Patent ID: 8332627
Filing Date: 2012-12-11
Classification: G06F,H04L

Abstract:
1. A method of mutual authentication between an authentication server and a user comprising the steps of: an authentication server verifying a source of a request received at the authentication server from a first page displayed in a user device; responsive to the verified request, the authentication server presenting a secured object to a second page in the user device, wherein the secured object is secured with respect to the second page and includes a passphrase, known by a user, and a credentials input text field, wherein the second page is different from the first page, wherein the passphrase is displayed on the second page only when the second page has a keyboard focus, and wherein the credentials input text field, but not the passphrase, is displayed when the second page does not have the keyboard focus; wherein the presenting the passphrase to the user allows the user to authenticate the authentication server and allows the user to supply credentials of the user if the user successfully authenticates the authentication server from the passphrase; the authentication server not obtaining the credentials of the user if an authentication of the authentication server by the user failed; the authentication server obtaining the credentials of the user in response to a successful authentication of the authentication server by the user from the passphrase; and the authentication server validating the credentials; wherein the method is performed by one or more processors.