Patent ID: 8751794

Claim:
A computer implemented method executing on a server computer for a user using a client device to login to an account session with the server computer comprising: receiving an access request from user using the client device via a network; sending a two dimensional barcode including a unique login ID to the client device; receiving a user identifier and the unique login ID from a personal user device; using the user identifier to obtain a public key for the user; encrypting a session ID using the public key; encoding the session ID in a second two dimensional barcode; sending the second two dimensional barcode to the client device via the network; receiving from the personal user device the session ID in decrypted form; determining that the session ID received from the personal user device is identical to the session ID included in the second two dimensional barcode; and redirecting the access request from the user using the client device to a signed in account session for the user with the server computer.