Methods, computer readable media, and systems for authentication using a text file and a one-time password

1. An authentication method comprising

a registration method of creating a record in a user table to store information corresponding to the user, the registration method including:

receiving user credentials;

providing initial text for modification by a user associated with the user credentials;

receiving first modified text, the first modified text containing one or more modifications provided by the user;

generating a first hash value based on a hash function of the initial text;

generating a second hash value based on a hash function of the first modified text;

comparing the first hash value and the second hash value;

if the first hash value matches the second hash value, requesting the user to modify the initial text;

if the first hash value does not match the second hash value, performing an operation including:

creating the record in the user table to store the information corresponding to the user including the second hash value, wherein the information includes the modified text; and

sending the user a first one-time password via email to verify that the user is an owner of an email address provided by the user.

2. The authentication method of claim 1 , further comprising

a login method that occurs after the registration, including:

receiving a username;

receiving second modified text;

generating a third hash value based on the hash function of the first modified text;

comparing the third hash value to the second hash value;

if the third hash value matches the second hash value, performing operations including:

sending the user a second one-time password via email;

receiving a password from the user; and

if the password received from the user matches the second one-time password sent via email, starting a session for the user.

3. The authentication method of claim 2 , further comprising:

determining that a time duration for the session has expired;

reauthenticating the user by requesting the second modified text to be input again;

receiving newly input said second modified text;

generating a fourth hash value based on a hash function of the newly input said second modified text;

comparing the fourth hash value with the second hash value;

if the fourth hash value matches the second hash value, starting a new session for the user; and

if the fourth hash value does not match the second hash value, permitting the user to retry providing the second modified text a given number of times and repeating the generating and comparing on the second modified text received via retry attempts.

4. The authentication method of claim 3 , further comprising detecting that a reset process is to be performed based on one of detecting a user request to perform a reset process or detecting user input indicating forgotten modified text.

5. The authentication method of claim 4 , further comprising:

when the user request to perform the reset process is detected, performing operations including:

requesting third modified text from the user;

receiving the third modified text from the user in response to the request to perform the reset process;

generating a fifth hash value on the modified text received from the user in response to the request to perform the reset process;

comparing the fifth hash value to the second hash value;

if the fifth hash value matches the second hash value, providing a prompt for the user to enter new modified text; and

if the fifth hash value does not match the second hash value, sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

6. The authentication method of claim 4 , further comprising:

when user input indicating the forgotten modified text is detected, performing operations including:

sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

7. The authentication method of claim 4 , further comprising:

detecting an indication that a user account has been compromised; and

in response to detecting the indication that the user account has been compromised, sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

8. The authentication method of claim 1 , wherein the credentials include one or more of username, unique identifier, email address, or phone number.

9. The authentication method of claim 1 , wherein modification of the initial text includes one or more of changing a portion of the initial text, adding to the initial text, or deleting a portion of the initial text.

10. A non-transitory computer readable medium having instructions stored therein that, when executed by one or more processors, cause the one or more processors to perform an authentication method comprising

a registration method for creating a record in a user table to store information corresponding to the user, the registration method including:

receiving user credentials;

providing initial text for modification by a user associated with the user credentials;

receiving first modified text, the first modified text containing one or more modifications provided by the user;

generating a first hash value based on a hash function of the initial text;

generating a second hash value based on a hash function of the first modified text;

comparing the first hash value and the second hash value;

if the first hash value matches the second hash value, requesting the user to modify the initial text;

if the first hash value does not match the second hash value, performing an operation including:

creating the record in the user table to store the information corresponding to the user including the second hash value, wherein the information includes the first modified text; and

sending the user a first one-time password via email to verify that the user is an owner of an email address provided by the user.

11. The non-transitory computer readable medium of claim 10 , wherein the authentication method further comprises

a login method that occurs after the registration, including

receiving a username;

receiving second modified text;

generating a third hash value based on the hash function of the first modified text;

comparing the third hash value to the second hash value; and

if the third hash value matches the second hash value, performing operations including:

sending the user a second one-time password via email;

receiving a password from the user; and

if the password received from the user matches the second one-time password sent via email, starting a session for the user.

12. The non-transitory computer readable medium of claim 11 , wherein the authentication method further comprises:

determining that a time duration for the session has expired;

reauthenticating the user by requesting the second modified text to be input again;

receiving newly input said second modified text;

generating a fourth hash value based on a hash function of the newly input said second modified text;

comparing the fourth hash value with the second hash value;

if the fourth hash value matches the second hash value, starting a new session for the user;

if the fourth hash value does not match the second hash value, permitting the user to retry providing the second modified text a given number of times and repeating the generating and comparing on the second modified text received via retry attempts.

13. The non-transitory computer readable medium of claim 12 , wherein the authentication method further comprises detecting that a reset process is to be performed based on one of detecting a user request to perform a reset process or detecting user input indicating forgotten modified text.

14. The non-transitory computer readable medium of claim 13 , wherein the authentication method further comprises:

when the user request to perform the reset process is detected, performing operations including:

requesting third modified text from the user;

receiving the third modified text from the user in response to the request to perform the reset process;

generating a fifth hash value on the modified text received from the user in response to the request to perform a reset process;

comparing the fifth hash value to the second hash value;

if the fifth hash value matches the second hash value, providing a prompt for the user to enter new modified text; and

if the fifth hash value does not match the second hash value, sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

15. The non-transitory computer readable medium of claim 13 , wherein the authentication method further comprises:

when user input indicating the forgotten modified text is detected, performing operations including:

sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

16. The non-transitory computer readable medium of claim 13 , wherein the authentication method further comprises:

detecting an indication that a user account has been compromised; and

in response to detecting the indication that the user account has been compromised, sending the user a one-time password via email to permit the user to enter new modified text when the one-time password is received,

wherein a new hash value is generated from the new modified text and the new hash value is stored as the second hash value.

17. The non-transitory computer readable medium of claim 10 , wherein the credentials include one or more of username, unique identifier, email address, or phone number.

18. The non-transitory computer readable medium of claim 10 , wherein modification of the initial text includes one or more of changing a portion of the initial text, adding to the initial text, or deleting a portion of the initial text.

19. An authentication system comprising:

one or more processors coupled to a non-transitory computer readable medium having stored thereon software instructions that, when executed by the one or more processors, cause the one or more processors to perform authentication operations including:

performing registration operations for creating a record in a user table to store information corresponding to the user, the registration operations including:

receiving user credentials;

providing initial text for modification by a user associated with the user credentials;

receiving first modified text, the first modified text containing one or more modifications provided by the user;

generating a first hash value based on a hash function of the initial text;

generating a second hash value based on a hash function of the first modified text;

comparing the first hash value and the second hash value;

if the first hash value matches the second hash value, requesting the user to modify the initial text;

if the first hash value does not match the second hash value, performing an operation including:

creating the record in the user table to store the information corresponding to the user including the second hash value, wherein the information includes the first modified text; and

sending the user a first one-time password via email to verify that the user is an owner of an email address provided by the user.

20. The system of claim 19 , wherein the authentication operations further include:

performing login operations after the registration operations, the login operations including:

receiving a username;

receiving second modified text;

generating a third hash value based on the hash function of the first modified text;

comparing the third hash value to the second hash value;

if the third hash value matches the second hash value, performing operations including:

sending the user a second one-time password via email;

receiving a password from the user; and

if the password received from the user matches the second one-time password sent via email, starting a session for the user.