Identity verification method and system, and intelligent wearable device

Patent metadata

Field	Value
Publication number	US-10878074-B2
Application number	US-201916724701-A
Country	US
Kind code	B2
Filing date	Dec 23, 2019
Priority date	May 11, 2016
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

A request is received from an intelligent terminal by an intelligent wearable device for enabling a one-time password function, and the intelligent wearable device is configured with an embedded algorithm chip. Provisional data from a provisioning server is obtained using the intelligent terminal. The provisional data is verified. If the provisional data is verified, the verified provisional data is stored on the intelligent wearable device. Using a micro operating system, the embedded algorithm chip is invoked to generate a one-time password, and the one-time password is displayed on a computer display of the intelligent wearable device. The one-time password is configured to permit a verification server to verify the intelligent wearable device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;
after receiving the request from the intelligent terminal, storing, by the intelligent wearable device, provisional data that has been successfully verified by the intelligent terminal;
invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the provisional data, a one-time password;
providing, for display by a computer display of the intelligent wearable device, the one-time password; and
prior to storing the provisional data:
obtaining, using the micro operating system, a public key of public key and private key pair from the embedded algorithm chip, wherein the public key and private key pair are generated by the embedded algorithm chip using an asymmetric encryption algorithm;
sending, using the intelligent terminal, the public key to a provisioning server; obtaining the provisional data from the provisioning server, wherein the provisional data is encrypted by the provisioning server using the public key; and
verifying, using the embedded algorithm chip, the provisional data.

2. The computer-implemented method of claim 1 , wherein the provisional data includes seed data and a server timestamp.

3. The computer-implemented method of claim 1 , further comprising:
verifying, using a verification server, the one-time password displayed on the computer display of the intelligent wearable device, wherein verifying the one-time password comprises:
receiving, at the verification server, the one-time password from a merchant device, wherein the merchant device obtains the one-time password by scanning the one-time password displayed on the computer display of the intelligent wearable device;
obtaining a local one-time password corresponding to a current moment; and
verifying the one-time password by determining whether the one-time password is consistent with the local one-time password.

4. The computer-implemented method of claim 1 , further comprising:
verifying, using the embedded algorithm chip, the provisional data, wherein verifying the provisional data comprises:
decrypting, using the private key, the provisional data;
generating, using a predetermined one-time password generation algorithm and based on the provisional data, a one-time password;
determining whether a length of the generated one-time password meets a predetermined value; and
if the length of the generated one-time password meets the predetermined value, indicating that the provisional data is verified.

5. The computer-implemented method of claim 1 , wherein the intelligent wearable device and the intelligent terminal are wired or wirelessly connected, and wherein the wireless connection includes a short-distance wireless communication mode.

6. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;
after receiving the request from the intelligent terminal, storing, by the intelligent wearable device, provisional data that has been successfully verified by the intelligent terminal;
invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the provisional data, a one-time password;
providing, for display by a computer display of the intelligent wearable device, the one-time password; and
prior to storing the provisional data:
obtaining, using the micro operating system, a public key of public key and private key pair from the embedded algorithm chip, wherein the public key and private key pair are generated by the embedded algorithm chip using an asymmetric encryption algorithm;
sending, using the intelligent terminal, the public key to a provisioning server; obtaining the provisional data from the provisioning server, wherein the provisional data is encrypted by the provisioning server using the public key; and
verifying, using the embedded algorithm chip, the provisional data.

7. The non-transitory, computer-readable medium of claim 6 , wherein the provisional data includes seed data and a server timestamp.

8. The non-transitory, computer-readable medium of claim 6 , further comprising:
verifying, using a verification server, the one-time password displayed on the computer display of the intelligent wearable device, wherein verifying the one-time password comprises:
receiving, at the verification server, the one-time password from a merchant device, wherein the merchant device obtains the one-time password by scanning the one-time password displayed on the computer display of the intelligent wearable device;
obtaining a local one-time password corresponding to a current moment; and
verifying the one-time password by determining whether the one-time password is consistent with the local one-time password.

9. The non-transitory, computer-readable medium of claim 6 , further comprising:
verifying, using the embedded algorithm chip, the provisional data, wherein verifying the provisional data comprises:
decrypting, using the private key, the provisional data;
generating, using a predetermined one-time password generation algorithm and based on the provisional data, a one-time password;
determining whether a length of the generated one-time password meets a predetermined value; and
if the length of the generated one-time password meets the predetermined value, indicating that the provisional data is verified.

10. The non-transitory, computer-readable medium of claim 6 , wherein the intelligent wearable device and the intelligent terminal are wired or wirelessly connected, and wherein the wireless connection includes a short-distance wireless communication mode.

11. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;

after receiving the request from the intelligent terminal, storing, by the intelligent wearable device, provisional data that has been successfully verified by the intelligent terminal;
invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the provisional data, a one-time password;
providing, for display by a computer display of the intelligent wearable device, the one-time password; and
prior to storing the provisional data:
obtaining, using the micro operating system, a public key of public key and private key pair from the embedded algorithm chip, wherein the public key and private key pair are generated by the embedded algorithm chip using an asymmetric encryption algorithm;
sending, using the intelligent terminal, the public key to a provisioning server; obtaining the provi

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Wang Xiaochen
• Sun Yuanbo
• Meng Fei
• Huang Mian

Classifications

• H04L9/40

  Network security protocols · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• H04L63/0838 Primary

  using one-time-passwords · CPC title