Patent ID: 8484710

Claim:
A computer-implemented method of securely sending a network one-time-password (OTP) from a user computer to an authentication server, the method comprising the steps of: receiving through a user interface, a user password comprising a plurality of characters; authenticating by the user computer, a mobile computing device (MCD) communicably coupled to the user computer, wherein the authenticating step verifies that the MCD can properly construct and return to the user computer, a mobile OTP based on information provided by the user computer; receiving by the user computer, a network OTP second factor from the authenticated MCD; modifying by the user computer, the user password received through the user interface in accordance with the network OTP second factor to create the network OTP; and sending the network OTP from the user computer to the authentication server; wherein the user computer includes a mobile server application and the MCD includes a mobile client application, and the step of authenticating the MCD includes the steps of: the mobile server application receiving from the mobile client application, an identifier of the MCD; the mobile server application utilizing the identifier to look up an MCD index value (Index-2) in an identifier/Index-2 database in the user computer; the mobile server application sending the Index-2 value to the mobile client application; the mobile server application receiving a mobile OTP from the mobile client application, wherein the mobile client application constructs the mobile OTP based on a mobile OTP second factor retrieved from an Index-2/mobile OTP second factor database; and the mobile server application authenticating the MCD when the mobile OTP matches a stored mobile OTP in the user computer.