Authentication method and key device

1. An authentication method, wherein the method comprising the steps of:

initiating user authentication to a key device connected to a host computer;

generating a dynamic code by the key device using a time or event random factor;

generating a first verification code by the key device on the basis of the dynamic code with a mechanism comprising one selected from the group consisting of

combining the dynamic code with an identification code previously defined by a manufacturer or user of the key device, and transforming the combination into a first verification code by the key device, and

transforming the dynamic code, and combining the transformed dynamic code with an identification code previously defined by a manufacturer or user of the key device to form a first verification code by the key device;

outputting the dynamic code by the key device;

obtaining the dynamic code by the user;

producing a second verification code by the user with the same mechanism comprising one selected from the group consisting of

combining the dynamic code with an identification code previously defined by a manufacturer or user of the key device, and transforming the combination into a second verification code by the user, and

transforming the dynamic code, and the combining the transformed dynamic code with an identification code previously defined by a manufacturer or user of the key device to form a second verification code by the user;

entering the second verification code on the host by the user;

receiving the second verification code by the host;

transmitting the second verification code by the host to the key device connected to the host;

receiving the second verification code by the key device;

collating the second verification code with the first verification code by the key device; if a match is found, authorizing access of the user to the key device via the host; otherwise, prohibiting access of the user to the key device;

if the user gains the access to the key device, performing by the key device information security operations comprising presetting a user software fragment, which cannot be read out of the device and is used to perform data computation within the device, and presetting a software protection application interface function, which is an interface-level function between the device and the software developer application.

2. The authentication method as claimed in claim 1 , wherein the step of initiating user authentication by a key device particularly comprises one selected from the group consisting of that the key device starts user authentication after receiving a trigger signal produced from pressing a button or switch on the key device by a user, that the key device starts user authentication after receiving a trigger signal from a host, and that the key device automatically starts user authentication at a regular time interval.

3. The authentication method as claimed in claim 2 , wherein a value of the regular time interval is previously defined by a manufacturer or user of the key device.

4. The authentication method as claimed in claim 1 , wherein the combining is carried out by mosaic and/or insertion, and the transforming is carried out by changing character position in accordance with a rule previously defined and/or representation.

5. The authentication method as claimed in claim 1 , wherein the step of outputting the dynamic code particularly comprises outputting the dynamic code to a display of the key device, or to a speaker connected with the key device to broadcast by voice.

6. The authentication method as claimed in claim 1 , wherein the step of generating a dynamic code and then a first verification code on the basis of the dynamic code, and outputting the dynamic code, by the key device particularly comprises the substeps of:

generating a dynamic code by the key device;

generating a new first dynamic code when pressing on a button or switch of the key device by a user is detected by the key device; and

generating a verification code on the basis of the new dynamic code and outputting the new dynamic code by the key device.

7. A key device connected to a host computer, wherein the key device comprising a trigger module, a generator module, an output module, a communication module, a collator module, a controller module, and a security module;

the trigger module being operative to trigger the controller module to initiate user authentication to the key device;

the generator module being operative to generate a dynamic code using a time or event random factor and then a first verification code on the basis of the dynamic code, and transmitting the dynamic code to the output module, and the first verification code to the collator module, under control of the controller module, wherein the generator module comprises one unit selected from the group consisting of

a combined and transformed generation unit for generating a dynamic code under control of the controller module, combining the dynamic code with an identification code previously defined by a manufacturer or user of the key device, transforming the combination of the dynamic code and the identification code, and using the transformed combination as the first verification code, and

a transformed and combined generation unit for generating a dynamic code under control of the controller module, transforming the dynamic code, combining the transformed dynamic code with an identification code previously defined by a manufacturer or user of the key device, and using the combination as the first verification code;

the output module being operative to output the dynamic code received from the generator module for reception by a user, under control of the controller module;

the communication module being operative to receive a second verification code entered by the user via the host and transmit the second verification code to the collator module under control of the controller module, the second verification code being produced by the user with the same mechanism comprising one selected from the group consisting of combining the dynamic code with an identification code previously defined by a manufacturer or user of the key device, and transforming the combination into a second verification code; and transforming the dynamic code, and then combining the transformed dynamic code with an identification code previously defined by a manufacturer or user of the key device to form a second verification code;

the collator module being operative to collate the second verification code with the first verification code under control of the controller module;

the controller module being operative to initiate user authentication after receiving a trigger signal from the trigger module, control the generator module to generate the dynamic code and the first verification code and transmit the dynamic code to the output module, the output module to output the dynamic code, and the collator module to collate the second verification code with the first verification code, and determine if a match is found between the first and second verification codes to authorize user access to the key device via the host if yes or to prohibit user access to the key device if no; and

the security module being operative to perform information security operations under control of the controller module if a match is found between the first and second verification codes in response to collation of the collator module;

wherein the information security operations comprising presetting a user software fragment, which cannot be read out of the device and is used to perform data computation within the device, and presetting a software protection application interface function, which is an interface-level function between the device and the software developer application.

8. The key device as claimed in claim 7 , wherein the trigger module particularly is a button or switch.

9. The key device as claimed in claim 7 , wherein the trigger module particularly comprises a receiving unit for receiving the trigger signal from the host; and a trigger unit for triggering the controller module to initiate user authentication after the trigger signal is received by the receiving unit.

10. The key device as claimed in claim 9 , wherein the trigger module and the controller module are integrated into a single controller chip, which is a security-designed chip including a smartcard chip.

11. The key device as claimed in claim 7 , wherein the trigger module particularly comprises a clock unit for counting time; and a trigger unit for automatically triggering the controller module to initiate user authentication once a regular time interval previously defined has elapsed in accordance with a time value obtained from the clock unit.

12. The key device as claimed in claim 7 , wherein the output module particularly is a display.

13. The key device as claimed in claim 7 , wherein the output module particularly comprises a voice conversion unit for converting the dynamic code generated by the generator module to a voice signal; and a speaker for broadcasting in accordance with the voice signal under control of the controller module.

14. The key device as claimed in claim 13 , wherein the output module further comprises an audio amplifier for amplifying the voice signal and transmitting the amplified voice signal to the speaker.

15. The key device as claimed in claim 13 , wherein the voice conversion unit is a voice chip, or is integrated with the controller module on a single controller chip, which is a security-designed chip including a smartcard chip.

16. The key device as claimed in claim 7 , wherein the communication module is a USB, infrared, or Bluetooth communication interface.

17. The key device as claimed in claim 7 , wherein at least one module selected from the group consisting of the generator module, the communication module, the security module, and the collator module is integrated with the controller module on a single controller chip, which is a security-designed chip including a smartcard chip.

18. The key device as claimed in claim 7 , wherein the generator module particularly comprises

a generation unit for generating a dynamic code under control of the controller module;

a detection unit for detecting whether the operation of pressing a button or switch of the key device is performed by a user or not; and

a re-generation unit for generating a new dynamic code and then a new first verification code on the basis of the new dynamic code once the detection unit detects that the button or switch of the key device is pressed by a user;

accordingly, the output module is operative to output the new dynamic code under control of the controller module.