Patent ID: 9642005
Date: 2017-05-02
CPC Classifications: G06F,G06Q,H04L,H04W

Claim:
1. A non-transitory computer-readable medium embodying a computer program for authenticating a user based on a mobile device by a server data processing system, the computer program comprising computer-readable program code for: generating, by the server data processing system, a first message including a first session identifier uniquely identifying a session established between the server data processing system and a user data processing system, the user data processing system including a physical interface, the user data processing system separate from the mobile device; sending the first message to the user data processing system for delivery to the mobile device through the physical interface of the user data processing system; in a first authentication mode, authenticating, by the server data processing system, the user for the session based on receiving a response message including a second session identifier, a user identifier, and a digital signature based on a private key of the mobile device associated with the user, the response message being received through an interface that is separate from the user data processing system; matching the first session identifier and the second session identifier; and identifying that the response message includes the digital signature based on the private key of the mobile device; and in a second authentication mode that is different than the first authentication mode, authenticating, by the server data processing system, the user for the session based on receiving, from the user data processing system through the session, an authentication code generated by the mobile device.