NONREDIRECTED AUTHENTICATION

摘要

A method for authenticating a user at a service requester is provided. A request for a secure transaction is received from the user at the service requester. The user then generates a token using a token generator. The token is generated using secure information associated with the user. The token is received at the service requester and the service requester can then provide the token to a service provider for authentication. The service provider is capable of authenticating the token and generating a result for the authentication. The result is then sent to the service requester, which then processes the transaction based on the authentication result. Accordingly, the user may be authenticated by the service provider without the secure information associated with the user being accessible to the service requester and the service provider does not need to generate the token received from the user.