Patent ID: 8601268

Claim:
A computer-implemented method for securing an online transaction, comprising: generating from an electronic device a request to perform an online transaction; generating from an online security server a challenge request in response to the request; encrypting the challenge request with a user private key stored in the electronic device; outputting the encrypted challenge request to the online security server; decrypting the encrypted challenge request from the online security server with a user public key corresponding to the user private key; comparing by the online security server the decrypted challenge request and the challenge request generated by the online security server; encrypting user information with an authorizer public key in the electronic device in response to the comparison, the user information provided from the electronic device; outputting the encrypted user information from the electronic device; decrypting the encrypted user information by an authorizing party with an authorizer private key corresponding to the authorizer public key; and outputting a result from the authorizing party.