Patent ID: 8713661
Filing Date: 2014-04-29
Classification: G06F

Abstract:
1. A computer-implemented method comprising: authenticating an authentication service and a user based on presentation of a token by the user by: receiving, at the authentication service, a token identifier from the token; based on the received token identifier, accessing, by the authentication service, a user identifier known only by the authentication service and by the token; completing a mutual authentication of the authentication service and the user based on the user identifier; receiving, at the authentication service and from the token, in response to completion of mutual authentication, the user identifier, the user identifier being different from the token identifier and absent from any memory or storage associated with the authentication service prior to the receipt of the user identifier from the token; authenticating, by the authentication service, a service provider; and subsequent to authenticating the authentication service, the user and the service provider, providing the service provider with access to data comprising: