Patent ID: 9215223
Filing Date: 2015-12-15
Classification: G06F,H04L

Abstract:
1. A method for authenticating a virtual identity with a resource accessible through a computer network, the method comprising: registering the virtual identity with the resource by: sending, from an access device to the resource, a first access device key that is specific to the resource; and sending, from the access device to the resource, a first identity repository key that is specific to the resource; and authenticating a use of the virtual identity with the resource by: sending, from the access device to the resource, a request to access the resource using the virtual identity; accessing, by the access device, a resource challenge that is acceptable to the resource; sending, from the access device to an identity repository, the resource challenge; receiving, by the access device and from the identity repository, a first signed resource challenge that is signed by the identity repository using a second identity repository key that is paired with the first identity repository key; signing, by the access device, the resource challenge to generate a second signed resource challenge that is signed by the access device using a second access device key that is paired with the first access device key; sending, from the access device to the resource, the first signed resource challenge and the second signed resource challenge, wherein the resource authenticates the virtual identity using the first signed resource challenge, first access device key, the second signed resource challenge, and the first identity repository key; and receiving, by the access device and from the resource, an authentication result in response to a verification of the first signed resource challenge and the second signed resource challenge by the resource.