Chris
You can read a mechanism called One Time Passwords (OTPs).
http://en.wikipedia.org/wiki/One-time_password
You can design your OTP application when it tries to connect to your web service. The responsibility for OTP authentication is in the web service.
. , , 256- , -. -, , OTP. OTP " " ( google ). , (OTP Validator) , ( + - n ) n. , OTP OTP . OTP HASH OTP ( , ).
, , - (, OTP ). , . , . , , , , OTP. . , OTP. , "-" "public-id" . "-id", OTP , , . "-id" "-" , "-id" OTP.
, , OTP + "public-id" . , - -.
, .
Ujjwal