Method and system for authentication and encryption

A computerized apparatus having a processor, the processor configured to perform:

• steps of an enrollment phase, comprising:
• retrieving information related to a trigger subject previously provided by a user of a device;
• based on the information, generating at least one question related to the trigger subject, and determining at least one potential answer to the at least one question, wherein the trigger subject is concealed within the at least one question and the at least one potential answer;
• generating a first token and transmitting the first token to the device;
• generating a second token and using the second token for encrypting data related to the user or the device;
• and
• deleting the second token;
• and
• steps of an account setting phase, comprising:
• regenerating the at least one question and the at least one potential answer from the information;
• regenerating at least the first token;
• transmitting the at least one question to the user;
• receiving from the user an answer to the at least one question;
• upon verifying that the answer being in line with the at least one potential answer and that the first token provided by the device is correct:
• upon the second token not being regenerated, regenerating the second token;
• transmitting to the device the second token, to be used by the device in communication for receiving the service or data;
• and
• verifying deletion of the second token from the user's device.

A computer program product comprising a non-transitory computer readable storage medium retaining program instructions configured to cause a processor to perform actions, which program instructions implement:

• steps of an enrollment phase, comprising:
• retrieving information related to a trigger subject previously provided by a user of a device;
• based on the information, generating at least one question related to the trigger subject, and determining at least one potential answer to the at least one question, wherein the trigger subject is concealed within the at least one question and the at least one potential answer;
• generating a first token and transmitting the first token to the device;
• generating a second token and using the second token for encrypting data related to the user or the device;
• and
• deleting the second token;
• and
• steps of an account setting phase, comprising:
• regenerating the at least one question and the at least one potential answer from the information;
• regenerating at least the first token;
• transmitting the at least one question to the user;
• receiving from the user an answer to the at least one question;
• upon verifying that the answer being in line with the at least one potential answer and that the first token provided by the device is correct:
• upon the second token not being regenerated, regenerating the second token;
• transmitting to the device the second token, to be used by the device in communication for receiving the service or data;
• and
• verifying deletion of the second token from the user's device.