Method for securing electronic transactions

A method comprising:

• registering by a first system a first user, comprising retrievably storing authentication data for use in authenticating the first user to the first system;
• registering by a second system the first user, comprising associating a unique device identifier that is unique to both a mobile electronic device associated with the first user and a specific instance of a security application provided thereon;
• requesting by the first user to the first system an electronic transaction requiring authentication of the first user by the first system;
• identifying the first user by the first system based on the retrievably stored authentication data and based on data provide by the first user in response to an authentication challenge by the first system;
• subsequent to identifying the first user, transmitting a request by the first system to the second system, the request including the unique device identifier and requesting a secondary authentication of the first user;
• sending from the second system to the mobile electronic device having the specific instance of the security application provided thereon and associated with the unique device identifier, a push notification prompting the first user to provide a secondary authentication response via the mobile electronic device associated with the unique device identifier;
• receiving by the second system from the mobile electronic device associated with the unique identifier the secondary authentication response provided by the first user;
• and
• in dependence upon the secondary authentication of the first user received from the mobile electronic device associated with the unique identifier being authenticated;
• and
• subsequent to receiving the secondary authentication of the first user, performing by the first system the requested electronic transaction for the first user.

A method comprising:

• associating a mobile electronic device with a first user;
• installing on the mobile electronic device a security application that supports in-application push notifications;
• registering, by a security computer, the mobile electronic device as a security token for use by the first user for authorizing electronic transactions by associating a unique device identifier with the mobile electronic device, the unique device identifier comprising at least one of a digital security certificate and a device token, the unique device identifier uniquely associated with the instance of the security application on the mobile electronic device and with the mobile electronic device;
• receiving at the security computer, from a first transaction system, a first request comprising the unique device identifier for authorization to complete a first electronic transaction;
• receiving at the security computer, from a second other transaction system, a second request comprising the unique device identifier for authorization to complete a second electronic transaction;
• sending from the security computer to the mobile electronic device a first push notification prompting the first user to provide a first response authorizing the first electronic transaction;
• sending from the security computer to the mobile electronic device a second push notification prompting the first user to provide a second response authorizing the second electronic transaction;
• and
• providing from the security computer:
• a first authorization to the first transaction system in dependence upon receiving the first response from the first user authorizing the first electronic transaction;
• and
• a second authorization to the second other transaction system in dependence upon receiving the second response from the first user authorizing the second electronic transaction.

A method comprising:

• associating a mobile electronic device with a first user;
• installing on the mobile electronic device a security application that supports in-application push notifications;
• registering, by a first computer system, the mobile electronic device as a security token for use by the first user for authorizing, by the security application, electronic transactions, registering comprising storing a unique device identifier associated with the instance of the security application installed on the mobile electronic device and with the mobile electronic device;
• receiving an electronic transaction request from the first user, the electronic transaction request associated with a security level of a plurality of different security levels;
• transmitting to the mobile electronic device associated with a unique device identifier provided for identifying a destination for transmitting a push notification via at least the push notification a request for N responses each including different authentication information, wherein the number N is greater than 1 and is determined based on the security level that is associated with the electronic transaction request;
• and
• in dependence upon receiving at the first computer system an expected response from the first user for each of the N responses, via the mobile electronic device, authorizing the electronic response by the first computer system.