It is provided a method a method for establishing a first secure and authorized connection between a smart card (504) and a first device (501) in a network (100), wherein the first device (501) comprises a second secure connection to a second device (502), wherein the method comprises storing a first security data; transferring the first security data between the first device (501) and the second device (502); providing the first security data at the first device (501); establishing a binding between the smart card (504) and the first device (501) via the first secure and authorized connection utilizing the first security data; authorizing the binding between the smart card (504) and the first device (501); and sending a second security data from the smart card (504) to the first device (501) via the first secure and authorized connection whereas the second security data may be usable for authentication of the first device (501) to the network (100).

Method for establishing a secure and authorized connection between a smart card and a device in a network

The transaction card of the invention comprises a Card Verification Value (CVV) generator unit that generates a new CVV code each time the card user is invited to enter his CVV code, typically in a remote transaction. The CVV code is displayed on a screen on the transaction card. The screen can be a liquid crystal display (LCD) screen or any similar or newer display technology.

Transaction Card with dynamic CVV

A method, system, and computer-readable storage medium for authenticating a computing device are provided. According to embodiments of the invention, a first computing device generates a message using first secret data and second secret data, the first secret data for authenticating to a second computing device, the second secret data for authenticating to a third computing device. The first computing device sends the message to the second computing device. In some embodiments, challenge-response authentication is implemented. For example, the first computing device receives a challenge from the second computing device and generates the message based at least in part on the challenge. The second computing device compares local information with information received from the first computing device. The first computing device can thereby be authenticated to the second computing device. Furthermore, the first computing device can be authenticated to the third computing device by a similar process.

Method, system, and computer-readable storage medium for authenticating a computing device

Distribution of verification of passwords for electronic account. Password verification is distributed (divided) across multiple entities to reduce potential exposure in the event of a server exposure.

Distributed password verification

The invention discloses an authentication and access method. The authentication and access method includes logging on a first server through a user name, generating an authentication mark related to time of logging on the first server after passing authentication, writing the user name and the authentication mark into a database of the first server and databases of one or a plurality of second servers connected with the first server, starting access modules configured at the second servers to read authentication marks from the databases of the second servers according to the user name if the second servers are accessed by the first server according to the user name, comparing the read authentication marks with the authentication mark read from the database of the first server, and being allowed to continue to access the second servers if comparison result is consistent. The invention further provides a corresponding authentication system. By the method and the system, single-point logging on between the two types of servers is achieved, and accordingly integrated authentication efficiency of the authentication system is improved on the whole.

Authentication and access method and authentication system

The present invention discloses a method and system for remote password based authentication using smart cards for accessing a communications network. The disclosed method does not require a remote authentication sever to maintain a table of passwords for all users. The disclosed method and system also support mutual authentication. It not only prevents the illegal use of system resources by an impersonator, the user can also authenticate the identity of the remote authentication server.

Method and system for remote password based authentication using smart cards for accessing a communications network

An ID based cryptographical method and system. The method comprises the steps of the following: Generating the system parameters for enciphering and deciphering; generating a permanent private key from the ID information of a user and the system parameters; enciphering plain text according to the said system parameters and the user’s ID information and obtaining cipher text; generating a temporal deciphering private key from the said system parameters and the permanent private key; deciphering the said cipher text to plain text according the said temporal private key and system parameters. The invention generates the temporal private key based on the user’s identification, the time period information and the user permanent private key. In this ID based cryptographically system, there is no need of certificate managing system. Since the user permanent private key does not be included in deciphering process, the permanent private key is protected from divulging.

Id based cyptographical method and system

A password remotely authentication method based on the intelligent card, and the intelligent card, the server and the system thereof, and a method and a system for password transformation. The password remotely authentication method includes: the server generates the encrypted user information by using the system key and the user identifier inputted as the first hash function value and the user password inputted as the second hash function converse function value, and stores the encrypted user information to the intelligent card; when logging in the server, the intelligent card makes exponential operation for the encrypted user information with the second hash value as the power, and then obtaining the second encrypted user information, and calculates the third hash function value by using the second encrypted user information as an input, and sends the logging request message including the third hash function value to the server; the server validates the received third hash function value by the first hash function value and the second hash function value so as to realize password authentication.

Zhenchuan Chai

Papers

Method and system for remote password based authentication using smart cards for accessing a communications network

Id based cyptographical method and system

Password remotely authentication method based on the intelligent card and an intelligent card, a server and system thereof