CREDENTIAL-FREE IDENTIFICATION AND AUTHENTICATION

摘要

A method of authenticating a user so that the user can access a website without entering a unique user credential. A user accesses a target and is presented with an authentication code and an address, and the user sends a message containing the authentication code to that address. Alternatively, the user is pre-supplied with an address and is presented only with an authentication code when the user accesses the target. The user's identity is authenticated by comparing an aspect of the metadata of the message with known metadata aspects, and the user is authenticated by comparing the authentication key presented to the user with the one received in the message. Both the user and the user's identity are authenticated in a single step without requiring the user to input any unique user credential.

主权项

1. A method of utilizing a user-operated device to authenticate a user with respect to a target service, comprising:
presenting, to a target user interface, an authentication passkey and an authentication address without first requiring the user to provide a unique user credential; receiving, from the user-operated device, a message addressed to the authentication address, and comprising a test passkey and a device identifier; detecting a similarity between the test passkey and the authentication passkey; identifying the user-operated device as an authorized device by comparing the device identifier against a stored set of identifiers; and authorizing the target user interface to access the target service.