Authentication system

Abstract

A two way authentication method, including receiving by an authentication server first encrypted data from a merchant computing device, receiving by the authentication server second encrypted data from a customer computing device, determining by the authentication server if the first encrypted data matches the second encrypted data, if the first encrypted data matches the second encrypted data, authenticating the customer computing device, if the first encrypted data does not matches the second encrypted data, not authenticating the customer computing device.

What is claimed is: 
     
         1 . An authentication method, comprising:
 generating, on a merchant device, first encrypted data comprising an identifier for the merchant device, a first transaction identifier, and time, encrypted using a first randomly generated key;   encrypting the first randomly generated key using a first public key to generate a first encrypted key;   combining the first encrypted key and the first encrypted data to generate at least one image code, wherein the at least one image code is specific to the time and place of generation;   generating a video of a rotating three-dimensional shape wherein the rotating three-dimensional shape is skinned with the at least one image code, and rotated at a specific rate and a specific direction based upon time;   displaying the video on a display device for capture by a consumer device;   receiving a push notification from an authentication server of a second transaction identifier, an identifier for the consumer device, and a second randomly generated key, wherein the authentication server:
 receives from the consumer device a second encrypted data including the at least one image code, rate of rotation, rotation direction and identifier for the consumer device, encrypted using the second randomly generated key from the consumer device, and the second encrypted key generated by encrypting the second randomly generated key using a second public key; 
 decrypts the second random key using a private key corresponding to the second public key, the second encrypted data using the decrypted second random key, the first random key using another private key corresponding to the first public key, and the time, merchant identifier and the first transaction identifier using the decrypted first random key; 
 calculates a correct rate of rotation and direction of rotation using the decrypted time; and 
   authenticating the consumer device if the first transaction identifier matches the second transaction identifier and the first randomly generated key matches the second key.   
     
     
         2 . The method of  claim 1 , wherein the at least one image code is a picture image. 
     
     
         3 . The method of  claim 1 , wherein the at least one image code is a barcode. 
     
     
         4 . The method of  claim 1 , wherein the at least one image code is a QR code. 
     
     
         5 . The method of  claim 1 , wherein the rotating three-dimensional shape is a rectangular prism. 
     
     
         6 . The method of  claim 1 , wherein the rotating three-dimensional shape is a triangular prism. 
     
     
         7 . The method of  claim 1 , wherein the rotating three-dimensional shape is a hexagonal prism. 
     
     
         8 . The method of  claim 1 , wherein the rotating three-dimensional shape is a triangular pyramid. 
     
     
         9 . The method of  claim 1 , wherein the rotating three-dimensional shape is a triangular tetrahedron. 
     
     
         10 . The method of  claim 1 , wherein the rotating three-dimensional shape is a cylinder. 
     
     
         11 . The method of  claim 1 , wherein the rotating three-dimensional shape is a cone. 
     
     
         12 . The method of  claim 1 , wherein the rotating three-dimensional shape is a sphere. 
     
     
         13 . An article of manufacture comprising a non-transitory computer readable medium having computer readable program code encoded therein to perform authentication of a customer computing device located adjacent to a merchant computing device, the computer readable program code comprising a series of computer readable program steps to effect:
 generating, on a merchant device, first encrypted data comprising an identifier for the merchant device, a first transaction identifier, and time, encrypted using a first randomly generated key;   encrypting the first randomly generated key using a first public key to generate a first encrypted key;   combining the first encrypted key and the first encrypted data to generate at least one image code, wherein the at least one image code is specific to the time and place of generation;   generating a video of a rotating three-dimensional shape wherein the rotating three-dimensional shape is skinned with the at least one image code, and rotated at a specific rate and a specific direction based upon time;   displaying the video on a display device for capture by a consumer device;   receiving a push notification from an authentication server of a second transaction identifier, an identifier for the consumer device, and a second randomly generated key, wherein the authentication server:
 receives from the consumer device a second encrypted data including the at least one image code, rate of rotation, rotation direction and identifier for the consumer device, encrypted using the second randomly generated key from the consumer device, and the second encrypted key generated by encrypting the second randomly generated key using a second public key; 
 decrypts the second random key using a private key corresponding to the second public key, the second encrypted data using the decrypted second random key, the first random key using another private key corresponding to the first public key, and the time, merchant identifier and the first transaction identifier using the decrypted first random key; 
 calculates a correct rate of rotation and direction of rotation using the decrypted time; and 
   authenticating the consumer device if the first transaction identifier matches the second transaction identifier and the first randomly generated key matches the second key.   
     
     
         14 . The article of manufacture of  claim 13 , wherein the at least one image code is a picture image. 
     
     
         15 . The article of manufacture of  claim 13 , wherein the at least one image code is a barcode. 
     
     
         16 . The article of manufacture of  claim 13 , wherein the at least one image code is a QR code. 
     
     
         17 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a rectangular prism. 
     
     
         18 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a triangular prism. 
     
     
         19 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a hexagonal prism. 
     
     
         20 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a triangular pyramid. 
     
     
         21 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a triangular tetrahedron. 
     
     
         22 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a cylinder. 
     
     
         23 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a cone. 
     
     
         24 . The article of manufacture of  claim 13 , wherein the rotating three-dimensional shape is a sphere.