Patent ID: 7861077

Claim:
A secure user authentication system, operable over client server communications network to authenticate a system user, comprising: an application server, in the client-server communications network, which includes a site, wherein the site is able to be enabled to comprise an enabled application server site; an authentication server, in the client-server communications network, which is able to enable the application server site to comprise the enabled application server site, which authentication server includes a core database, and which receives and stores user authentication-enabling data in the core database; a client, in the client-server communications network, wherein the client further includes a client browser program, and the authentication server is able to write a cookie to the client browser program, which cookie includes a label, and a unique certificate, embedded in the cookie; and a client token, which includes the user authentication-enabling data, and which, upon actuation thereof, automatically directly connects to the authentication server and sends the client authentication-enabling data to the authentication server for secure user authentication by the authentication server, and which does not send the user authentication-enabling data to the enabled application server site, wherein the client token label verifies the enabled application server site, and which enables the action that the user is undertaking, wherein the client token enables a passcode selected by the user to be entered thereinto, and the user authentication-enabling data received and stored in the authentication server core database includes the user-selected passcode, the client token includes a serial number embedded therein, and the client authentication-enabling data includes the client token embedded serial number, and the client token, upon activation thereof, reads the authentication server cookie and extracts the certificate, and runs the combined certificate, serial number, and passcode through a one-time hash, generating a client program hash output.