Method for mapping at least two authentication devices to a user account using an authentication server

A method for mapping at least two authentication devices to a user account using an authentication server, comprising the steps of:

• connecting each authentication device to the authentication server using a secured communication channel;
• and
• mapping said authentication devices to the account of said user on the authentication server,
• prior to mapping or simultaneously with mapping of the authentication devices to the single user account on the authentication server, a first authentication device transmits a one-time secret to a second authentication device directly, without using the authentication server, and
• subsequently transmitting an authentication device secret, encrypted using the one-time secret, from the first authentication device to the authentication server using a secured communication channel and from the authentication server to the second authentication device, and the second authentication device decrypts the authentication device secret using the one-time secret, and stores the authentication device secret on the second authentication device wherein, if the mapping is the first mapping of another authentication device, the first authentication device generates the authentication device secret and
• a first authentication device transmits the authentication device secret stored on the first authentication device to said another authentication device at each following mapping of another authentication device,
• during any transfer of data between the authentication devices mapped to the account of said user, transmitting the data from a first authentication device to the authentication server using a secured communication channel and transmitting said data from the authentication server to another authentication device mapped to the account of said user using a secured communication channel when the other authentication device creates the said secured communication channel and
• wherein said data comprising sensitive information are transmitted among authentication devices mapped to the account of said user, encrypting at least the sensitive information by the authentication device secret,
• wherein the authentication device secret is known only to the authentication devices which have been mapped to the same user account, and the authentication device secret is not known by other devices or the authentication servers.