Identity verification method and system, and intelligent wearable device

Patent metadata

Field	Value
Publication number	US-10891364-B2
Application number	US-201816186125-A
Country	US
Kind code	B2
Filing date	Nov 9, 2018
Priority date	May 11, 2016
Publication date	Jan 12, 2021
Grant date	Jan 12, 2021

Abstract

A request is received from an intelligent terminal by an intelligent wearable device for enabling a one-time password function, and the intelligent wearable device is configured with an embedded algorithm chip. Provisional data from a provisioning server is obtained using the intelligent terminal. The provisional data is verified. If the provisional data is verified, the verified provisional data is stored on the intelligent wearable device. Using a micro operating system, the embedded algorithm chip is invoked to generate a one-time password, and the one-time password is displayed on a computer display of the intelligent wearable device. The one-time password is configured to permit a verification server to verify the intelligent wearable device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;
after receiving the request from the intelligent terminal, generating, by the intelligent wearable device, a public key and a private key from the embedded algorithm chip;
transmitting, by the intelligent wearable device, the public key to the intelligent terminal;
receiving, by the intelligent wearable device and from a provisioning server, encrypted provisional data that has been encrypted by the intelligent terminal using the public key;
decrypting, by the embedded algorithm chip of the intelligent wearable device, the encrypted provisional data using the generated private key to generate decrypted provisional data;
verifying the decrypted provisional data;
after verifying the decrypted provisional data, invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the decrypted provisional data, a one-time password; and
providing, for output by the intelligent wearable device, the one-time password for use by a verification server in verifying the intelligent wearable device.

2. The computer-implemented method of claim 1 , wherein the provisional data includes seed data and a server timestamp.

3. The computer-implemented method of claim 1 , further comprising:
verifying, using a verification server, the one-time password displayed on a computer display of the intelligent wearable device, wherein verifying the one-time password comprises:
receiving, at the verification server, the one-time password from a merchant device, wherein the merchant device obtains the one-time password by scanning the one-time password displayed on the computer display of the intelligent wearable device;
obtaining a local one-time password corresponding to a current moment; and
verifying the one-time password by determining whether the one-time password is consistent with the local one-time password.

4. The computer-implemented method of claim 1 , wherein verifying the decrypted provisional data comprises:
decrypting, using the private key, the provisional data;
determining whether a length of the generated one-time password meets a predetermined value; and
if the length of the generated one-time password meets the predetermined value, indicating that the provisional data is verified.

5. The computer-implemented method of claim 1 , wherein the intelligent wearable device and the intelligent terminal are wired or wirelessly connected, and wherein the wireless connection includes a short-distance wireless communication mode.

6. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;
after receiving the request from the intelligent terminal, generating, by the intelligent wearable device, a public key and a private key from the embedded algorithm chip;
transmitting, by the intelligent wearable device, the public key to the intelligent terminal;
receiving, by the intelligent wearable device and from a provisioning server, encrypted provisional data that has been encrypted by the intelligent terminal using the public key;
decrypting, by the embedded algorithm chip of the intelligent wearable device, the encrypted provisional data using the generated private key to generate decrypted provisional data;
verifying the decrypted provisional data;
after verifying the decrypted provisional data, invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the decrypted provisional data, a one-time password; and
providing, for output by the intelligent wearable device, the one-time password for use by a verification server in verifying the intelligent wearable device.

7. The non-transitory, computer-readable medium of claim 6 , wherein the provisional data includes seed data and a server timestamp.

8. The non-transitory, computer-readable medium of claim 6 , further comprising:
verifying, using a verification server, the one-time password displayed on a computer display of the intelligent wearable device, wherein verifying the one-time password comprises:
receiving, at the verification server, the one-time password from a merchant device, wherein the merchant device obtains the one-time password by scanning the one-time password displayed on the computer display of the intelligent wearable device;
obtaining a local one-time password corresponding to a current moment; and
verifying the one-time password by determining whether the one-time password is consistent with the local one-time password.

9. The non-transitory, computer-readable medium of claim 6 ,
wherein
verifying the decrypted provisional data comprises:
decrypting, using the private key, the provisional data;
determining whether a length of the generated one-time password meets a predetermined value; and
if the length of the generated one-time password meets the predetermined value, indicating that the provisional data is verified.

10. The non-transitory, computer-readable medium of claim 6 , wherein the intelligent wearable device and the intelligent terminal are wired or wirelessly connected, and wherein the wireless connection includes a short-distance wireless communication mode.

11. A computer-implemented system, comprising:
one or more computers; and
one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
receiving, by an intelligent wearable device that includes an embedded algorithm chip that implements a one-time password algorithm, a request from an intelligent terminal for enabling a one-time password function;
after receiving the request from the intelligent terminal, generating, by the intelligent wearable device, a public key and a private key from the embedded algorithm chip;
transmitting, by the intelligent wearable device, the public key to the intelligent terminal;
receiving, by the intelligent wearable device and from a provisioning server, encrypted provisional data that has been encrypted by the intelligent terminal using the public key;
decrypting, by the embedded algorithm chip of the intelligent wearable device, the encrypted provisional data using the generated private key to generate decrypted provisional data;
verifying the decrypted provisional data;
after verifying the decrypted provisional data, invoking, using a micro operating system of the intelligent wearable device, the embedded algorithm chip to generate, based on the one-time password algorithm and the decrypted provisional data, a one-time password; and
providing, for output by the intelligent wearable device, the one-time password for use by a verification server in verifying the intelligent wearable device.

12. The computer-implemented system of claim 11 , wherein the provisional data includes seed data and a server timestamp.

13. The computer-implemented system of claim 11 , further comprising:

Assignees

• Advanced New Technologies Co Ltd

Inventors

• Wang Xiaochen
• Sun Yuanbo
• Meng Fei
• Huang Mian

Classifications

• H04L9/40

  Network security protocols · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• G06F2221/2103

  Challenge-response · CPC title

• G06F2221/2151

  Time stamp · CPC title

• H04L2209/12

  Details relating to cryptographic hardware or logic circuitry · CPC title