A method for managing mobile payments in a mobile phone. The method includes receiving data associated with a plurality of issuer specific payment services at a mobile phone, selecting one of the issuer specific payment services, and conducting a transaction using the phone.

Mobile payment management

A method and system for a secure login solution for users logging into computers and systems that require authentication is provided incorporating one-time passwords. The method and system allows a user to establish a login key combination in relation to a login key structure. The login key combination is in association with an identification means, such as a username/ID, and allows the user to generate a one-time passcode in response to a random login key. The method and system is directed at situations where the user desires to log into a system from a computer or other electronic device that may not be secure, including for example from computers or devices other than the user's own and/or by using a communications connection that may not be secure, such as a wireless network connection. The method and system is simple and easy to implement and does not require the use of physical devices.

Method and system for providing a secure login solution using one-time passwords

Authentication data is received, from a first computing device, based on data received by the first computing device from a wireless token device, the authentication data used to authenticate a first user to a particular computing session hosted remote from the first computing device. The first computing device is authenticated to the particular computing session based on the received authentication data. The first computing device is permitted to consume resources of the particular computing session. In some instances, the data received by the first computing device from the wireless token device includes the authentication data.

Wireless token authentication

A first computing device is detected as substantially collocated with a wireless token device, using a short-range wireless communication network and a connection is established between the first computing device and the token device over the short-range wireless network. Authentication data is sent to the first computing device from the token device over the short-range wireless network to authenticate the token device at the first computing device. Authentication of the token device permits data accessible through the first computing device to be made available to a holder of the token device and to be presented on a user interface of the first computing device. In some instances, the wireless token device may otherwise lack user interfaces for presenting the data itself.

Wireless token device

Disclosed is an off-line user authentication system, which is designed to present a presentation pattern to a user subject to authentication, and apply a one-time-password derivation rule serving as a password to certain pattern elements included in the presentation pattern at specific positions so as to create a one-time password. An off-line authentication client pre-stores a plurality of pattern element sequences each adapted to form a presentation pattern, and a plurality of verification codes created by applying a one-time-password derivation rule to the respective presentation patterns and subjecting the obtained results to a one-way function algorism. A presentation pattern is created using one selected from the stored pattern element sequences, and presented to a user. A one-time password entered from the user is verified based on a corresponding verification code to perform user authentication. The present invention provides an off-line matrix authentication scheme with enhanced security.

System, method and program for off-line user authentication

An authentication system causing little load on a user upon authentication and having a high security. A management section (107) of a server device (106) stores a password of a character string consisting of a plurality of digits. A random number generator (108) generates a random number for each digit of the password. A communication section (111) transmits a plurality of random numbers to a terminal device (101). A calculation section (109) calculates an authentication value used for authentication by using a random number and password symbol for each digit of the password. In the terminal device (101), a display section (102) displays a random number for each digit of the password. An input section supplies an input value for the random number of each digit of the password and transmits the input value of each digit via a communication section (105). A judgment section (110) of the server device (106) judges whether the authentication value coincides with the input value for each digit of the password, thereby performing user authentication.

Authentication system, authentication device, terminal device, and authentication method

PROBLEM TO BE SOLVED: To provide an authentication system which prevents to be illicitly authenticated in the case of theft or loss of a terminal device, in the authentication system which consists of the terminal device and an authentication server system. SOLUTION: The terminal device 101 stores authentication information S2 generated from a password. The server system 109 stores authentication information S1 generated from the password. In user authentication, the server system 109 generates a random number and transmits it to a terminal device 701. A terminal side authentication data generation section 108 of the terminal device 701 generates terminal side authentication data by using received random number, the authentication information S2, and the password received at the time of authentication of the user, and transmits it to the server system 109. A server side authentication data generation section 113 generates server side authentication data by using the stored authentication information S1 and the transmitted random number. A server side authentication determination section 114 compares the generated server side authentication data with the received terminal side authentication data, and determines success or failure of user authentication. COPYRIGHT: (C)2005,JPO&NCIPI

Authentication system and terminal device

PROBLEM TO BE SOLVED: To prevent leakage of information due to malware without registering information on a disclosable file.SOLUTION: A data input section 301 receives transmission object data including stamped data. A stamping verification section 304 verifies whether stamping data used for verifying whether the stamped data is not data operated by malware is included in the transmission object data. When the stamping data is included in the transmission object data, the stamped data is verified to be not data operated by the malware by using the stamped data and the stamping data. A data output section 307 transfers corrected transmission data where the stamping data is removed from the transmission object data when the stamped data is determined to be not the data operated by the malware.

Data verification device and program

PROBLEM TO BE SOLVED: To prevent data from leaking at low cost also in the case of the missing or theft of an apparatus without pressing a memory storage area and without using a special device and special encryption algorithm. SOLUTION: A coding parameter is formed in a parameter formation part 6. The formed coding parameter is saved to an image file memory 9. Moreover, the formed coding parameter is also delivered to a photographing apparatus. The photographing apparatus 1 encodes the image photographed in the photographing apparatus 2 with the delivered coding parameter, and the coding parameter is deleted. When the image server 5 receives image data encoded from the photographing apparatus 1, the image server 5 decodes with the encoded data in the image file memory 9. Accordingly, in the photographing apparatus 1, after it photographs, the coding parameter does not remain. Therefore, the photoed image cannot be decoded with the photographing apparatus 1, and the leakage of the data is prevented also in the case of the missing or theft of the photographing apparatus 1. Moreover, since it is not necessary to have the encryption algorithm, a memory storage area is not pressed. COPYRIGHT: (C)2006,JPO&NCIPI

Takahashi Wataru

Papers

Authentication system, authentication device, terminal device, and authentication method

Authentication system and terminal device

Data verification device and program

Image photographing apparatus and image photographing method