Patent ID: 9003506
Filing Date: 2015-04-07
Classification: H04L

Abstract:
1. A method of authenticating an application session at a client machine, the method comprising: receiving a request for the application session from the client machine; sending an authentication token to the client machine after receiving the request from the client machine; receiving values for the authentication token and values for user identification from a mobile communication device after sending the authentication token to the client machine; using the user-identification values to identify a registered user of the mobile communication device with a mobile service provider corresponding to the mobile communication device; verifying the authentication-token values relative to the authentication token; verifying the user-identification values by verifying that the registered user corresponds to at least one of the request or a user account of an application service corresponding to the application session, the registered user being identified by the user-identification values received from the mobile communication device, and the request for the application session being received from the client machine; and initiating the application session at the client machine after verifying the authentication-token values and the user-identification values.