Patent ID: 8713325

Claim:
A method of operating a security server to provide key management layered on a quasi out of band authentication system, comprising: receiving, via a communication channel from a network device associated with a user, a request for activation of a user interface window for that particular user at the network device; transmitting, to an out of band authentication system, an activation personal identification number (PIN) to be forwarded to the user's telephone via a voice or text message; receiving, via the communication channel from the network device, the previously transmitted activation PIN; authenticating the user based on the received activation PIN; establishing, on top of the communication channel after authenticating the user, a secure, independent, encrypted communication channel between the user interface window and the security server; and at least one of (i) generating and transmitting to the user interface window via the secure, independent, encrypted communication channel key material for cryptography based operations and (ii) receiving from the user interface window via the secure, independent, encrypted communication channel, key material for cryptography based operations.