Patent ID: 8245030

Claim:
A computer-implemented method for performing a one-time user setup for authenticating a user and a specific computer using a service provider server and an authentication server, said user communicating with at least one of said service provider server and said authentication server using a user browser, comprising: receiving, by said authentication server, an identity profile from said service provider server; generating, using said authentication server, a Pre-Authorization Anchor (PAA) in response to receiving the identity profile, wherein said Pre-Authorization Anchor (PAA) is a unique identifier associated with said user browser; communicating the PAA to said user browser, wherein said PAA is used in an ensuing authorization procedure; generating, using said authentication server, a Server Fingerprint (SFP) for the user browser; generating, using said authentication server, an activation code; after generating the PAA and SPF, transmitting, using said authentication server, said activation code to said user browser via an out-of-band communication channel; using the activation code, provided from the user browser, to establish a secure communication channel between the service consumer browser and the service provider server; receiving, using said authentication server, via the secure communication channel a client fingerprint (CFP), wherein the CFP is encoded using a key that is based on the SPF; and sending, using said authentication server, a rolling key challenge (RKC) to said user browser via the secure communication channel.