Patent ID: 8782751

Claim:
A method of user access authentication, the method comprising: receiving by a first network access point a first authentication request from a second network access point based on a user device access request for accessing a secure data network; sending a second authentication request based on the first authentication request to an identity server wherein the second authentication request is associated with the second network access point; obtaining from the user device access request a first network access point identity of the first network access point and a second network access point identity of the second network access point; determining at the identity server whether to grant a user device access to the secure data network by comparing a user identity and the first and second access point identities to a stored plurality of user identities and corresponding validated pairs of network access point identities; and granting access to the secure data network when the user identity and the access point identities obtained match with one of the stored plurality of user identities and its corresponding validated pair of network point identities.