Patent ID: 8474025

Claim:
A method comprising: receiving, by a computer-based system for performing credential validation, initial credentials and a user identifier; encrypting, by said computer-based system and using a user public key, said initial credentials to create modified credentials, wherein said modified credentials cannot be decrypted by an authentication server; adding, by said computer-based system, a first user signature to said modified credentials using a user private key to create signed modified credentials; embedding, by said computer-based system, said user identifier and said signed modified credentials within a message, wherein said message is encrypted using an authentication server public key; adding, by said computer-based system, a second user signature to said message using said user private key; transmitting, by said computer-based system, said message to said authentication server, wherein said authentication server validates said second user signature, decrypts said message, and stores said signed modified credentials and said user identifier; receiving, by said computer-based system and in response to a request by said computer-based system, said signed modified credentials from said authentication server; validating, by said computer-based system, said first user signature using said user public key; decrypting, by said computer-based system, said modified credentials using said user private key; and, performing, a by said computer-based system, a credential validation procedure to determine whether a credential match threshold is met.