Patent ID: 8601264

Claim:
A method of authenticating an entity, the method comprising: sending an authentication request from a computer of a user to an authentication computer, the authenticating request comprising a request for an action that requires authentication of an entity by the authentication computer; receiving at the computer of the user an authentication code from the authenticating computer in response to the authentication request from the computer of the user to the authentication computer, wherein the authentication code comprises a unique value provided to the computer of the user as a challenge to the request for the action that requires authentication; transmitting the authentication code from the computer of the user to a mobile device of the user; receiving at the computer of the user an authentication reply derived by mobile device of the user from the authentication code, wherein the authentication reply comprises a value derived from the authentication code but different from the authentication code; deriving with the computer of the user a password based on the authentication reply, wherein the password comprises a one-time password for the requested action derived from the authentication reply; and transmitting the password from the computer of the user to the authenticating computer to authenticate the entity based on the password.