Method and apparatus for secure distribution of authentication credentials to roaming users

An apparatus for obtaining, in a networked environment, an authentication credential usable to conduct an electronic transaction, comprising:

• (a) a network interface configured to:
• (i) access, over a network, a server to request therefrom a predetermined authentication credential, said authentication credential:
• (A) in existence at said server prior to said request therefor,
• (B) uniquely identifying a requestor thereof, and
• (C) suitable for use in conducting an electronic transaction, and
• (ii) receive, from the server, a challenge soliciting a predetermined response associated with said requestor of said authentication credential;
• (b) an user interface configured to receive, from said requestor, an answer to said challenge;
• (c) said network interface configured to receive said authentication credential in response to a determination by said server that said answer satisfies said challenge;
• and
• (d) a memory configured to store said authentication credential at said requestor's computing device;
• said apparatus being usable by said requestor to obtain repeated, on-demand access from a plurality of requestor locations.

A computer-implemented method for providing, in a networked environment, an authentication credential usable to conduct an electronic transaction, comprising:

• (a) receiving from a requestor, over a network, a request for a predetermined authentication credential, said authentication credential:
• (i) in existence at said server prior to said request therefor,
• (ii) uniquely identifying a requestor thereof, and
• (iii) suitable for use in conducting an electronic transaction;
• (b) transmitting, to said requestor, a challenge soliciting a predetermined response associated with said requestor;
• (c) receiving an answer to said challenge;
• (d) determining that said answer satisfies said challenge;
• and
• (e) transmitting said authentication credential for said requestor;
• said method being operable to process repeated, on-demand authentication credential requests by said requestor at a plurality of requestor locations.

An apparatus for providing, in a networked environment, an authentication credential usable to conduct an electronic transaction, comprising:

• (a) a network interface configured to:
• (i) receive from a requestor, over a network, a request for a predetermined authentication credential, said authentication credential:
• (A) in existence at said apparatus prior to said request therefor;
• (B) uniquely identifying a requestor thereof;
• and
• (C) suitable for use in conducting an electronic transaction,
• (ii) transmit a challenge soliciting a predetermined response associated with said requestor, and
• (iii) receive, from said holder, an answer to said challenge;
• (b) logic configured to determine whether said answer satisfies said challenge;
• and
• (c) a memory configured to store said authentication credential to be released for said requestor;
• said apparatus being operable to process repeated, on-demand authentication credential requests by said requestor at a plurality of requestor locations.