Method and system for providing zero sign on user authentication

摘要

An approach for receiving a request for an authentication code for presentation in an authentication user interface, wherein the request is from a relying party and wherein the authentication user interface is presented by the relying party at a first device. The approach further involves transmitting the authentication code to the relying party. The approach also involves authenticating a user with respect to the relying party by determining that a second device associated with the user has read the authentication code from the authentication user interface of the first device, wherein the second device is a previously authenticated device.

主权项

1. A method for zero sign on authentication of a user comprising:
receiving at an authentication server a request sent over a communication network from a relying party for an authentication code for presentation in an authentication user interface, wherein the authentication user interface is presented by the relying party at a first device, and wherein the request includes a selection by the user of a format that the authentication code should be in, the authentication server comprising a processor and a memory that stores registered devices and user profiles associated with the registered devices, wherein the processor:
transmits the authentication code over the communication network to the relying party;receives the authentication code transmitted over the communication network from a second device associated with the user;authenticates the user at a first level of authentication with respect to the relying party by determining that the second device associated with the user has read the authentication code from the authentication user interface of the first device and the second device is a previously registered device,wherein reading the authentication code from the authentication user interface of the first device with the second device for authenticating the user and transmitting the read authentication code over the communication network from the second device associated with the user includes no decoding of the authentication code;transmits a message regarding a status of the zero sign on authentication of the user over the communication network to the second device for presentation to the user; and sends a request to the second device for the user to provide a second level of authentication in response to the user undertaking an activity requiring a higher level of authentication than the first level of authentication,wherein the second level of authentication is a biometric authentication.