SYSTEM AND METHODS FOR ONLINE AUTHENTICATION

摘要

A method of authenticating a network client to a relying party computer via a computer server, the network client being configured to communicate with the relying party computer and the computer server, the network client being further configured to communicate with a token manager, the token manager being configured to communicate with a hardware token interfaced with the token manager, the method comprising the computer server: receiving a transaction code from one of the token manager and the network client via a first communications channel; receiving a transaction request from the relying party computer via a second communications channel distinct from the first communications channel, wherein the transaction request comprises a transaction pointer that is associated with the hardware token; correlating the transaction pointer with the transaction code to identify the token manager; transmitting an authentication request message to one of the token manager and the network client via the first communications channel; polling for a response to the authentication request message from one of the token manager and the network client; receiving a credential from one of the token manager and the network client via the first communications channel; and transmitting an authorization signal to the relying party computer in response to the transaction request in accordance with a determination of validity of the credential and data originating from the hardware token, the authorization signal facilitating authentication of the network client to the relying party computer. WO 2010/094125 PCT/CA2010/000227 Z Co