Silent Multi-Factor Authentication

A method performed by a domain name system (DNS) server in a communication network for facilitating silent multi-factor authentication of a user of an application, the method comprising:

• receiving, from a communication device on which the application executes, a DNS query requesting the DNS server to resolve a domain name that is generic for some second factor server of some communication network;
• resolving the domain name into an address of a second factor server in the communication network that is configured to generate a second factor for authenticating the user of the application;
• and
• transmitting, to the communication device, a DNS response that indicates the address of the second factor server in the communication network.

A method performed by a second factor server in a communication network for facilitating silent multi-factor authentication of a user of an application, the method comprising:

• receiving, from a communication device on which the application executes, a request for a second factor for authenticating the user of the application;
• responsive to the request, generating the second factor using subscription credentials based on which the communication device accesses the communication network, wherein the second factor is generated to be specific to a connection or session established based on the subscription credentials;
• and
• transmitting the second factor to the communication device in response to the request.

A method performed by aggregator equipment for facilitating silent multi-factor authentication of a user of an application, the method comprising:

• receiving, from an application server for the application, a request to verify a second factor for authenticating the user of the application, wherein the request includes the second factor and subscription information associated with a subscription of the user to a communication network;
• identifying, from the second factor or from the subscription information, a communication network that is generator and/or verifier of the second factor;
• performing a verification procedure with the identified communication network, using the second factor and the subscription information included in the request, in an attempt to verify the second factor as authenticating the user of the application;
• and
• transmitting a response to the request indicating whether or not the second factor is verified.

A method for silent multi-factor authentication of a user of an application, the method comprising:

• transmitting, by a communication device on which the application executes, a first factor for authenticating the user of the application to an application server for the application;
• receiving, at the communication device, from the application server, a domain name to which the communication device is redirected for obtaining a second factor for authenticating the user of the application to the application server, wherein the domain name is generic for some second factor server of some communication network;
• transmitting, by the communication device, to a domain name system (DNS) server of a communication network to which the communication device has subscription credentials, a DNS query requesting the DNS server to resolve the domain name;
• receiving, by the communication device, a response to the DNS query indicating an address of a second factor server in the communication network;
• transmitting, by the communication device, to the address of the second factor server in the communication network, a request for a second factor for authenticating the user of the application;
• responsive to the request, generating, by the second factor server, the second factor using subscription credentials based on which the communication device accesses the communication network, wherein the second factor is generated to be specific to a connection or session established based on the subscription credentials;
• transmitting the second factor from the second factor server to the communication device in response to the request;
• transmitting the second factor from the communication device to the application server for authenticating the user of the application to the application server;
• receiving, at aggregator equipment, from the application server, a request to verify the second factor, wherein the request includes the second factor and subscription information associated with a subscription of the user to the communication network;
• identifying, by the aggregator equipment, from the second factor or the subscription information, the communication network as generator and/or verifier of the second factor;
• performing, by the aggregator equipment, a verification procedure with the communication network, using the second factor and the subscription information included in the request, in an attempt to verify the second factor as authenticating the user of the application;
• and
• transmitting a response to the request from the application server indicating whether or not the second factor is verified.