Method of preventing web browser extensions from hijacking user information

A method for authenticating a user to a server, comprising the user connecting to the server from a browser running on a computer, the user being equipped with a portable authentication token, the token comprising

• a. connection means for connecting to the computer,
• b. browser communication means for communicating with the browser,
• c. user authentication means for authenticating the user of the token to the server,
• in response to the user connecting to the server, operating the user authentication means via the browser communication means wherein the user authentication means are set to authenticate the user by communicating with the server through the browser;
• validating the user authentication by establishing a communication channel between the token and the server, the communication channel bypassing the browser;
• and
• sending association data to the server through the browser, and sending the same association data to the server via the communication channel.

A system comprising a portable authentication token, a server, and a computer running a browser, the token comprising

• a. connection means for connecting to the computer,
• b. browser communication means for communicating with the browser,
• c. user authentication means for authenticating a user of the token to the server,
• wherein the user authentication means are triggered via the browser communication means when the user connects to the server from the browser of the computer,
• wherein the user authentication means are set to authenticate the user by communicating with the server through the browser,
• out-of-band token communication means set to validate user authentication by establishing a communication channel between the token and the server, the communication channel bypassing the browser;
• wherein the user authentication means are set to send association data to the server through the browser, and wherein the out-of-band token communication means are set to send the same association data to the server.