Mobile Security Fob

A computer-implemented method comprising:

• receiving, from a client computing system by one or more computer servers, a request to perform an action on the one or more computer servers, with the request comprising information identifying a user associated with the client computing system;
• retrieving by the one or more computer servers a user profile of the user of the client computing system, with the user profile including a hardware identifier assigned to a mobile security fob that uniquely identifies the mobile security fob, with the mobile security fob being paired with the client computing system;
• generating, by the one or more computer servers, afirst authentication token to authenticate that the user is authorized to perform the action;
• transmitting the first authentication token to the client computing system for transmission of the first authentication token to the mobile security fob that is paired with the client computing system;
• receiving, from one or more authentication servers by the one or more computer servers, a decrypted version of an authentication token and a hardware identifier;
• determining whether the generated first authentication token matches the received, decrypted authentication token and whether the received, hardware identifier matches the hardware identifier included in the user profile;
• and
• performing, by the one or more computer servers, the requested action when there are matches between the authentication tokens and the hardware identifiers.

A computer program product tangibly stored on a computer readable storage device, the computer program product comprising instructions for causing one or more computer servers to:

• receive, from a client computing system, a request to perform an action on the one or more computer servers, with the request comprising information identifying a user associated with the client computing system;
• retrieve a user profile of the user of the client computing system, with the user profile including a hardware identifier assigned to a mobile security fob that uniquely identifies the mobile security fob, with the mobile security fob being paired with the client computing system;
• generate a first authentication token to authenticate that the user is authorized to perform the action;
• transmit the first authentication token to the client computing system for transmission of the first authentication token to the mobile security fob that is paired with the client computing system;
• receive, from one or more authentication servers, a decrypted version of an authentication token and a hardware identifier;
• determine whether the generated first authentication token matches the received, decrypted authentication token and whether the received, hardware identifier matches the hardware identifier included in the user profile;
• and
• perform the requested action when there are matches between the authentication tokens and the hardware identifiers.

An apparatus comprising:

• a processor;
• and
• a computer program product stored on a computer readable medium, the computer program product comprising instructions for causing the processor to:
• receive, from a client computing system, a request to perform an action on the one or more computer servers, with the request comprising information identifying a user associated with the client computing system;
• retrieve a user profile of the user of the client computing system, with the user profile including a hardware identifier assigned to a mobile security fob that uniquely identifies the mobile security fob, with the mobile security fob being paired with the client computing system;
• generate a first authentication token to authenticate that the user is authorized to perform the action;
• transmit the first authentication token to the client computing system for transmission of the first authentication token to the mobile security fob that is paired with the client computing system;
• receive, from one or more authentication servers, a decrypted version of an authentication token and a hardware identifier;
• determine whether the generated first authentication token matches the received, decrypted authentication token and whether the received, hardware identifier matches the hardware identifier included in the user profile;
• and
• perform the requested action when there are matches between the authentication tokens and the hardware identifiers.