Patent ID: 11936649
Assignee: ENTERSEKT INTERNATIONAL LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A computer implemented method for multi-factor authentication carried out at a server computer connected to a software application executing on a user device associated with a user, the method comprising:
receiving, from the software application, signed or encrypted data elements, the signed or encrypted data elements representing a possession factor and having been obtained by the software application using a cryptographic key securely stored for exclusive use by the software application without requiring entry of a password;
receiving a payload including contextual data which includes behavioural data collected by the software application and representing an inherence factor;
validating the possession factor including validating the signed or encrypted data elements using a corresponding cryptographic key associated with the software application;
validating the inherence factor including validating the contextual data against a user profile associated with the software application; and,
in response to validation of the possession and inherence factors by the server computer and authentication of the user by these two factors, transmitting an access token from the server computer to the software application.