System and method for one time password authentication

Abstract

A method for authenticating an online service site in an authentication system includes: receiving, by the authentication server, from the service server, a service OTP generation request including user identification information related to a user who intends to access the online service site; acquiring, by the authentication server, a user seed value related to each user identification information from the seed server in response to the service OTP generation request; generating, by the authentication server, a service OTP, and transmitting the generated service OTP to the service server; and displaying, by the service server, the service OTP in an online service site which the user accesses, wherein the user compares a service OTP generated by a mobile terminal.

1 . A method for authenticating an online service site in an authentication system including a service server for providing the online service site, an authentication server for generating a service OTP for the service server, and a seed server for providing a user seed value to the authentication server while communicating with the authentication server, the method including:
 receiving, by the authentication server, from the service server, a service OTP generation request including user identification information related to a user who intends to access the online service site;   acquiring, by the authentication server, a user seed value related to each user identification information from the seed server in response to the service OTP generation request;   generating, by the authentication server, a service OTP, and transmitting the generated service OTP to the service server; and   displaying, by the service server, the service OTP in an online service site which the user accesses, wherein the user compares a service OTP generated by a mobile terminal, wherein the service OTP is generated by using the user seed value, acquired by the user identification information, with the service OTP displayed in the online service site, thereby authenticating the online service site.