Secure user authentication with improved one-time-passcode verification

摘要

Generally, this disclosure provides systems, devices, methods and computer readable media for secure user authentication with improved OTP verification. The device may include an attribute collection module configured to collect attributes associated with the device; a client trust module configured to identify a user of the device, associate a user ID with the user and transmit the user ID and the collected attributes to a trust broker system; the client trust module further configured to receive a device ID from the trust broker system, the device ID associated with a pairing of the user ID and the attributes; and a client OTP generation module configured to generate an OTP and further configured to transmit the OTP and the device ID to an authentication server.

主权项

1. A method for secure user authentication, said method comprising:
receiving one or more attributes associated with a client device and further configured to receive a user identification (ID) indicating the identity of a user of said client device; generating a device record comprising a pairing of said one or more attributes and said user ID; generating a device ID uniquely referencing said device record; transmitting said device ID to said client device; calculating a trust level associated with said client device, said trust level based on said user ID and said one or more attributes; and transmitting said device ID to an authentication server based on said trust level, wherein said authentication server is configured to authenticate said user of said client device.