Authentication method and system
Provided is a computer implemented method for performing mutual authentication between an online service server and a service user, including: (a) generating, by an authentication server, a server inspection OTP; (b) generating, by an OTP generator, a verification OTP having the same condition as the server inspection OTP and using the same generation key as an OTP generation key and a calculation condition different from a calculation condition is applied or a generation key different from the OTP generation key is used and the same calculation condition as the calculation condition used for generating the server inspection OTP is applied to generate a user OTP; and (c) generating, by the authentication server, a corresponding OTP having the same condition as the user OTP and comparing whether the generated corresponding OTP and the user OTP match each other to authenticate the service user.
1. A computer implemented method for a one time password (OTP) application executed by a user terminal, the method comprising the steps of:
receiving a driving request for execution of the OTP application, wherein a network connection state of the user terminal is verified upon receiving the driving request by a network verifying unit of the OTP application;
executing and controlling the OTP application when the network connection state is only in a deactivated state according to a verification result of the network connection state by a control unit of the OTP application;
executing the OTP application, wherein the network connection state of the user terminal is periodically verified while the OTP application is being executed by the network verifying unit of the OTP application; and
when the network connection state is continuously in the deactivated state according to a periodical verification result of the network connection state, controlling driving of the OTP application and performing of a function depending according to the execution of the OTP application by the control unit of the OTP application,
wherein the function depending according to the execution of the OTP application is inputting of the transaction information, storing of the data on the transaction information, and generating of a transaction related OTP by the OTP application.