Patent ID: 8938402
Filing Date: 2015-01-20
Classification: G06Q,G07F

Abstract:
1. A method comprising: sending, by a user device and to a first server, a logon request, the logon request being forwarded to a second server; receiving, by the user device from the first server, a first challenge generated by the second server in response to the forwarded logon request; sending, by the user device to the first server, a challenge response, the challenge response generated in response to receiving the first challenge and a second challenge generated for an intelligent token, wherein the challenge response is based on both the first and second challenges, and wherein the challenge response is sent by the first server to the second server, the intelligent token being verified by the second server; receiving, by the user device from the first server, at least a portion of credentials assembled by the second server in response to the verification of the intelligent token by the second server and being sent by the second server to the first server, the verification being based on the challenge response, the portion of the credentials comprising a key and the credentials associated with the user device; sending, by the user device to the first server, an authentication request for validation and authorization of a transaction, the authentication request being forwarded from the first server to the second server; and receiving, by the user device from the first server, an approval message having been sent by the second server to the first server, the approval message indicative of the validation and authorization of the transaction, the validation and authorization performed by the second server in response to receiving the authentication request from the first server, wherein in response to the approval message, the user device is allowed to proceed with the transaction.