Patent ID: 7558964

Claim:
A method comprising: receiving a user name and a regular password associated with the user name via a trusted client, wherein a user associated with the user name trusts the trusted client to be a more secure mechanism for accessing secure information than a non-trusted client; authenticating the user name and the regular password and granting access to the secure information in response to the receiving the user name and the regular password; receiving a plurality of cues, a plurality of respective associated one-time passwords, and a presentation order of the plurality of cues from the user in response to the authenticating the user name and the regular password and in response to a request from the user; associating the plurality of cues and the plurality of one-time passwords with the user name; receiving a cue request, the user name, and a specification that the user associated with the user name does not trust the non-trusted client; presenting a presented cue of the plurality of cues in response to the receiving the cue request, the user name, and the specification that the user does not trusted the non-trusted client; receiving input data in response to the presenting; determining whether the input data matches the one-time password associated with the presented cue; and granting access to the secure information, invalidating the one-time password that is associated with the presented cue, and removing the presented cue and the associated one-time password from a list of valid one-time passwords and cues if the input data matches the one-time password that is associated with the presented cue.