Mutual authentication with integrated user muscle memory

An authentication server, comprising:

• a communication interface to receive an account identifier of a user from a client device;
• and
• a processing circuit coupled to the communication interface, the processing circuit is configured to:
• obtain a plurality of starting symbols associated with the account identifier, wherein the plurality of starting symbols are distinct for different account identifiers and the same plurality of starting symbols is obtained every time the same account identifier is received from the client device;
• and
• send, to the client device, the plurality of starting symbols associated with the account identifier.

A method operational at a client device, comprising:

• sending an account identifier of a user to an authentication server;
• receiving a plurality of starting symbols associated with the account identifier, wherein the plurality of starting symbols are distinct for different account identifiers and the received plurality of starting symbols are the same every time the account identifier is sent from the client device;
• and
• displaying the plurality of starting symbols within an interactive input interface to allow the user to select a security code.

A client device, comprising:

• a display device;
• a communication interface to communicate with an authentication server;
• and
• a processing circuit coupled to the communication interface and the display device, the processing circuit configured to:
• send an account identifier of a user to the authentication server;
• receive a plurality of starting symbols associated with the account identifier, wherein the plurality of starting symbols are distinct for different account identifiers and the received plurality of starting symbols are the same every time the account identifier is sent from the client device;
• and
• display, on the display device, the plurality of starting symbols within an interactive input interface to allow the user to select a security code.