Secure authentication and transaction system and method

A method of authenticating a plurality of clients in an application server site, comprising the steps of:

• receiving a request for an online activity over a public network from one of the clients,
• redirecting the client to an authentication server for authentication,
• receiving an indication from the authentication server that the client is authenticated, and
• enabling the online activity for the client over the public network when instructed by the authentication server, wherein the authentication server is configured to:
• store first authentication-enabling data for each client and information regarding one or more online activities enabled for each client,
• receive second authentication-enabling data uniquely identifying a client token from the client in connection with the request,
• authenticate each client based on the first authentication-enabling data and the second authentication-enabling data, and
• enable the online activity for the client only if the client is authenticated and the application server site is legitimate.
• wherein the client token is configured to store information identifying an internet protocol address of the authentication server and to enable the one or more online activities when instructed by the authentication server.

A portable client token system for use in accessing one or more application server sites over a public network, comprising:

• a memory for storing a unique identifier and an internet protocol address of an authentication server,
• a software module for generating first client authentication-enabling data based on the unique identifier and enabling an online activity at the one or more application server sites when instructed by the authentication server, and
• a communication module for connecting to, and sending the first client authentication-enabling data, over the public network to the authentication server,
• wherein the authentication server is configured:
• to store second client authentication-enabling data for the portable client token system,
• to authenticate a client in possession of the portable client token system based on the first client authentication-enabling data and the second client authentication-enabling data, and
• to enable the online activity for the client at one or more application server sites over a public network only when the one or more application server sites are legitimate.

A method of authenticating a plurality of clients in an authentication server, comprising the steps of:

• storing first authentication-enabling data for each of the clients and information concerning one or more activities at an application server site enabled over a public network;
• receiving a request for authenticating one of the clients over the public network to allow the client's access to the application server site over the public network,
• the request containing second authentication-enabling data uniquely identifying a client token in possession by the client;
• authenticating the client based on the first authentication-enabling data and the second authentication-enabling data;
• and
• enabling the one or more activities for the client over the public network only when the application server site is legitimate, if the client token is authenticated;
• wherein:
• the client token, upon actuation, is configured to automatically connect to the authentication server based on an internet protocol address stored therein and thereafter to send the second authentication-enabling data.

A system for authenticating a client and an application, for enabling the user to obtain access through the authenticated client to the authenticated application, for enabling execution of an authenticated transaction, comprising:

• an authentication server, comprising server software;
• a client, able to be uniquely identified by a unique client identifier, and able to be authenticated by the authentication server;
• an application, comprising integration server software, able to be authenticated by the authentication server, and able to confirm with the authentication server that the uniquely identified client has been authenticated;
• and
• a client token, able to authenticate the uniquely identified client to the authentication server, to create a fully authenticated connection where both the client and the application have been authenticated by the authentication server.

A method of authenticating a client and an application, for enabling the user to obtain access through the authenticated client to the authenticated application, for enabling execution of an authenticated transaction, in a system which comprises an authentication server, comprising server software, a client, able to be uniquely identified by a unique client identifier, and able to be authenticated by the authentication server, an application, comprising integration server software, able to be authenticated by the authentication server, and able to confirm with the authentication server that the uniquely identified client has been authenticated, and a client token, able to authenticate the uniquely identified client to the authentication server, to create a fully authenticated connection where both the client and the application have been authenticated by the authentication server, wherein the method comprises:

• enabling the application to be authenticated by the authentication server, and to confirm with the authentication server that the uniquely identified client has been authenticated;
• enabling client to be uniquely identified by the unique client identifier, and to be a authenticated by the authentication server;
• and
• enabling the client token to authenticate the uniquely identified client to the authentication server, to confirm with the authentication server that the uniquely identified client has been authenticated.