| CPC H04L 63/0853 (2013.01) [H04L 63/0838 (2013.01); H04L 63/20 (2013.01)] | 9 Claims |

|
1. A method performed by a device for generating a virtual code for authentication, comprising:
transmitting time data to a card upon tagging of the card in which an IC chip has been embedded;
receiving, from the card, a virtual code for primary authentication generated based on the time data;
generating a virtual code for secondary authentication by using the virtual code for primary authentication;
transmitting at least one of the virtual code for primary authentication and the virtual code for secondary authentication to a server; and
requesting the server to perform verification on the at least one of the virtual code for primary authentication and the virtual code for secondary authentication,
wherein:
the virtual code for primary authentication comprises a plurality of codes;
a first code of the plurality of codes is generated based on the time data and a first OTP (one-time password); and
a second code of the plurality of codes is generated by excluding, from the first code, first user identification (UID) which is identification information of the card, and
wherein the generating the virtual code for secondary authentication comprises:
generating a third code by excluding, from the first code, second user identification UID, that is,
identification information of the device for generating a virtual code for authentication;
and generating the virtual code for secondary authentication by combining the first code, the second code, and the third code.
|