Patent ID: 8341710

Claim:
A method, comprising receiving, by at least one device and from a user device, a first request to set up an account; receiving, by the at least one device, a shared key, where the shared key is generated based on a private key, of a private key/public key pair corresponding to the user device, information associated with the at least one device, and information regarding an identity selection, from a plurality of user identity information, associated with a user of the user device; storing, by the at least one device, the shared key in a memory; receiving, by the at least one device and from the user device, a second request to log in to the account, where the second request includes a first webtoken generated based on the shared key and a first time interval at which the first webtoken is generated; retrieving, by the at least one device and based on the second request, the shared key stored in the memory; generating, by the at least one device, a second webtoken based on the shared key, retrieved from the memory, and a second time interval at which the second webtoken is generated; comparing, by the at least one device, the second webtoken and the first webtoken; authenticating, by the at least one device, the user device when the second webtoken matches the first webtoken; and permitting, by the at least one device, the user device access to the account based on the authentication.