Patent ID: 11936649
Assignee: ENTERSEKT INTERNATIONAL LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer implemented method for multi-factor authentication conducted at a software application executing on a user device associated with a user and connected to a server computer, the method comprising:
obtaining signing or encryption of a set of data elements using a cryptographic key securely stored for exclusive use by the software application and transmitting the signed or encrypted data elements to the server computer without requiring entry of a password;
transmitting, to the server computer, a payload including contextual data which includes behavioural data collected via one or more contextual data sources, wherein the signed data elements represent a possession factor and the payload including contextual data represents an inherence factor for validation and multi-factor authentication by the server computer; and,
in response to validation of the possession and inherence factors by the server computer and authentication of the user by these two factors, receiving an access token from the server computer.