Patent ID: 8880885

Claim:
A computer-implemented method for web-based authentication, the method being executed using one or more processors and comprising: receiving, by the one or more processors, user credentials input to a browser executed on a client-side computing device, the client-side computing device comprising the one or more processors; transmitting, by the one or more processors, a first request to an application executed on a server-side computing device, the first request comprising a first user credential; receiving, by the one or more processors, a first response, the first response comprising an encrypted server public key (SPK) and a user-specific salt value; decrypting, by the one or more processors, the encrypted SPK to provide a SPK, the encrypted SPK being decrypted based on the user-specific salt value and a second user credential; determining, by the one or more processors, a browser public key (BPK) and a client-side session signing key (SSK); encrypting, by the one or more processors, the BPK to provide an encrypted BPK; transmitting, by the one or more processors, a second request to the application, the second request comprising the encrypted BPK and a request signature, the request signature having been provided based on the client-side SSK; and receiving, by the one or more processors, a second response, the second response comprising a response signature and indicating that a user has been authenticated by the application.