Patent ID: 8719952

Claim:
A mobile communication device comprising at least one processor and memory, wherein the mobile communication device: performs an authentication initialization sequence comprising: generating an asymmetric public key cryptography key pair comprising a private key and a corresponding public key, transmitting the public key to an authentication server system for storage, in response to transmitting the public key to the authentication server system, removing all copies of the public key from the mobile communication device, to prevent an attacker who has gained unauthorized access to the mobile communication device from gaining access to the public key, and storing on the mobile communication device the private key in encrypted form, the private key comprising a modulus N and a private exponent d; receives from the authentication server system a login session authentication confirmation request generated in response to a user request to log into a service provider; receives a user input indicating a user authorization of the user request to log into the service provider; decrypts the private key using a user-entered password; sends to the authentication server a token encrypted using the decrypted private key; receives from the authentication server a confirmation that the user-entered password is correct, the confirmation that the user-entered password is correct being indicative of a confirmation by the authentication server that the public key stored by the authentication server corresponds to the decrypted private key; and employs the decrypted private key to securely send to the authentication server system an indicator of the user's acceptance of the login session authentication confirmation request.