Authentication method and system

Abstract

A method of performing user authentication by a mobile device with an authentication client and an authentication server with a rules engine. A security validator intercepts an authentication request sent by the client to the server and validates the authentication request by applying security conditions to it. The security validator blocks the request or forwards the request according to the validation. The system includes a proxy server, and if validation is positive the validator sends the authentication request to the proxy server and the proxy server routes it on to the authentication server. In this case the authentication client is disabled from directly routing an authentication request to the authentication server if the security validator is not present or is tampered with.

Dependencies are inferred from the claim text.