Patent ID: 7516483
Filing Date: 2009-04-07
Classification: G06F,H04L

Abstract:
1. A method of implementing token-based electronic security across multiple secure web sites, in which a user has a security token, wherein the security token authenticates its user based on a first authentication factor, comprising: storing unique token identification information, and a seed value of each security token, in a security system on a token authenticating web site; requiring the user, upon login to a secure web site, to enter at least a token code generated by the user's security token and data corresponding to a second authentication factor different from the first authentication factor; authenticating the user based on the second authentication factor using the secure web site; passing the user's token code from the secure web site to the security system on the token authenticating web site if the authenticating is successful; verifying whether or not the user's token code was generated by the user's token using the security system on the token authenticating web site; and passing a result of the verifying from the token authenticating web site, to the secure web site, to authorize access to services provided by the secure web site.