Account provisioning authentication

摘要

Embodiments of the present invention are directed to methods, systems, and apparatuses for providing a secure authentication scheme for authenticating users and accounts on behalf of a service provider server computer offering services to a user. Upon determining, by the secure authentication scheme, that the user and/or account identifier associated with the user is authenticate, the service provider server computer may be provided with assurance that the user is authenticate and thereafter provide a service requested by the user.

主权项

1. A method comprising:
receiving, at an access control server computer via a directory server, a service provider request message from a service provider server computer comprising an account identifier; determining, by the access control server computer, that the account identifier is enrolled in an authentication program; in response to determining that the account identifier is enrolled in the authentication program, transmitting an authentication request message requesting authentication data, to a mobile communication device used by a user associated with the account identifier; receiving an authentication response message from the mobile communication device comprising the requested authentication data; determining that the requested authentication data in the authentication response message matches authentication data stored in a database; and initiating an action relating to the mobile communication device and the account identifier when the requested authentication data in the authentication response message matches the authentication data stored in the database, wherein the action comprises:
requesting a trusted service manager system to provision the account identifier on to the mobile communication device.