Patent ID: 11936649
Assignee: ENTERSEKT INTERNATIONAL LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 15:
16. A system for multi-factor authentication including a software application executing on a user device associated with a user and connectable to a server computer, the user device having a memory for storing computer-readable program code and a processor for executing the computer-readable program code, the user device comprising:
a signature/encryption obtaining component for obtaining signing or encryption of a set of data elements using a cryptographic key securely stored for exclusive use by the software application and transmitting the signed or encrypted data elements to the server computer without requiring entry of a password;
a payload transmitting component for transmitting, to the server computer, a payload including contextual data which includes behavioural data collected via one or more contextual data sources,
wherein the signed data elements represent a possession factor and the payload including contextual data represents an inherence factor for validation and multi-factor authentication of the user by the server computer; and,
a token receiving component for, in response to validation of the possession and inherence factors by the server computer and authentication of the user by these two factors, receiving an access token from the server computer.