Patent ID: 8370638

Claim:
A method for use in a network in which a user having a user device that stores a master seed authenticates through a client-side device to another entity on the network, the client side device being located between the user device and the other entity, the method comprising: in the other entity, receiving from the client-side device a unique identifier identifying the client-side device; in the other entity, mathematically combining a secret with the unique identifier for the client device to generate a derivative seed, wherein the secret is derived from the master seed; sending the derivative seed from the other entity to the client-side device; and in the client-side device: receiving the derivative seed; and after receiving the derivative seed, disconnecting the client-side device from the network; wherein the method further comprises, in the user device: receiving the unique identifier for the client-side device; mathematically combining the at least the unique identifier for the client device with the secret to generate the derivative seed; and using the derivative seed to authenticate the user device to the client-side device while the client-side device is disconnected from the network, the client-side device being unable to communicate with the other entity while the client-side device is disconnected from the network.