CPC H04L 63/0884 (2013.01) [H04L 63/0823 (2013.01); H04L 63/107 (2013.01); H04L 63/126 (2013.01)] | 21 Claims |
1. A method for authenticating user credentials, the method comprising:
receiving, from a user device, a request for access to a service that requires valid user credentials, wherein a plurality of user credentials are stored on the user device;
determining, based on the received request, which aspect of a user credential from one of the plurality of user credentials is to be satisfied to grant access to the requested service, wherein the aspect of the user credential is a portion of the user credential that is stored in the user device;
transmitting, to the user device, a request for information related to the aspect of the user credential;
receiving, from the user device, information related to the aspect of the user credential that was stored on the user device, wherein the information has been signed using a key associated with the user device;
verifying the key used to sign the information by the user device;
in response to verifying the key used to sign the information, determining whether the aspect of the user credential has been satisfied based on the received information; and
in response to determining that the aspect of the user credential has been satisfied, granting access to the service.
|