A method of authentication by leveraging mobile devices for expediting user login and registration processes, the method comprising steps of:
- (A) providing at least one remote server, wherein the remote server hosts a relying party with a login feature;
- (B) providing a portable computing device, wherein the portable computing device is uniquely associated with an authentication initiation code (AIC) that is dynamically generated and stores at least one secure vault of personal identification data;
- (C) displaying the AIC with the portable computing device;
- (D) receiving a user entry of the AIC through the login feature with the relying party and creating a new secure login session associated with the AIC;
- (E) locating the portable computing device associated with the AIC and sending an authentication request from the remote server to the portable computing device;
- (F) searching through the secure vault with the portable computing device to extract user verification data for the relying party, wherein the user verification data is based on a digital signature that is generated by using a private key corresponding to a public key associated with a user identity record stored in the portable computing device;
- (G) prompting a user to approve or to deny the authentication request with the portable computing device, if the user verification data for the relying party is found within the secure vault;
- (H) sending the user verification data from the portable computing device to the remote server to grant access to restricted portions of the relying party, if the authentication request is approved through the portable computing device;
- providing the at least one remote server as a hosting device and an authentication server, wherein the hosting device hosts the relying party, and wherein the authentication server manages the login feature for the relying party;
- randomly generating an anti-spoofing visual with the authentication server;
- displaying the anti-spoofing visual with the login feature before step (D);
- sending the anti-spoofing visual from the remote server to the portable computing device as a part of the authentication request;
- displaying the anti-spoofing visual with the portable computing device before step (G);
- providing a plurality of secure vaults as the at least one secure vault, wherein each of the plurality of secure vaults is accessible through a security feature;
- searching through the plurality of secure vaults with the portable computing device during step (F) in order to locate the user verification data for the relying party within a specific vault from the plurality of secure vaults;
- prompting to execute the security feature for the specific vault with the portable computing device;
- and
- granting access to the user verification data with the portable computing device, if the security feature for the specific vault is executed with the portable computing device.