sending a plurality of encrypted limited use keys, created at the server, to the mobile device to update card authentication data.
2. The method of claim 1 , wherein the first token is a one-time password generated using the secret key.
3. The method of claim 1 , wherein the second token is a one-time password generated using the secret key.
4. The method of claim 1 , wherein the secret key is encrypted using cryptographic camouflage.
5. The method of claim 1 , wherein the server stores limited use keys and card data.
6. A computer configured to access a storage device, the computer comprising:
a processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the processor cause the computer to perform:
receiving, at a server, an activation code from a mobile device for verification, wherein the activation code has been encrypted with a public key at the mobile device;
decrypting the activation code by the server using a private key;
creating, at the server, a secret key using the activation code;
encrypting, at the server, the secret key;
sending the encrypted secret key to the mobile device;
receiving, at the server, a first token generated by the mobile device using the secret key for authentication regarding a credit account;
generating, at the server, a second token using the secret key;
determining whether the first token is identical to the second token;
syncing information on the server with the mobile device;
wherein syncing information on the server with the mobile device comprises:
sending encrypted authorization data regarding the credit account; and
sending a plurality of encrypted limited use keys, created at the server, to the mobile device to update card authentication data.
7. The computer of claim 6 , wherein the first token is a one-time password generated using the secret key.
8. The computer of claim 6 , wherein the second token is a one-time password generated using the secret key.
9. The computer of claim 6 , wherein the secret key is encrypted using cryptographic camouflage.
10. The method of claim 6 , wherein the server stores limited use keys and card data.
11. A computer program product comprising:
a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to receive, at a server, an activation code from a mobile device for verification, wherein the activation code has been encrypted with a public key at the mobile device;
computer-readable program code configured to decrypt the activation code by the server using a private key;
computer-readable program code configured to generate, at the server, a secret key using the activation code;
computer-readable program code configured to encrypt, at the server, the secret key;
computer-readable program code configured to send the encrypted secret key to the mobile device;
computer-readable program code configured to receive, at the server, a first token generated by the mobile device using the secret key for authentication regarding a credit account;
computer-readable program code configured to generate, at the server, a second token using the secret key;
computer-readable program code configured to determine whether the first token is identical to the second token;
computer-readable program code configured to sync information on the server with the mobile device;
computer-readable program code configured to sync information further comprising:
computer-readable program code configured to send encrypted authorization data regarding the credit account; and
computer-readable program code configured to transmit a plurality of encrypted limited use keys, created at the server, to the mobile device to update card authentication data.
12. The computer program product of claim 11 , wherein the first token is a one-time password generated using the secret key.
13. The computer program product of claim 11 , wherein the second token is a one-time password generated using the secret key.
14. The computer program product of claim 11 , wherein the secret key is encrypted using cryptographic camouflage.