Shared registration multi-factor authentication tokens

.A method for authentication, the method comprising:

• receiving a transform command, associated with a registry object, and an authentication token,
• wherein the transform command includes one or more actions, associated with the registry object;
• and
• wherein an authentication token that includes the registrant credential identifier associated with
• a registrant credential requested by a registrant for binding to a registry object, and
• a digital signature that attests the registrant credential is valid;
• validating the digital signature of the authentication token;
• determining, by a processor, that the registrant credential identifier corresponds to a credential identifier associated with the registry object;
• and
• authorizing the transform command based upon validating the digital signature and determining that registrant credential identifier corresponds to the registrant credential identifier associated with the registry object.

A system for authentication, the system comprising:

• a receiver device that receives a request to generate an authentication token with a registrant credential and a registrant credential identifier requested by a registrant for binding to a registry object, wherein the registrant credential identifier identifies a registrant as being associated with the registrant credential;
• an authentication token generator that causes an authentication token to be created that includes the registrant credential identifier and a digital signature;
• a transform command processor that receives a transform command and the authentication token wherein the transform command includes one or more actions, associated with a registry object;
• a validation device that validates the digital signature of the authentication token and determines that the registrant credential identifier associated with the authentication token corresponds to a credential identifier associated with the registry object;
• and
• an authorization device that authorizes the transform command processor to process the transform command based upon validating the digital signature and determining that the registrant credential identifier corresponds to the credential identifier.

A non-transitory, computer-readable storage medium including a plurality of instructions that, when executed by a processor, causes the processor to:

• receive a request for an authentication token, the request including a registrant credential and a registrant credential identifier requested by a registrant for binding to a registry object, wherein the registrant credential identifier identities a registrant as being associated with the registrant credential;
• cause the authentication token to be obtained, the authentication token including the registrant credential identifier and a digital signature that attests the registrant credential is valid;
• receive the authentication token and a transform command associated with a registry object, wherein the transform command includes one or more actions, associated with the registry object;
• validate the digital signature of the authentication token;
• determine that the registrant credential identifier within the authentication token corresponds to a credential identifier associated with the registry object;
• and
• authorize the transform command based upon verifying the digital signature and determining that the registrant credential identifier corresponds to the credential identifier associated with the registry object.