Authentication of devices

A computer readable storage medium comprising computer executable instructions that, in response to execution, cause a computing system to perform operations, comprising:

• determining, at a banking server that stores financial information related to one or more user accounts, an authentication level of a mobile device;
• in response to determining that the authentication level of the mobile device meets a condition for a predetermined function, authenticating the mobile device and generating a mobile device identifier and at least one key;
• communicating the mobile device identifier and the at least one key to the mobile device;
• communicating a first random code and a session identifier to the mobile device in response to validating a log-in request received from the mobile device;
• receiving a transaction request having bank operation data encrypted with a first hash code;
• determining an authorization level associated with the transaction request;
• and
• authorizing the mobile device to conduct a transaction with the one or more user accounts as a function of the authorization level.

A system comprising:

• a banking server including a customer financial data store having financial information related to one or more user accounts stored on the banking server;
• an authentication factor component configured to authenticate a mobile device and provide at least two authentication factors to the mobile device in response to an authentication request from the mobile device;
• and
• a code generator configured to generate a random code in response to a log-in request from the mobile device and communicate the random code to the mobile device,
• wherein the banking server is further configured to receive at least one authentication factor of the at least two authentication factors, a transaction request with bank operation data and the random code from the mobile device, to verify the random code received and determine an authorization level of a transaction associated with the transaction request from the mobile device.

A system comprising:

• means for determining an authentication level of a mobile phone on a banking server;
• means for generating a mobile phone identifier and a secret key that is associated with the mobile phone and storing the mobile phone identifier and the secret key to the mobile phone;
• means for authorizing the mobile phone to execute a transaction associated with one or more user accounts that includes means for forming a first random code and communicating the first random code to the mobile phone in response to receiving a log-in request from the mobile phone;
• means for receiving the mobile phone identifier and a transaction request with a first hash code from the mobile phone in response to communicating the first random code;
• wherein the means for authorizing includes determining an authorization level associated with the transaction that is requested in the transaction request based on a calculation of a second hash code with values stored on the banking server for the secret key and the first random code and a comparison of the first hash code and the second hash code.

A method, comprising:

• generating an authentication request, by a mobile device, to access at least one user account of one or more user accounts of a banking server and to execute a transaction related to the at least one user account of one or more user accounts;
• in response to the authentication request, receiving a mobile device identifier and a secret key that are associated with the mobile device from the banking server;
• generating a log-in request to execute the transaction;
• in response to the log-in request, receiving a random number from the banking server;
• calculating a symmetrical key and a hash code based on a combination of the secret key and the random number;
• generating a transaction request with an encrypted message from the symmetrical key;
• communicating the transaction request with the encrypted message and the hash code to the banking server;
• and
• executing the transaction related to the at least one user account of one or more user accounts in response to an authorization provided by the banking server based on the encrypted message and the hash code.

A mobile device, comprising:

• an interface component configured to generate an authentication request and receive, from a banking server, a mobile device identifier and a secret key that are unique to the mobile device in response to the authentication request;
• a cryptographic engine configured to generate a hash code and a symmetrical key with a received random number from the banking server and generate a transaction request with an encrypted message;
• and
• a communication module configured to communicate the hash code, the encrypted message and the mobile device identifier to the banking server, and to receive an authorization to execute a transaction in response to the transaction request.