Transformation rules for one-time passwords

1. A method comprising:

performing by a processor operations comprising:

receiving from a user, a one-time password transformation rule to be applied by the user to a one-time password that is received, so as to transform the one-time password that is received;

sending a one-time password to the user;

receiving a response to the one-time password from the user; and

selectively authenticating the user based on the response corresponding to the one-time password as transformed by the one-time password transformation rule.

2. A method according to claim 1 wherein the receiving a one-time password transformation rule comprises:

providing a list of a plurality of one-time password transformation rules; and

receiving a selection of one of the plurality of one-time password transformation rules.

3. A method according to claim 1 wherein the receiving a one-time password transformation rule comprises:

receiving a proposed one-time password transformation rule; and

selectively sending a confirmation that the proposed one-time password transformation rule is acceptable, responsive to verification that the proposed one-time password transformation rule meets a predefined criterion.

4. A method according to claim 1 further comprising:

proceeding with a transaction in response to a confirmation that the response corresponds to the one-time password as transformed by the one-time password transformation rule.

5. A method according to claim 1 wherein the one-time password comprises a number and wherein the one-time password transformation rule comprises a mathematical operation that is performed on the number.

6. A method according to claim 1 wherein the one-time password comprises a first alphabetic character and wherein the one-time password transformation rule comprises a transformation that is performed on the first alphabetic character to produce a second alphabetic character.

7. A method according to claim 1 wherein the one-time password comprises a first symbol and wherein the one-time password transformation rule comprises a transformation that is performed on the first symbol to produce a second symbol.

8. A method according to claim 1 wherein the receiving a one-time password transformation rule to be applied by the user, the sending a one-time password to the user, the receiving a response to the one-time password, and the selectively authenticating the user based on the response corresponding to the one-time password as transformed by the one-time password transformation rule are all performed by a server that communicates with a user device of the user over a network.

9. A method according to claim 1 wherein the receiving a one-time password transformation rule to be applied by the user, the sending a one-time password to the user, the receiving a response to the one-time password, and the selectively authenticating the user based on the response corresponding to the one-time password as transformed by the one-time password transformation rule are all performed by a user device of the user.

10. A method according to claim 1 further comprising:

defining the one-time password transformation rule;

receiving the one-time password; and

sending the response to the one-time password.

11. A method according to claim 10 wherein the defining the one-time password transformation rule, the receiving the one-time password, and the sending the response to the one-time password are all performed by a user device of the user.

12. A method according to claim 1 wherein the sending is preceded by:

receiving a userid and a static password from the user; and

wherein the sending comprises selectively sending the one-time password to the user responsive to validating the userid and the static password.

13. A method according to claim 12 wherein the one-time password transformation rule comprises a plurality of operations to be performed sequentially by the user on the one-time password, the plurality of operations comprising a dynamic operation that changes as a function of time and a static operation that does not change as a function of time.

14. A method according to claim 1 wherein the one-time password transformation rule comprises a plurality of operations to be performed sequentially by the user on the one-time password.

15. A method according to claim 14 wherein the plurality of operations comprises a dynamic operation that changes as a function of time.

16. A method according to claim 15 wherein the plurality of operations further comprises a static operation that does not change as a function of time.

17. A method according to claim 15 wherein the dynamic operation comprises adding a number representing a current day to the one-time password.

18. A computer system comprising:

a processor; and

a memory coupled to the processor and comprising computer readable code that, when executed by the processor, causes the processor to perform operations comprising:

receiving from a user, a one-time password transformation rule to be applied by the user to a one-time password that is received, so as to transform the one-time password that is received;

sending a one-time password to the user;

receiving a response to the one-time password from the user; and

selectively authenticating the user based on the response corresponding to the one-time password as transformed by the one-time password transformation rule.

19. A computer program product comprising:

a computer readable storage medium having computer readable program code embodied in the medium that, when executed by a processor of a computer system, causes the computer system to perform operations comprising:

receiving from a user, a one-time password transformation rule to be applied by the user to a one-time password that is received, so as to transform the one-time password that is received;

sending a one-time password to the user;

receiving a response to the one-time password from the user; and

selectively authenticating the user based on the response corresponding to the one-time password as transformed by the one-time password transformation rule.