Patent ID: 8606234

Claim:
A method comprising: sending from a mobile device to a provisioning service a first request for a secret using a communications method other than a Short Message Service communications method, wherein the secret is used by the mobile device as a basis for generating One-Time Passwords, wherein the Short Message Service communications method is an out-of-band communications method, wherein the first request comprises a mobile device identifier of the mobile device comprising at least one of a telephone number of the mobile device, a mobile identification number of the mobile device, or an electronic identification number of the mobile device; receiving from the provisioning service at the mobile device a Short Message Service message using the Short Message Service communications method, wherein the Short Message Service message comprises an authentication credential, wherein the authentication credential comprises a nonce and the mobile device identifier; sending from the mobile device to the provisioning service a second request for the secret using a communications method other than the Short Message Service communications method, wherein the second request comprises the nonce received from the provisioning service and the mobile device identifier; receiving the secret from the provisioning service at the mobile device over a communications method other than the Short Message Service communications method in response to a determination that the nonce and the mobile device identifier sent in the Short Message Service message from the provisioning service to the mobile device correspond to the nonce and the mobile device identifier received from the mobile device in the second request; and storing the secret at the mobile device.