Patent ID: 8091122

Claim:
An apparatus comprising a processor and memory including computer program code, the memory and computer program code configured to, with the processor, cause the apparatus to: direct storage of a password at a password provisioning module (PPM); direct generation of the password at a password generating module in operable communication with the PPM; direct generation of an authentication response from the password in response to a request from a client application, the authentication response being generated by a response generation module (RGM) in operable communication with both the client application of a mobile terminal and the PPM, the mobile terminal having processing and memory resources separate from the processor and the memory, the RGM being disposed at a user identity module (UIM) of the mobile terminal to enable generation of the authentication response at the UIM for provision of the authentication response to the client application; and direct verification of a request for a server digest response and generation of a verification result in response to a request from the client application via a response verification module (RVM) in operable communication with both the client application and the PPM, wherein the apparatus further comprises the UIM and the UIM is configured to enable sending the password from the PPM to the RGM such that the password never leaves the UIM.