Secure login using single factor split key asymmetric cryptography and an augmenting factor

A system for authenticating a user of a communications network, comprising:

• a network interface configured to receive, via the network, a cookie including a user identifier and an augmenting factor transformed with one of a private key and a public key of a first asymmetric crypto-key or with a symmetric crypto-key;
• and
• a processor configured to (i) recover the augmenting factor, from the transformed augmenting factor included in the received cookie, with the other of the private key and the public key of the first asymmetric crypto-key or with the symmetric crypto-key, and (ii) direct transmission of a customized login page corresponding to the user identifier included in the received cookie;
• wherein the network interface is further configured to (i) transmit, via the network in accordance with the processor directive, the customized login page and (ii) receive, from the user via the network responsive to the transmission of the customized login page, a factor;
• wherein the processor is further configured to generate a first key portion based on the received factor, and to validate (i) the generated first key portion based on a second key portion of one of a private key and a public key of a second asymmetric crypto-key associated with the user and on the other of the private key and the public key of the second asymmetric crypto-key and (ii) the recovered augmenting factor, to thereby authenticate the user;
• wherein the augmenting factor is one of a private key and a public key of a third asymmetric crypto-key and the processor is further configured to validate the recovered augmenting factor based on the other of the private key and the public key of the third asymmetric crypto-key.

A networked system for authenticating a user of a communications network, comprising:

• a network station, associated with the user, configured to transmit, via the network, a cookie including a user identifier and an augmenting factor transformed with one of a private key and a public key of a first asymmetric crypto-key or with a symmetric crypto-key;
• and
• a network station, associated with an authenticating entity, configured to (i) recover the augmenting factor from the transformed augmenting factor included in the transmitted cookie, with the other of the private key and the public key of the first asymmetric crypto-key or with the symmetric crypto-key, and (ii) transmit, via the network, a customized login page corresponding to the user identifier included in the received cookie;
• wherein the user network station is further configured to transmit a factor via the network responsive to the transmitted customized login page;
• wherein the authenticating entity network station is further configured to generate a first key portion based on the transmitted factor, and validate (i) the generated first key portion based on a second key portion of one of a private key and a public key of a second asymmetric crypto-key associated with the user and on the other of the private key and the public key of the second asymmetric crypto-key and (ii) the recovered augmenting factor, to thereby authenticate the user;
• wherein the augmenting factor is one of a private key and a public key of a third asymmetric crypto-key, and the authenticating entity network station is further configured to validate the recovered augmenting factor based on the other of the private key and the public key of the third asymmetric crypto-key.