Patent ID: 9219732
Filing Date: 2015-12-22
Classification: H04L

Abstract:
1. A method comprising: generating a first random challenge comprising a first randomly-generated code at a server; transmitting the first random challenge and an indication of a timeout period associated with the first random challenge from the server to a client; automatically detecting at the client that the first random challenge comprising the first random code is no longer valid based on the timeout period; responsively transmitting a request for a new random challenge from the client to the server, wherein transmitting is performed without user intervention; generating a new random challenge comprising a new randomly-generated code at the server responsive to the request for the new random challenge received from the client, and transmitting the new randomly-generated code and an indication of a timeout period associated with the new random challenge to the client; using the new randomly-generated code when registering one or more authentication devices on the client with the server or a different server and/or when authenticating the user with the server or a different server using the one or more authentication devices, wherein during the operations of registering the authentication devices or authenticating the user, the new randomly-generated code, a signature generated over the new randomly-generated code, and/or an encrypted version of the new randomly-generated code, is transmitted from the client to the server, and validating the new randomly-generated code at the server to confirm the operations of registering the authentication devices and/or authenticating the user.