Remotable information cards

A method, comprising:

• requesting access to a resource of a relying party from an untrusted client;
• receiving a request on the untrusted client to invoke a card selector from an accessor function, wherein the accessor function interfaces between the untrusted client and the relying party, and the accessor function is on a separate machine from the untrusted client, an identity provider, and the relying party;
• invoking the card selector on the untrusted client by the accessor function;
• authenticating a user of the untrusted client at the identity provider;
• transmitting from the untrusted client to the identity provider a selection of an information card from the user of the untrusted client via the card selector;
• receiving at the untrusted client a security token from the identity provider, the security token generated from the selected information card;
• transmitting the security token from the untrusted client to the relying party via the accessor function;
• and
• gaining access to the resource of the relying party by the untrusted client after authentication of the user by the relying party using the security token.