Patent ID: 9077714
Filing Date: 2015-07-07
Classification: G06F,G06Q,H04L,H04W

Abstract:
1. A networked system capable of authenticating multiple different users to multiple different service providers, comprising: an authentication server configured to store (i) a provider identifier for each of the multiple different service providers in association with provider authentication policy requirements for the applicable service provider and (ii) a user identifier for each of the multiple different users in association with validation information for the application user; a first device operable by a first of the multiple different users, and configured to transmit a login request to a first of the multiple different service providers via the network; a network server, associated with the first service provider and configured to transmit, to the authentication server via the network, (i) a request for a random number and (ii) other information, wherein the authentication server is configured to transmit a random number to the network server via the network in response to the transmitted random number request, wherein the network server is further configured to further transmit the transmitted random number to the first device via the network in response to the transmitted login request; a second device operable by the first user, and configured (i) to receive an input transferring the further transmitted random number to it from the first device, and (ii) to further transmit the input random number and a request of the first user to be authenticated to the authentication server via the network; wherein the authentication server is further configured to transmit, after transmission by the second device of the random number and authentication request, the stored first provider identifier and the stored associated first provider authentication policy requirements, and to further transmit the transmitted other information, to the second device via the network; wherein the second device is further configured to transmit, in response to the transmitted first provider authentication policy requirements, a first user identifier and user input validation information to the authentication server via the network; wherein the authentication server is further configured to match the transmitted first user identifier to the stored first user identifier, to determine that the transmitted validation information corresponds to the stored first service provider authentication policy requirements, and to compare the transmitted validation information with the validation information stored in association with the first user identifier to authenticate the first user; wherein the second device is further configured to transmit a message, including the transferred random number and the further transmitted other information, signed with a credential of the first user, to the authentication server via the network; and wherein the authentication server is further configured to transmit notice of authentication of the first user and to further transmit the received signed message to the network server via the network.