Patent ID: 8893244

Claim:
A method, comprising: receiving, by a device and from an application server device hosting an application, a request to authenticate an end user of a user device to use the application, based on an application identifier and a user identifier included in the request; retrieving, by the device and responsive to the request, stored personal identification number (PIN) information corresponding to the user identifier; sending, by the device and responsive to the request, a message to the user device that triggers a generic bootstrapping architecture (GBA) authentication procedure and requests the end user to provide a PIN; determining, by the device, whether the application is authenticated based on the application identifier; determining, by another device and based on a response received from the user device wherein the request received from the user device includes a first digest calculated from a shared GBA key generated using the GBA authentication procedure, whether the first digest matches a second digest calculated by the other device from the shared GBA key; utilizing the shared GBA key to securely receive the PIN associated with the end user from the user device; determining, by the device and responsive to the matching of the first and second digests, whether the end user is authenticated based on a comparison of the stored PIN information and the PIN provided by the end user; and providing, by the device and to the application server device hosting the application, results of the authentications of the application, the user device, and the end user.