Mobile secure login system and method

摘要

A mobile secure login method comprises steps of 1) displaying a machine readable graphic form encoded with a sign in URL and a unique token on a browser, wherein the said machine readable graphic form comprises at least one of a 1D barcode, a 2D barcode, a PDF417, an QR code, a Data Matrix code, an Aztec code, and OCR symbol; 2) scanning the said machine readable graphic form using a mobile device; 3) transmitting the sign in credential with the said unique token to a server at the said sign in URL from the said mobile device, wherein the said sign in credential comprises at least one of a username, a password, and a PKI signed challenge; 4) authenticating the said sign in credential at the said server to enable the said browser login to a secure website automatically.

主权项

1. A method to login to a secure website using a mobile device comprising:
store on said mobile device a plurality of credentials related to a plurality of accounts owned by a user; display a machine readable graphic form encoded with a sign in URL, and a unique token on a browser of a computing device, wherein said unique token is randomly generated by a server and associated with a sign in page session on said browser; scan said machine readable graphic form using said mobile device; decode by said mobile device said machine readable graphic and extract said sign in URL and said unique token; detect by said mobile device that said sign in URL is related to said a plurality of accounts owned by said user; display a list of said a plurality of accounts to said user on said mobile device to select at least one account; determine by said mobile device a sign in credential associated with said at least one selected account; transmit said sign in credential with said unique token to a server at said sign in URL from said mobile device; authenticate said sign in credential at said server to enable said browser to login to said secure website automatically.