Method and system for user authentication for computing devices utilizing PKI and other user credentials

摘要

A system and method for user authentication utilizing PKI credentials and user credentials on an electronic device comprising a mobile communication device, smart phone, a computer or other computing device.

主权项

1. A computer-implemented method for authenticating a user for accessing an online application running on an application server from a computing device associated with the user, said method comprising the steps of:
submitting a login request to the application server; transmitting a random session identifier from the application server to the computing device; prompting the user to enter one or more credentials including a passcode; retrieving an encrypted private digital signature key stored at the computing device and decrypting said encrypted private digital signature key with said passcode; signing said random session identifier with said decrypted private digital signature key; transmitting said signed random session identifier and said one or more credentials to the application server; verifying said signed random session identifier and said one or more credentials; and authorizing the login request based on the verification of said signed random session identifier and said one or more credentials associated with the user.