Patent ID: 11882226
Assignee: WELLS FARGO BANK, N.A.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. A system comprising:
a network interface structured to facilitate data transmission over a network; and
a computer system comprising a processor and instructions stored in non-transitory machine-readable media, the instructions configured to cause the computer system to:
generate a cryptographic key using a first substitution string as an input to a password authenticated key exchange protocol,
transmit, to a relying party computing system, a first message comprising a first challenge response in response to a first challenge question, a second challenge question, and a user identifier identifying a user,
wherein the first challenge response is encrypted using the cryptographic key, and
wherein the encrypted first challenge response can be verified by the relying party computing system by generating the cryptographic key using the first substitution string as an input to the password authenticated key exchange protocol;

receive, from the relying party computing system, a second message comprising an encrypted second challenge response, the encrypted second challenge response generated by encrypting a second challenge response using the cryptographic key generated by the relying party computing system, the second challenge response being responsive to the second challenge question;
decrypt the encrypted second challenge response using the cryptographic key to generate the second challenge response; and
verify the second challenge response to provide mutual authentication between the system and the relying party computing system.