Secure login using augmented single factor split key asymmetric cryptography

A system for authenticating a user of a communications network, comprising:

• a network interface configured to receive, via the network, a cookie including a user identifier and an augmenting factor transformed with one of a private key and a public key of a first asymmetric crypto-key or with a symmetric crypto-key;
• and
• a processor configured to (i) recover the augmenting factor, from the transformed augmenting factor included in the received cookie, with the other of the private key and the public key of the first asymmetric crypto-key or with the symmetric crypto-key, (ii) validate the recovered augmenting factor, and (iii) direct transmission of a customized login page corresponding to the user identifier included in the received cookie only if the recovered augmenting factor is validated;
• wherein the network interface is further configured to (i) transmit, via the network in accordance with the processor directive, the customized login page and (ii) receive, from the user via the network responsive to the transmission of the customized login page, a factor;
• wherein the processor is further configured to (i) generate a first key portion based on the received factor and the recovered augmenting factor, and (ii) validate the generated first key portion based on a second key portion of one of a private key and a public key of a second asymmetric crypto-key associated with the user and on the other of the private key and the public key of the second asymmetric crypto-key, to thereby authenticate the user;
• wherein the augmenting factor is one of a private key and a public key of a third asymmetric crypto-key, and the processor is further configured to validate the recovered augmenting factor based on the other of the private key and the public key of the third asymmetric crypto-key.

A networked system for authenticating a user of a communications network, comprising:

• a network station, associated with the user, configured to transmit, via the network, a cookie including a user identifier and an augmenting factor transformed with one of a private key and a public key of a first asymmetric crypto-key or with a symmetric crypto-key;
• and
• a network station, associated with an authenticating entity, configured to (i) recover the augmenting factor from the transformed augmenting factor included in the transmitted cookie, with the other of the private key and the public key of the first asymmetric crypto-key or with the symmetric crypto-key, (ii) validate the recovered augmenting factor, and (iii) transmit, via the network, a customized login page corresponding to the user identifier included in the received cookie only if the recovered augmenting factor is validated;
• wherein the user network station is further configured to transmit a factor via the network responsive to the transmitted customized login page;
• wherein the authenticating entity network station is further configured to (i) generate a first key portion based on the transmitted factor and the recovered augmenting factor, and (ii) validate the generated first key portion based on a second key portion of one of a private key and a public key of a second asymmetric crypto-key associated with the user and on the other of the private key and the public key of the second asymmetric crypto-key, to thereby authenticate the user;
• wherein the augmenting factor is one of a private key and a public key of a third asymmetric crypto-key, and the authenticating entity network station is further configured to validate the recovered augmenting factor based on the other of the private key and the public key of the third asymmetric crypto-key.