Patent ID: 9641521
Date: 2017-05-02
CPC Classifications: H04L,H04W

Claim:
1. A computing system, having a hardware processor, communicatively coupled to a public network and configured to authenticate a user having a mobile device, the user attempting to connect to at least one of a plurality of third party application servers over the public network, wherein each of the third party application servers requires separate authentication for access, the computing system comprising: an authentication server system communicatively coupled to the public network for access by a plurality of user devices, including the user's mobile device, the authentication server system having a non-transitory computer-readable medium with a sequence of instructions, which, when executed by the processor, causes the processor to execute an electronic process that can authenticate the user of the mobile device for each of the plurality of the third party application servers; and a user account database coupled to the authentication server system with a non-transitory computer-readable medium that stores information including an account and at least one username for each of the plurality of users, including the user of the mobile device; wherein the electronic process of the authentication server system, comprises: pairing the username of the user to the user's mobile device, receiving an authentication request from a particular one of the plurality of the third party application servers, the authentication request including first verification data and the username of the user of the mobile device, wherein the first verification data is used to determine whether the authentication request is valid, when the authentication request is valid, then notifying the mobile device of said authentication request, receiving encrypted data and second verification data from the mobile device, the encrypted data having been encrypted by the mobile device, the encrypted data comprising an authentication response and encrypted identification data, the second verification data indicating whether the authentication response is valid, the authentication response authorizing or denying access, the encrypted identification data being decryptable by only the particular third party application server, when the authentication response is valid, sending the encrypted data to the particular third party application server, maintaining an active log of one or more of the third party application servers with which the user has been authenticated and is having an active session, wherein the active log is displayable on the user's mobile device, adding the particular third party application server to the active log when the authentication response is received from the particular third party application server and the authentication response authorizes access, and enabling the user to log off and remove a selected third party application server from the active log using the user's mobile device.