System and method for user authentication

摘要

A system and method for providing authentication of a user is disclosed. The use of a non-confidential and unique user identification number and a temporary access code separates authentication of the user from transmission of any user passwords or user-identifiable data, as well as provides a ubiquitous means to authenticate the user with unrelated organizations, without any information passing between those organizations.

主权项

1. A computer-implemented method of authenticating a user, the method comprising:
generating at a validation server a unique user ID number and matching encryption key corresponding to the user; transmitting the unique user ID number and matching encryption key to a user device; generating a temporary access code based on the encryption key on the user device; providing the unique user ID number and temporary access code to at least one organization server adapted to run on at least one computer separately maintained by independent host organizations; transmitting the unique user ID number and temporary access code from the at least one organization server to the validation server; generating the encryption key matching the unique user ID number and generating a second code on the validation server in the same fashion as the temporary access code was generated; performing on the validation server a verification of the unique user ID number and temporary access code by comparing the second code and the temporary access code to obtain a validation result; transmitting the validation result to the at least one organization server; and authenticating the user at the at least one organization based on the validation result, wherein the validation server is adapted to run on at least one computer that is maintained by a first organization that is independent and separate from the independent host organizations and their respective organization servers, and wherein the unique user ID is non-secret and shared with each of the independent host organizations.